Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
File:                     BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft (raw, json)
Hash identifier:          qAKKvF0xHlPOte6E0a+s3wUMD8PrlBwa0uy1yscDxMA=
Subject key identifier:   7C:4C:B3:4A:18:E1:DB:F1:0B:5F:67:22:FC:55:CE:02:30:29:6D:2C
Authority key identifier: BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB
Certificate issuer:       /CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB
Certificate serial:       7FBE99572A4C328C5BEC65969AAB8DE8E97D6D18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
Manifest number:          01F7
Signing time:             Thu 10 Apr 2025 12:38:27 +0000
Manifest this update:     Thu 10 Apr 2025 12:33:27 +0000
Manifest next update:     Fri 11 Apr 2025 14:35:27 +0000
Files and hashes:         1: 323830343a353662633a3a2f33322d3332203d3e20323638303230.roa (hash: mhx6cKgOhVLcKw675OTCHiP8tvbKUi0S6KHLqdPM4wQ=)
                          2: 34352e3136372e382e302f32322d3232203d3e20323638303230.roa (hash: dJ3B/3Tbn4gheIcX04EKHe9CZLqULlgtrBJ424/H1X0=)
                          3: BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl (hash: ayZcQo24BDKhoQ/YFb9unxz01vcmfMOOOAoJAWPk5fU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl
                          rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 14:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:be:99:57:2a:4c:32:8c:5b:ec:65:96:9a:ab:8d:e8:e9:7d:6d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB
        Validity
            Not Before: Apr 10 12:33:27 2025 GMT
            Not After : Apr 11 14:35:27 2025 GMT
        Subject: CN=7C4CB34A18E1DBF10B5F6722FC55CE0230296D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:d4:f6:d3:e0:b6:8f:d2:72:dc:74:6d:75:
                    48:95:77:ca:1c:09:57:db:01:be:5b:2f:e8:de:35:
                    34:88:4d:6b:73:7e:47:8a:eb:38:79:de:ca:99:27:
                    a7:91:6a:b5:b3:71:9e:e1:85:20:ea:8f:6a:0b:5f:
                    e6:70:ff:8c:14:a9:e0:93:b5:74:21:5a:97:13:c6:
                    a7:63:e0:f5:aa:7e:c1:d0:3a:5d:6a:3e:43:08:34:
                    49:98:fd:23:6c:65:5c:1f:69:65:dd:0a:14:d7:b5:
                    a7:ef:5a:b0:72:56:19:0d:2d:e9:e0:e2:ce:18:47:
                    6e:02:c0:ca:e1:c7:b6:7d:d9:54:f8:51:13:96:7a:
                    af:2f:82:2e:5c:fb:09:f6:7f:62:7b:24:6c:7f:02:
                    2b:e7:3f:21:24:38:aa:2e:cf:a2:af:a1:1c:f8:31:
                    96:af:d4:cc:58:2f:1c:c2:3f:b6:bb:d1:d3:4e:2f:
                    38:cd:b0:9f:01:bc:90:fb:7e:f3:da:12:c4:dc:4b:
                    b8:36:bc:dd:d1:84:a6:ae:32:84:62:00:89:d1:8d:
                    0b:fe:0c:84:f7:ce:8e:f0:4a:65:f5:be:fb:3e:44:
                    b1:ad:ff:66:6c:e2:9c:03:d5:f6:b0:eb:cc:e9:38:
                    fa:6d:fe:59:4b:ba:fd:3f:9d:05:1d:b8:6a:98:c0:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:B3:4A:18:E1:DB:F1:0B:5F:67:22:FC:55:CE:02:30:29:6D:2C
            X509v3 Authority Key Identifier:
                keyid:BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:71:7b:fc:65:f7:38:02:6b:06:79:6d:4f:02:e4:f5:31:f1:
         23:05:66:87:69:c1:c1:50:0c:6f:cf:96:7b:ca:ca:e7:f7:db:
         c3:42:48:91:83:4c:4b:4d:aa:92:f3:48:00:6c:e3:79:fc:c7:
         cd:47:f0:b9:e9:87:97:d5:16:9a:69:ae:42:41:be:d8:6d:1d:
         00:19:56:03:32:82:e2:e8:34:cb:7f:5f:f0:e0:d9:47:d9:ae:
         e7:52:08:b4:ec:00:b8:41:31:ed:ac:31:f3:0a:59:60:23:6a:
         ed:ea:5c:78:0b:7b:5c:16:ae:05:0a:8e:2c:d9:6e:6b:e5:71:
         07:9b:dc:6c:8c:52:09:59:ff:51:15:02:69:cf:29:ca:8c:e1:
         11:14:67:93:dc:f7:34:95:5f:a1:d1:85:a9:67:1f:8d:68:05:
         58:4c:49:48:72:3e:93:6c:fc:16:63:be:45:3e:c7:1b:12:f1:
         ad:c1:4a:76:12:8c:02:cf:cc:9b:d4:dc:5b:3a:45:30:56:10:
         c7:7e:eb:45:ac:8b:86:2f:fb:bb:46:ec:0c:0c:b8:dd:48:35:
         29:d3:eb:9d:fd:36:3d:0a:3e:dd:b8:a4:60:4b:83:26:46:bd:
         73:35:ee:9b:1a:9a:dc:35:ac:a4:7d:02:ab:16:77:ef:11:d2:
         61:76:14:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:24:47 2025 by rpki-client