Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
File:                     4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft (raw, json)
Hash identifier:          KvKSmdeXeW+XrsoObrKg16RiVOUq4hRmB1dcgyadmTk=
Subject key identifier:   2A:36:12:08:2E:BB:26:7C:A2:C6:76:D1:3E:36:EB:06:67:12:FD:7F
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Certificate issuer:       /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial:       7025002FD51748E367FB5546DA075BDA1A0F5F4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
Manifest number:          022F
Signing time:             Thu 10 Apr 2025 05:30:00 +0000
Manifest this update:     Thu 10 Apr 2025 05:25:00 +0000
Manifest next update:     Fri 11 Apr 2025 05:30:00 +0000
Files and hashes:         1: 4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl (hash: Nm8m8JmgUc0w+Z+ieV1Otr8toLJCyx8XgQSXsjnqkIE=)
                          2: 323830343a373165633a3a2f33322d3334203d3e20323730383230.roa (hash: mFXobTyqdcYNMW0m9lmZoblaw4OtIBlFh+gYjEgM1Y0=)
                          3: 3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa (hash: m8PnMa8wPCh6vpKlOCXWg44wlUxXzVU2xDd3DhSUVRA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
                          rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 05:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:25:00:2f:d5:17:48:e3:67:fb:55:46:da:07:5b:da:1a:0f:5f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
        Validity
            Not Before: Apr 10 05:25:00 2025 GMT
            Not After : Apr 11 05:30:00 2025 GMT
        Subject: CN=3082010A0282010100A1F2C646E2F52F5B52BC8E8763E84129599172DF3F49D32DF148B501ECA9BD4F51819C6680FC70DFBF8FCC429622CDDAA003FA5E5069635D8D06E2D24730B517FE68A4E96ECA75B484B41F03CE82E1ECBC0026805A1376B3654BC0F86B9CCA23EE94C2C2911D6A79AF796FB7AE4EEB60F5A61FFD8736F67D54A284736F1B0AF60926913598E9C1CAF04FB633824C1D3F5733E1F519C8C0577F70EAEC9AE151C9250610E23E35FC6228BFA37BE4B93E4164816E39666B7DD5B10E580BE41B3DA0DCB725AE20BEAABB1F3BE121D398E2C63E86FE1C3DC149BF223DC1EECF9B4C7CABF00243ECDC766B572A6C1005C9B3FB5DFF1ED3B3B2125069BAD4D8A49862FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:c6:46:e2:f5:2f:5b:52:bc:8e:87:63:e8:
                    41:29:59:91:72:df:3f:49:d3:2d:f1:48:b5:01:ec:
                    a9:bd:4f:51:81:9c:66:80:fc:70:df:bf:8f:cc:42:
                    96:22:cd:da:a0:03:fa:5e:50:69:63:5d:8d:06:e2:
                    d2:47:30:b5:17:fe:68:a4:e9:6e:ca:75:b4:84:b4:
                    1f:03:ce:82:e1:ec:bc:00:26:80:5a:13:76:b3:65:
                    4b:c0:f8:6b:9c:ca:23:ee:94:c2:c2:91:1d:6a:79:
                    af:79:6f:b7:ae:4e:eb:60:f5:a6:1f:fd:87:36:f6:
                    7d:54:a2:84:73:6f:1b:0a:f6:09:26:91:35:98:e9:
                    c1:ca:f0:4f:b6:33:82:4c:1d:3f:57:33:e1:f5:19:
                    c8:c0:57:7f:70:ea:ec:9a:e1:51:c9:25:06:10:e2:
                    3e:35:fc:62:28:bf:a3:7b:e4:b9:3e:41:64:81:6e:
                    39:66:6b:7d:d5:b1:0e:58:0b:e4:1b:3d:a0:dc:b7:
                    25:ae:20:be:aa:bb:1f:3b:e1:21:d3:98:e2:c6:3e:
                    86:fe:1c:3d:c1:49:bf:22:3d:c1:ee:cf:9b:4c:7c:
                    ab:f0:02:43:ec:dc:76:6b:57:2a:6c:10:05:c9:b3:
                    fb:5d:ff:1e:d3:b3:b2:12:50:69:ba:d4:d8:a4:98:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:36:12:08:2E:BB:26:7C:A2:C6:76:D1:3E:36:EB:06:67:12:FD:7F
            X509v3 Authority Key Identifier:
                keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:22:44:d9:e4:79:02:4e:5a:df:7f:cc:dc:d3:57:48:da:
         29:b2:19:ca:3e:2a:1f:9e:ed:09:ba:3b:7f:57:ef:f4:ce:c8:
         c6:55:e1:59:ac:5f:ee:08:ee:b9:50:d3:ee:48:88:0a:a1:d5:
         38:99:09:10:49:6c:4e:99:11:94:a1:1a:b7:a8:9f:0d:d9:9f:
         69:b5:66:71:35:a8:e7:7a:fb:26:d1:b3:56:2f:d0:07:ec:f7:
         e2:97:f1:df:12:dd:0d:47:df:9a:32:32:d5:ae:b9:1b:f4:83:
         97:0f:a2:63:ba:bd:e9:27:a6:29:41:80:28:36:e0:34:de:53:
         14:c9:4c:af:d9:47:0e:93:42:ca:37:8f:b1:e0:12:3c:ac:21:
         4f:a1:dc:d0:3b:43:27:ad:8c:b4:1a:a0:35:04:3f:0f:4c:60:
         f7:74:d5:48:c7:52:0b:f6:d0:83:61:3a:97:7e:c0:4c:85:8e:
         88:1a:b0:ae:74:8d:1c:ce:0f:73:57:e8:3e:16:98:e4:94:9d:
         ca:93:de:54:d4:b5:d5:82:42:5f:a8:fc:8f:72:3d:7d:d6:c4:
         34:c5:58:68:c0:29:04:4f:26:eb:7f:a9:2d:b8:98:b8:95:9f:
         56:0b:ba:0e:d5:2b:74:33:a3:50:fd:8d:3f:b9:85:51:43:9d:
         a8:f5:8f:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:24:40 2025 by rpki-client