Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft
File:                     24FA36932743D891AB7056E7D2F49B837E9D4E79.mft (raw, json)
Hash identifier:          d9IFX38VukGYaITOjCi8DYQ7p4CDF9MgPQbJDJSWRmE=
Subject key identifier:   5E:8F:38:77:B6:E2:55:F7:5E:A0:ED:90:19:DB:8C:C3:8B:A8:BF:55
Authority key identifier: 24:FA:36:93:27:43:D8:91:AB:70:56:E7:D2:F4:9B:83:7E:9D:4E:79
Certificate issuer:       /CN=24FA36932743D891AB7056E7D2F49B837E9D4E79
Certificate serial:       3E041A6D80E56B104264770C071B0AA1332C496B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24FA36932743D891AB7056E7D2F49B837E9D4E79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft
Manifest number:          0147
Signing time:             Thu 12 Jun 2025 16:57:59 +0000
Manifest this update:     Thu 12 Jun 2025 16:52:59 +0000
Manifest next update:     Fri 13 Jun 2025 17:49:59 +0000
Files and hashes:         1: 24FA36932743D891AB7056E7D2F49B837E9D4E79.crl (hash: lipSNbNq5yw4a8rTo5AeH7sGW+TSC2pwhicLJgTb4e8=)
                          2: 323830343a383261303a3a2f33322d3430203d3e20323732353330.roa (hash: ffQ77kwlbUBU/gX9Qt8ZD9b30bUA05yjRMppHRpbNSM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.crl
                          rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24FA36932743D891AB7056E7D2F49B837E9D4E79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 17:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:04:1a:6d:80:e5:6b:10:42:64:77:0c:07:1b:0a:a1:33:2c:49:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24FA36932743D891AB7056E7D2F49B837E9D4E79
        Validity
            Not Before: Jun 12 16:52:59 2025 GMT
            Not After : Jun 13 17:49:59 2025 GMT
        Subject: CN=5E8F3877B6E255F75EA0ED9019DB8CC38BA8BF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:ec:ab:89:72:42:eb:05:07:6b:9c:1e:df:
                    59:8d:89:fd:e9:95:e7:61:c2:8c:64:3b:6f:1a:c7:
                    02:e8:15:30:9b:7f:e9:ff:48:b5:e3:36:31:e6:cc:
                    d4:81:84:b8:bb:ae:13:ee:bf:50:40:f1:5b:ac:1c:
                    63:45:4d:ce:3f:97:3d:9e:29:3d:61:e5:1b:bb:52:
                    14:14:fc:5f:d4:87:f5:24:35:65:9c:91:75:35:3e:
                    e6:2a:24:97:cb:33:58:56:85:df:3d:8c:0c:5d:5d:
                    e2:f8:a3:e4:0d:c0:22:88:b7:11:42:b1:ec:b9:36:
                    97:9e:8f:65:14:58:9e:91:12:58:5f:1c:de:ea:5b:
                    27:1c:fb:c9:54:8b:41:55:ff:10:68:68:b3:a5:f5:
                    9c:3f:7e:bb:d1:f9:23:71:06:42:8c:11:ee:23:4d:
                    f2:5a:11:7d:5e:6f:c5:7f:d0:79:5e:72:84:62:67:
                    4f:57:f7:05:46:69:c4:fb:ea:8f:6f:37:bd:10:36:
                    88:f8:3f:00:37:eb:2e:16:7c:c4:a6:46:66:43:d5:
                    fe:24:3d:63:35:3e:7e:89:98:e9:a8:67:61:b0:7a:
                    89:f7:5b:9a:5f:ef:22:d3:a8:85:19:70:ea:d7:f0:
                    06:a7:fc:46:2e:a0:ef:26:80:d2:af:6f:f1:96:07:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8F:38:77:B6:E2:55:F7:5E:A0:ED:90:19:DB:8C:C3:8B:A8:BF:55
            X509v3 Authority Key Identifier:
                keyid:24:FA:36:93:27:43:D8:91:AB:70:56:E7:D2:F4:9B:83:7E:9D:4E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24FA36932743D891AB7056E7D2F49B837E9D4E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:a8:26:4e:97:03:47:cd:c1:85:7a:e5:c7:8d:ac:80:39:
         30:3a:66:49:d7:61:4b:26:b9:f7:73:e2:3b:28:50:fc:a1:ca:
         e4:77:c2:8c:62:cb:ab:55:26:84:ba:a5:a0:95:5b:6d:94:dd:
         54:37:78:ab:7d:14:d9:c3:b3:3a:e1:31:04:43:e7:0f:24:fe:
         5a:d5:74:36:a1:e2:98:ee:32:bc:cd:ad:a2:5d:5a:14:9b:df:
         37:74:4c:97:2d:69:71:15:01:3e:b6:fa:d4:c9:83:c5:ca:b8:
         d4:c2:25:8a:f9:44:f5:b7:b8:17:2a:9a:83:b1:f3:10:29:da:
         d6:4e:5d:08:f1:b0:dc:19:09:ce:fb:6b:5f:04:29:0d:69:69:
         21:4c:4d:e9:d6:cb:aa:ff:ed:60:63:71:06:36:1e:e8:27:27:
         ca:90:f0:92:11:4e:97:a5:e7:7c:08:e5:33:c8:27:23:ea:5a:
         bf:d4:bd:e9:61:17:fc:46:c4:7b:6f:e0:9c:56:0a:b9:cb:79:
         2b:1c:cd:35:95:8b:5e:b8:9d:c3:5b:3f:04:32:c4:b2:c8:27:
         f0:a9:56:23:a8:9a:62:df:0a:93:8e:ed:76:a8:a2:16:a2:dd:
         e2:3a:64:bf:45:b9:4f:c6:bb:35:97:df:4b:cf:90:22:06:46:
         74:6f:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:26:47 2025 by rpki-client