Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
File:                     4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft (raw, json)
Hash identifier:          hHLzt3x4J9K8e8pEwfU2NeKouuxDCeO9te4xrhLfTI8=
Subject key identifier:   48:CF:32:D2:55:0C:13:6F:8F:3F:B2:C8:7C:3F:14:3E:49:5F:71:98
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       1B7B12A33D8CC810C9C75B450AF376CAD2F2E98A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
Manifest number:          0198
Signing time:             Sat 05 Apr 2025 11:54:29 +0000
Manifest this update:     Sat 05 Apr 2025 11:49:29 +0000
Manifest next update:     Sun 06 Apr 2025 14:05:29 +0000
Files and hashes:         1: 323830343a383a3a2f33302d313238203d3e203134383430.roa (hash: jfpdgnYNlw9gu8ewZdAvy9xYK5y8VRrmTCp+u0o+AGQ=)
                          2: 3138372e3130332e39362e302f31392d3332203d3e203134383430.roa (hash: KD8MQH2YqX12Q2gXaC+3Sqlp1nZHTc+8eRBIztod7wY=)
                          3: 3230312e31362e36342e302f31382d3332203d3e203134383430.roa (hash: p7nHpqDwPVMlOxuB18aTwBi5cY5ihmBxAYHdAWED2Q8=)
                          4: 3230302e3134332e36342e302f31382d3332203d3e203134383430.roa (hash: ZuO3760agCW6ki2IUMCtyhYJ6ZjbnFPlmjd4mvq3Lt8=)
                          5: 3230312e31362e302e302f31382d3332203d3e203134383430.roa (hash: 593M5TF/lcU5PcCGQ9+lS3SsRDOB6eZwXky2yAnpXuw=)
                          6: 323830343a6533343a3a2f33322d313238203d3e203631383839.roa (hash: OzX5IHOlyBKbpRBAH/RiuoBYJO1lVDjI2j6PLg2Jvtk=)
                          7: 3230302e302e33322e302f32302d3332203d3e203631383839.roa (hash: bbgPAEyLCDOGc2W4J5pLkHQG6N6rjVF0AjWKU9noISw=)
                          8: 4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl (hash: XTEijbZOXRfBFxqPBkeeQCpIykkBVQ1dFOvDzSer1rg=)
                          9: 3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa (hash: CNrc2CMT9gGIDdU+PspWyupaLeF4mHfI0RnOLwk8fqc=)
                          10: 3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa (hash: krSzHLioVYLr4kbLbIswotFQEIGxmwRu7qzr5tCanBw=)
                          11: 3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa (hash: il+qgVUwyIL8etwV4bR91jtFEHAWZP6Wt41hrMYV8+M=)
                          12: 3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa (hash: 50NQDQOpt2HbD4K5uxmWv4jkLs7gPGjfZ02DsrEWY+o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7b:12:a3:3d:8c:c8:10:c9:c7:5b:45:0a:f3:76:ca:d2:f2:e9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Apr  5 11:49:29 2025 GMT
            Not After : Apr  6 14:05:29 2025 GMT
        Subject: CN=48CF32D2550C136F8F3FB2C87C3F143E495F7198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:03:85:c6:e0:c8:8f:f9:88:6f:1d:70:5c:
                    4b:0a:66:95:c2:37:39:ae:44:7f:1d:6e:08:79:bf:
                    d7:7b:e8:57:ac:ac:c1:60:77:b0:ed:e1:af:40:2f:
                    ab:2d:eb:9c:b3:c9:3c:46:9e:ad:cd:d4:16:d2:ae:
                    39:23:28:9b:b1:e8:64:08:fa:61:a2:35:79:76:19:
                    e3:fe:21:74:6e:19:dc:89:38:74:11:72:52:a8:02:
                    6f:d7:93:b6:e5:f1:f3:1b:fd:56:15:2d:34:1f:f7:
                    54:c8:ed:f1:d2:9b:41:7e:a7:ce:c6:41:c2:d7:65:
                    3c:78:02:d1:03:43:6c:89:40:30:df:bb:a4:8d:6b:
                    c3:b8:c6:05:b6:a1:a0:b4:af:e3:df:2f:85:ab:9c:
                    b9:63:d3:da:f3:ca:a8:ae:ed:a9:01:de:d3:85:40:
                    11:cc:b7:c0:95:9d:ac:65:86:a0:6f:19:a8:c1:aa:
                    b6:c2:4a:2f:da:75:91:5a:49:a2:04:f6:ba:62:d8:
                    82:97:ef:8a:9d:ed:7e:28:ca:50:2e:c3:01:24:f3:
                    ce:9d:2c:b6:89:82:e7:24:b5:e0:ce:55:36:db:2d:
                    bb:d6:cd:00:78:43:79:25:72:ae:a9:c2:51:4f:6c:
                    03:76:43:54:3c:49:6d:c8:9d:df:50:ba:95:19:20:
                    66:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CF:32:D2:55:0C:13:6F:8F:3F:B2:C8:7C:3F:14:3E:49:5F:71:98
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:0b:83:78:a5:1b:ed:e4:d2:3d:bc:d9:f2:96:ae:f2:e8:
         2e:62:09:ec:29:90:dd:34:9b:3e:3f:c7:f9:1c:20:54:22:4a:
         92:a6:99:96:e1:c5:f4:22:6b:40:d8:b8:58:c6:bd:98:bf:71:
         62:19:06:7e:88:5b:75:0a:b1:d6:a6:7b:14:1e:31:28:f7:68:
         38:51:e2:dc:28:df:ee:4b:6f:d7:bd:04:36:50:45:4c:37:6b:
         eb:b5:61:4a:0d:94:fc:2f:71:d8:c7:7b:6d:78:2e:1d:93:07:
         f3:58:e6:59:a5:f7:98:ee:36:c0:7f:64:a4:cc:0d:f7:16:c8:
         0c:02:89:a2:3a:a3:65:93:16:84:81:82:6d:1c:b3:61:46:91:
         32:2a:37:c8:a3:26:f8:27:87:fe:78:77:2e:b1:7b:59:22:c4:
         eb:63:4d:02:8a:e6:6e:4f:14:86:48:cf:3e:b4:b0:ad:8f:a2:
         d6:23:f8:9b:e2:be:3b:12:36:6c:c6:b1:60:4e:a8:d7:2e:70:
         64:06:74:01:25:64:4b:71:0c:16:d9:75:d7:6c:81:02:d6:dd:
         51:93:80:11:51:2b:16:af:24:34:24:24:82:f8:b4:e4:3b:33:
         0c:5d:db:4f:61:33:a7:62:c7:9a:00:59:9a:60:1c:f3:2e:ab:
         56:d3:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:07 2025 by rpki-client