Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
File:                     942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft (raw, json)
Hash identifier:          pCHCjrtzmMquTK6AflhEUYDTnuEBKMapvWWDIyRYixE=
Subject key identifier:   5B:F1:5A:1C:08:4F:98:C9:B4:FB:9B:8D:46:DC:D0:32:D4:D9:75:43
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       68F51E4ED9D244D999998AB3FA9557979C2EECE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
Manifest number:          01F2
Signing time:             Fri 11 Apr 2025 23:33:53 +0000
Manifest this update:     Fri 11 Apr 2025 23:28:53 +0000
Manifest next update:     Sun 13 Apr 2025 01:00:53 +0000
Files and hashes:         1: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: 1qApqT8c98HJfSZVdIpkogEpxPHVsWJrpgIqGByb4/4=)
                          2: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl (hash: 4J7m78/xoHWom2vuYBlE7MxKFubzAgFhdpLg4n6TjFo=)
                          3: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: rsttPPyFpbKLJ/HEcFMY7LdhPPdzjhskDdtJkGJQnVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f5:1e:4e:d9:d2:44:d9:99:99:8a:b3:fa:95:57:97:9c:2e:ec:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Apr 11 23:28:53 2025 GMT
            Not After : Apr 13 01:00:53 2025 GMT
        Subject: CN=5BF15A1C084F98C9B4FB9B8D46DCD032D4D97543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:4a:42:be:a4:d2:9e:a3:83:0d:9b:6e:72:
                    b2:f7:dd:c9:b9:a7:62:88:67:0a:46:cf:52:15:d0:
                    d4:bc:d8:58:89:5a:c8:bb:bd:a2:fc:dc:c9:2e:e9:
                    e8:4e:58:9b:b6:69:53:c8:22:12:e8:18:7e:84:7d:
                    cb:f6:20:e5:78:ed:9e:ec:8a:59:72:b5:66:4d:fb:
                    5e:b0:ba:5f:84:19:d3:bf:ac:5a:87:95:a7:7e:d2:
                    c5:87:65:79:c4:ee:b3:5f:c2:53:48:d2:b8:19:cf:
                    62:63:43:c8:83:a0:93:b0:d9:3e:4d:6c:7f:48:23:
                    fd:82:bb:55:29:ce:15:b6:5a:06:65:e6:8e:60:14:
                    27:a0:11:45:f5:b8:3b:91:72:66:0c:2d:d6:e2:66:
                    01:5f:52:48:4c:e0:7e:15:bb:76:7f:1e:31:50:9c:
                    98:71:96:9d:ae:f7:b4:19:e2:d0:21:6e:9d:77:1e:
                    24:fb:a9:60:f0:a9:65:2d:3a:93:df:7b:88:2f:e9:
                    bd:f8:5e:18:6e:d8:74:ca:c7:c0:6e:8d:1d:06:fa:
                    d0:af:c8:e1:1c:d1:ba:8f:e5:92:26:7b:d9:a7:ab:
                    b2:4f:cf:10:b8:e2:e6:33:f8:f4:b1:e5:29:69:ad:
                    0e:ca:9b:a4:4e:f0:b7:45:16:ec:6b:54:de:bf:66:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:5A:1C:08:4F:98:C9:B4:FB:9B:8D:46:DC:D0:32:D4:D9:75:43
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:cc:00:17:42:9b:90:bc:7b:fd:74:53:93:9d:f5:71:9b:
         1e:11:83:ae:36:0e:83:63:66:25:43:8d:5f:06:4c:dc:8e:a3:
         5f:66:a5:a0:48:d8:ab:b1:eb:ef:f0:79:c3:4a:d5:a0:73:c2:
         49:5d:e5:7e:1b:17:6c:b5:f5:5b:53:be:02:61:c3:6e:d2:89:
         35:d7:a7:3e:3c:b3:c1:31:3f:c2:1f:f0:cf:a6:15:bb:df:82:
         b8:29:c6:74:92:d3:9c:cd:ca:9d:36:b0:5a:8e:e1:31:97:3c:
         a4:4b:47:fd:14:67:da:7a:f1:67:35:b9:3f:52:4c:dc:55:9c:
         34:69:6b:e1:9d:7a:30:04:62:06:3f:65:98:8f:d6:b9:e2:5d:
         34:64:41:a2:e1:be:18:d1:10:db:d6:dc:27:66:4f:e3:91:f3:
         4b:17:db:0d:6f:f4:cc:09:20:63:b0:d3:d2:d8:43:fa:ad:fb:
         b2:d7:49:12:dd:44:c0:3d:f6:72:d5:3d:6c:7c:ec:ef:72:d2:
         b6:10:46:e5:fc:b9:e5:53:b0:f6:79:36:c5:45:3d:0e:1d:90:
         a1:ef:fd:11:02:09:94:1d:87:a6:c6:1f:59:a9:4f:80:e2:78:
         28:19:4c:e2:15:fc:f1:f4:9c:1d:17:8e:1a:b9:30:f3:61:1b:
         64:7b:9f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:05:37 2025 by rpki-client