Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
File:                     3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json)
Hash identifier:          uHpwvgEzsNsCC/LWB2d5WWS5PRhcHrk2q5z+wmoWBrI=
Subject key identifier:   1E:5C:55:51:65:A8:34:C5:F9:5C:BB:D6:C6:C1:3B:CF:02:53:17:CC
Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Certificate issuer:       /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Certificate serial:       43F3192C211085E0E1D8DBE74E0D0BC6BE9BA34C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
Manifest number:          17
Signing time:             Sat 05 Apr 2025 08:03:38 +0000
Manifest this update:     Sat 05 Apr 2025 07:58:38 +0000
Manifest next update:     Sun 06 Apr 2025 11:35:38 +0000
Files and hashes:         1: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: fG2QujiAzVLV27iY/duho6Y3YAkX4ZH2U2oXbtLfT3o=)
                          2: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=)
                          3: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f3:19:2c:21:10:85:e0:e1:d8:db:e7:4e:0d:0b:c6:be:9b:a3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
        Validity
            Not Before: Apr  5 07:58:38 2025 GMT
            Not After : Apr  6 11:35:38 2025 GMT
        Subject: CN=1E5C555165A834C5F95CBBD6C6C13BCF025317CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:a4:3d:4e:91:a9:07:ea:b1:16:5b:80:a9:
                    f5:9e:61:d0:fc:a3:26:f2:fa:6f:9f:5b:ce:30:d6:
                    27:4d:61:1b:12:05:59:53:fd:f0:78:f5:c7:85:b6:
                    a9:cf:9b:13:b1:b0:34:36:45:9c:87:83:28:42:cd:
                    3f:a2:0c:af:54:48:de:de:e4:ab:17:a0:9c:ec:c1:
                    0e:63:4d:26:4c:42:9f:a6:e3:45:45:b0:3b:81:38:
                    7a:0c:52:9b:03:18:d6:33:f0:ee:3c:30:1a:ae:e7:
                    c3:b1:0a:57:bf:ef:76:f6:da:a5:5d:aa:5d:28:49:
                    ee:3b:d2:b9:12:03:fc:b1:e0:8c:7d:a6:75:08:3d:
                    81:47:ff:b3:cd:c7:d4:64:bb:7f:b8:dc:86:0f:b0:
                    b4:6d:68:dd:84:1e:33:19:13:a1:20:57:8d:dd:cf:
                    af:49:28:1c:96:12:fd:93:8e:d0:33:31:a8:a6:ec:
                    93:b7:f5:95:5d:c8:6f:19:34:47:6f:cd:05:a2:96:
                    d4:33:e6:9d:7c:0b:5f:2a:64:ca:44:35:4b:de:4b:
                    99:96:02:61:7c:b4:4e:fd:4b:80:4b:ce:67:d4:4a:
                    5a:b9:98:56:ba:ee:ce:b8:31:82:f9:f5:7d:ca:ea:
                    2a:94:22:79:5f:f4:16:35:4f:5f:2e:be:af:a0:17:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5C:55:51:65:A8:34:C5:F9:5C:BB:D6:C6:C1:3B:CF:02:53:17:CC
            X509v3 Authority Key Identifier:
                keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:94:9f:e8:f6:a5:f5:53:e9:17:92:98:bb:fb:bc:82:54:e8:
         a1:92:e1:8a:fd:dc:86:b9:fa:d1:cf:05:24:dc:fe:a2:be:d2:
         8b:60:71:1a:a7:95:a9:7b:33:fa:6f:c2:1e:4d:e9:04:a2:3b:
         f6:17:1a:24:f5:79:32:69:d1:ad:72:8d:e8:e4:17:59:a9:dd:
         44:0b:8c:6f:b4:1a:77:b1:b7:4e:46:21:41:47:28:62:6f:0c:
         4d:83:3b:6f:cf:d6:69:31:1d:69:d8:7d:8f:b0:29:53:97:b9:
         03:d5:c9:bb:8e:60:05:df:ba:88:f1:ea:de:97:32:6e:88:0f:
         67:dd:9f:88:68:85:60:87:7b:35:fe:0f:52:84:9f:d3:a7:e4:
         c6:1f:a4:02:64:90:b8:74:49:8d:f3:32:95:28:f6:c2:30:67:
         16:33:9d:dd:b6:16:cc:96:21:5c:b8:20:9c:b4:b9:dc:f5:98:
         57:be:e9:94:4a:ff:a9:e6:ab:33:fe:47:3f:7e:0e:fb:a7:f4:
         a1:c8:99:f3:8d:1e:c9:9b:a7:bc:52:1f:35:de:b6:16:ae:4e:
         cc:e6:e6:91:51:4f:63:ed:27:36:99:ee:7c:28:7b:27:26:68:
         21:cd:8e:cf:fe:03:6b:ac:50:f9:64:03:41:1f:05:6e:87:16:
         a2:c9:06:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:14 2025 by rpki-client