Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
File:                     A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft (raw, json)
Hash identifier:          86/0+DRysyWkchrWjYAqicDfrhAsCafOR47ottbXxvk=
Subject key identifier:   AE:B7:FF:DD:76:8E:5C:74:89:5D:E5:32:B6:EF:9D:9A:8C:09:62:97
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       3A1B2AB0251FD03F7F3D0F8397FDE6E5EFE5873A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
Manifest number:          0192
Signing time:             Sat 12 Apr 2025 13:12:32 +0000
Manifest this update:     Sat 12 Apr 2025 13:07:32 +0000
Manifest next update:     Sun 13 Apr 2025 16:56:32 +0000
Files and hashes:         1: 3137372e38342e33322e302f32322d3232203d3e20323632353738.roa (hash: HHkCx4wzsdzZeQ+23+HNGN0oU9zUdEaOUbRYmJVXn+Q=)
                          2: 323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa (hash: mGD+Nz89sdR9UOaavTur2w5nYhoEKDwbP32rvejsktg=)
                          3: 3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (hash: 28p7ho9zkxBWdXY2hwLxBxbaQrjF7AK4ddQouSMRCYQ=)
                          4: 3137372e38342e33382e302f32332d3233203d3e20323632353738.roa (hash: gXetdJWUp6auI8pN33t44RkM4A8XcVZ2rkvPkvk066Y=)
                          5: 323830343a3635383a3a2f33352d3335203d3e20323632353738.roa (hash: LJXsvQZaTIQG7/0DKHTgsQM8oTzEzlTT4S8Kmx4/5YA=)
                          6: 3137372e38342e33342e302f32342d3234203d3e20323632353738.roa (hash: ZZOzzeHReZR1j2Wkx2+gvOFbXoGKpd8+AgX5mzSfp4g=)
                          7: A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl (hash: zkDyhjHpdhbnQHbjyRemcyrEr5RERch8L/7omnU/8x0=)
                          8: 323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (hash: IJAfcQfmlRu7dOP4dM0gSk4sDVDACNSRhkeaIrQ3W3k=)
                          9: 3137372e38342e33322e302f32342d3234203d3e20323632353738.roa (hash: t+FRMABsEctbWkl07StQKhTPxun6CDHJI/p5fKHvy1o=)
                          10: 3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (hash: p+EughTf6fgssrXCiu++Kbgelff0YAsmLITJluI2+wA=)
                          11: 3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (hash: Cq9qrsg/RLw7vgtleWVQcOJaPgAstLAzGKwRD00bGnE=)
                          12: 3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (hash: aPi95oAQ8ALp5Riyr4HgsyyyIhSv+wx1qwtCRKmOegk=)
                          13: 3137372e38342e33362e302f32342d3234203d3e20323632353738.roa (hash: TUwlurF2l+qtIryrIkmvQL/NUiisKyzc3i3hncr1EfM=)
                          14: 323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (hash: K97tb9eayzLx4+fWi99NhubcTM/GMXvlXCYWhdke8iI=)
                          15: 3137372e38342e33352e302f32342d3234203d3e20323632353738.roa (hash: 5DafvExcEywBVIWkiw/ZI1p5lxrMUSdWLBxrDkrGV44=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1b:2a:b0:25:1f:d0:3f:7f:3d:0f:83:97:fd:e6:e5:ef:e5:87:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: Apr 12 13:07:32 2025 GMT
            Not After : Apr 13 16:56:32 2025 GMT
        Subject: CN=AEB7FFDD768E5C74895DE532B6EF9D9A8C096297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:19:cb:89:4f:95:27:f4:32:77:d4:b5:4c:
                    23:98:45:d0:47:cf:d7:67:4e:90:90:63:9e:04:66:
                    3a:02:dc:5c:f9:2d:f6:ad:a3:1f:3b:9b:db:12:23:
                    54:a0:4e:cc:9f:67:29:cc:8f:04:e2:97:ec:d3:f1:
                    66:d8:8a:7a:3d:27:9c:4d:ea:9d:d5:67:5d:5a:9f:
                    c1:52:68:cd:4d:ba:c1:e1:aa:ee:1b:da:40:cf:6a:
                    1f:55:ff:27:9f:17:e4:fc:5b:d3:81:aa:06:fc:a8:
                    c2:56:d7:90:a4:bc:f7:e4:6d:c9:fe:eb:65:10:8b:
                    77:f8:9a:ea:98:b5:fc:41:5c:27:8e:15:fa:95:fb:
                    a7:2f:09:d7:ab:72:ad:e4:8b:a9:38:ba:59:93:1a:
                    1e:38:f3:4c:13:ec:da:bd:73:a8:29:0d:de:10:af:
                    f3:75:d7:40:9a:89:84:9f:50:8d:1e:07:f0:b8:b1:
                    c1:bb:29:e7:87:89:de:cd:6e:2a:75:b0:ef:ba:d1:
                    41:0f:c9:1f:6a:20:36:27:40:d5:b4:e5:1e:16:63:
                    4a:74:fd:87:2c:e0:e8:93:24:a5:92:87:bb:e5:24:
                    8f:26:b5:ae:8a:0e:25:58:f0:42:07:78:48:7a:11:
                    45:fb:45:0b:4d:6f:2c:d9:b0:04:f0:db:2d:04:54:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:FF:DD:76:8E:5C:74:89:5D:E5:32:B6:EF:9D:9A:8C:09:62:97
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:11:96:8b:93:41:3e:bd:fb:bb:99:b4:3a:3b:f1:63:74:
         e4:7d:a2:d2:ba:79:cd:44:d6:b8:e5:30:1a:91:6f:3f:7a:12:
         fd:46:9f:7c:99:20:05:fe:02:73:4b:ef:b7:75:0f:88:73:e3:
         8d:49:8f:53:b5:74:4e:b8:0e:a4:7c:f0:6a:23:78:82:77:84:
         c8:fe:c4:cc:8b:cd:da:7a:3d:f0:32:53:02:3a:5f:ab:65:ff:
         05:6a:a3:bf:07:54:e8:13:e2:3b:32:95:f2:d9:17:f0:36:6a:
         e1:dc:79:0e:a2:85:1e:00:5c:72:8f:ef:40:f1:c0:64:9d:dd:
         d9:2a:59:a0:9b:7c:fc:6e:1c:e3:1f:40:6f:1b:51:2e:5f:cd:
         57:81:ac:26:24:63:29:ba:4f:83:b3:f2:b0:c7:77:42:73:11:
         6a:90:7e:58:62:e0:53:a9:dc:17:08:3d:91:c6:62:1b:7d:35:
         bc:b2:85:ff:6f:8a:45:15:f9:d7:01:7e:4f:c5:0e:d5:37:a5:
         07:29:3c:ac:4e:c1:9b:ae:8b:4a:3a:8f:d3:32:7e:99:01:e7:
         59:1b:86:da:70:1e:c8:dd:27:f9:2a:ef:a2:a8:a9:f1:04:c4:
         8d:34:fc:3a:f7:18:d6:45:59:1b:87:1d:e5:ab:be:08:70:4b:
         9d:6a:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:10:32 2025 by rpki-client