Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
File:                     AC154D8D44795F5E54B65B3B1FF4584355304522.mft (raw, json)
Hash identifier:          cSvT7eWuKncbWFk2ct7nHRlp4k9gxMPuE1PFS0dUh/o=
Subject key identifier:   08:51:39:47:71:2D:40:4A:C3:80:FB:D6:56:F3:78:99:39:3B:5F:40
Authority key identifier: AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22
Certificate issuer:       /CN=AC154D8D44795F5E54B65B3B1FF4584355304522
Certificate serial:       3BD87873D92ADA493AA050E6CD541C32100FD6E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
Manifest number:          0243
Signing time:             Mon 21 Apr 2025 11:10:00 +0000
Manifest this update:     Mon 21 Apr 2025 11:05:00 +0000
Manifest next update:     Tue 22 Apr 2025 11:10:00 +0000
Files and hashes:         1: AC154D8D44795F5E54B65B3B1FF4584355304522.crl (hash: 1gEpBKq5fTnuErwszuvHR+/jUTY3mn5ahZUK56OgP1Q=)
                          2: 323830343a373838303a3a2f33322d3438203d3e20323731323437.roa (hash: MAqBnQ9SmfN3mdyuCA234HR4vt8s2UuzNpbYFEWGdQQ=)
                          3: 3230302e3130362e3231322e302f32322d3233203d3e20323731323437.roa (hash: hXCvBkn6rOJsJuive+HE0JmAn1MTBJJxvYOLOh6CA7E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl
                          rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d8:78:73:d9:2a:da:49:3a:a0:50:e6:cd:54:1c:32:10:0f:d6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC154D8D44795F5E54B65B3B1FF4584355304522
        Validity
            Not Before: Apr 21 11:05:00 2025 GMT
            Not After : Apr 22 11:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:af:f8:a2:4b:ce:03:e2:d3:d8:9b:d8:55:
                    db:4d:40:1f:ed:bb:d5:8d:7a:02:20:9e:f3:d2:01:
                    45:c9:2f:fe:8d:0a:22:3e:bb:74:7e:a2:42:c0:d7:
                    d6:14:8c:2a:c9:5e:22:2a:16:cf:d5:57:0a:94:a8:
                    3f:80:be:73:14:5a:af:6a:52:81:30:fa:ef:f5:37:
                    d1:44:20:08:9e:8a:b2:7b:79:4d:01:a4:49:f4:63:
                    18:9f:db:6b:dd:f6:25:14:31:44:b5:99:ff:8b:d4:
                    9d:86:30:cf:9b:e8:f0:8f:fb:d4:eb:16:c0:ec:4a:
                    c7:33:39:ac:e6:dd:06:25:6e:f7:97:0e:aa:a9:49:
                    2e:f2:9d:a9:c1:f0:39:24:e1:90:51:d9:9a:91:81:
                    45:73:41:f4:01:6f:3f:b8:b1:6c:56:0c:89:f0:c0:
                    98:89:83:c2:ee:b3:d6:8f:88:11:74:a5:b0:ee:fe:
                    e2:79:f3:fe:20:f6:0e:52:be:83:81:ce:26:44:33:
                    6c:28:31:01:25:2a:6d:06:75:0c:c4:05:ed:50:df:
                    17:f9:39:3a:db:03:23:9f:29:fb:83:0d:a9:72:34:
                    8d:e1:b3:c5:35:37:d5:aa:2c:f2:c7:78:73:5e:cf:
                    02:9a:d5:74:86:c0:9c:cc:d9:e8:6a:49:7f:28:2e:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:39:47:71:2D:40:4A:C3:80:FB:D6:56:F3:78:99:39:3B:5F:40
            X509v3 Authority Key Identifier:
                keyid:AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:94:c6:d6:32:74:29:4a:df:f6:86:3a:74:d7:7a:be:72:4c:
         35:d5:28:3e:90:02:95:13:6e:51:57:b6:be:c8:13:68:5e:b0:
         28:57:3d:89:70:cc:0f:ca:09:bb:1e:dc:04:fb:d1:5d:92:49:
         22:61:1b:4a:75:ad:aa:10:94:81:15:19:4f:2f:73:32:e1:ea:
         04:44:e3:4f:68:cd:5e:29:46:2a:0e:97:ac:b3:78:45:5a:6e:
         97:1a:2c:92:55:e1:fd:65:41:a6:86:e8:14:d7:9a:9b:ff:b3:
         a9:af:32:b9:11:58:f7:ff:f5:b2:65:3b:dc:e8:ac:12:28:1e:
         f5:ad:64:a2:89:76:7c:5b:4e:1a:64:88:69:33:8e:b2:bd:e4:
         65:e9:fc:6a:66:0f:36:ab:df:69:7d:c0:2a:f1:23:83:c9:7a:
         8d:67:ff:a4:b6:0d:72:a5:05:b1:15:e2:da:4c:ad:e4:5b:e3:
         6e:f3:74:b6:ac:53:4c:5f:83:d8:9e:8a:1c:31:b3:9e:b7:2a:
         db:b9:2e:46:a4:de:aa:f7:f9:79:4e:25:9b:ef:f0:00:01:ac:
         33:a9:88:2c:8c:bd:06:a5:81:a9:37:42:d9:b3:da:42:a8:15:
         5b:60:26:8a:ec:3c:18:53:cb:c8:39:a7:80:8d:0e:94:2c:c0:
         4b:1b:0d:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:18:44 2025 by rpki-client