Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
File:                     3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft (raw, json)
Hash identifier:          Y6yw+XMuEeQDsgsrsUIV2AcFdhogDfuU8wZmuDNSZNc=
Subject key identifier:   AA:36:BE:DB:5C:E1:DD:E3:7F:48:14:4E:49:4E:86:16:8A:44:73:26
Authority key identifier: 3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7
Certificate issuer:       /CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
Certificate serial:       10DE02E0178377A7BCF6D6D0EB7B42DC3E0CAECD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
Manifest number:          DE
Signing time:             Sat 12 Apr 2025 03:35:29 +0000
Manifest this update:     Sat 12 Apr 2025 03:30:29 +0000
Manifest next update:     Sun 13 Apr 2025 05:24:29 +0000
Files and hashes:         1: 323830343a6231303a3a2f33322d3332203d3e203532393336.roa (hash: BV5LS3cw4+xrh4zXEQ5nf0UkwST+ERdkWADJASaiWXk=)
                          2: 3137372e3138352e3132382e302f32302d3234203d3e203532393336.roa (hash: aQUV6YKcHF3FkjB2CLgPl4GbjvvbpvBPm9jNzem55Ms=)
                          3: 3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl (hash: l2zB2qumNcaaVUtxOcAF/k66t3YDkGARy9fC1TDaqhs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl
                          rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 05:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:de:02:e0:17:83:77:a7:bc:f6:d6:d0:eb:7b:42:dc:3e:0c:ae:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
        Validity
            Not Before: Apr 12 03:30:29 2025 GMT
            Not After : Apr 13 05:24:29 2025 GMT
        Subject: CN=AA36BEDB5CE1DDE37F48144E494E86168A447326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:04:2d:ea:87:35:52:4a:a0:cf:89:3f:1e:df:
                    04:f2:07:b1:81:70:2e:3c:9e:8a:6a:2e:a6:e3:ec:
                    4d:27:b1:fd:b9:6d:7a:6c:b2:3f:f6:a0:b8:be:f2:
                    91:ac:1f:23:19:31:27:9d:b3:45:18:75:51:9d:f3:
                    a3:dc:de:ed:96:77:51:28:49:1f:26:73:e9:69:dd:
                    76:6d:4d:37:66:6c:bc:30:b7:88:38:eb:5e:67:d9:
                    4d:f6:15:38:82:ce:c3:3d:81:b1:0a:eb:11:69:e2:
                    aa:16:8e:0b:4c:34:9f:b9:e2:26:6f:64:59:49:ce:
                    80:df:89:fe:56:35:42:1d:16:66:fa:9f:db:3f:37:
                    ae:08:e3:7a:f7:2c:34:2c:2e:b0:3b:ac:ed:b2:c7:
                    b5:ee:91:41:70:59:47:cb:ba:01:55:33:30:15:4e:
                    c5:ad:5b:4d:84:6c:ae:25:05:f8:17:14:c5:2c:03:
                    1b:3e:1a:dd:26:a6:89:73:b6:6f:ad:27:97:04:01:
                    6a:7a:47:8a:91:9c:3b:3a:a0:15:35:a8:7f:e9:39:
                    80:67:8c:70:0f:77:dc:4a:9c:bf:c9:a2:83:ee:44:
                    a0:f2:e2:93:30:80:6e:ff:e4:23:8c:18:03:96:7e:
                    46:e1:1f:e1:c7:89:20:89:55:dd:af:72:0e:ee:3d:
                    69:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:36:BE:DB:5C:E1:DD:E3:7F:48:14:4E:49:4E:86:16:8A:44:73:26
            X509v3 Authority Key Identifier:
                keyid:3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3a:d9:44:77:f6:1f:00:0b:35:98:35:8b:ba:b3:2a:9f:0f:
         7d:f4:6b:e7:46:f7:26:7b:82:0b:26:1b:18:da:c5:26:d1:47:
         a1:9b:ec:60:ee:93:4e:65:fe:ee:0f:af:5d:e6:41:b6:6e:a8:
         7b:61:fb:f6:c3:59:b2:0b:3b:e5:69:16:cf:2b:bd:db:82:bf:
         e6:e5:a0:e8:98:47:b4:18:08:24:95:e7:a9:a6:40:ad:3b:cb:
         73:b5:9a:6d:2e:6c:ae:cb:34:bb:17:7d:3a:b7:a5:03:dc:64:
         7a:c7:aa:1f:72:21:ab:6b:84:7d:32:45:04:c3:89:f9:d6:65:
         1a:ad:d6:f2:23:d7:e6:0c:14:93:85:64:11:ff:fe:1b:14:88:
         30:ab:b9:c1:dd:ef:a0:54:bb:2a:66:06:fd:37:89:50:cd:77:
         72:bb:9b:a8:d4:06:b9:90:5d:e9:51:77:20:33:c8:1c:3a:f6:
         e4:9a:24:e7:d1:13:b5:cc:ee:55:78:91:cc:dd:7f:42:19:8d:
         d2:6f:3f:0f:84:fa:c4:09:76:69:27:2c:2b:61:79:b9:cd:90:
         ba:31:2d:e0:b6:c2:e0:d9:45:a7:ff:7d:3d:9c:ec:99:74:01:
         0b:53:c9:f3:fd:1a:dc:e0:b5:80:18:71:ae:d6:a9:46:c1:80:
         8a:24:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:53:00 2025 by rpki-client