Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
File:                     964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft (raw, json)
Hash identifier:          bavCEX6+d494mKby3qfcaHxC34vzWPQaX9VKWpRTias=
Subject key identifier:   69:5F:86:C8:3F:45:E2:87:E7:A0:44:4E:FE:8B:BD:FE:FB:5B:32:4E
Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
Certificate issuer:       /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Certificate serial:       18CD8BB0F91FE6A2C641D3E488BDA5AF86E65703
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
Manifest number:          016B
Signing time:             Tue 15 Apr 2025 03:08:28 +0000
Manifest this update:     Tue 15 Apr 2025 03:03:28 +0000
Manifest next update:     Wed 16 Apr 2025 05:07:28 +0000
Files and hashes:         1: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: XRnyxqeWor6zsOJOEe1DH7+2Zro+JWbwllL/176Q16g=)
                          2: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl (hash: IZAgkKyselv1iWhGi5H4H4649OqkkBS/GdswpHBKHQo=)
                          3: 323830343a343130343a3a2f33322d313238203d3e20323635393938.roa (hash: LODlsKaanew1sXwWkXvg53CbbbAVODkh1Md3MommNu8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
                          rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 05:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cd:8b:b0:f9:1f:e6:a2:c6:41:d3:e4:88:bd:a5:af:86:e6:57:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
        Validity
            Not Before: Apr 15 03:03:28 2025 GMT
            Not After : Apr 16 05:07:28 2025 GMT
        Subject: CN=695F86C83F45E287E7A0444EFE8BBDFEFB5B324E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b6:e9:08:40:4e:75:5b:49:d1:61:5b:d4:32:
                    d2:00:87:f9:0d:12:a7:65:51:8f:ca:86:3f:99:41:
                    6d:bd:68:03:b7:99:ef:09:58:92:30:b8:74:93:1b:
                    2a:f5:e1:40:db:25:e3:17:82:bd:f6:79:37:a8:89:
                    aa:2b:61:9d:71:e8:f7:41:7f:c3:b0:69:4e:13:18:
                    be:0d:27:36:9f:75:ce:5c:d5:74:6d:22:05:d0:d4:
                    f9:8b:27:84:7b:2c:7b:86:52:a4:37:55:4e:3f:4f:
                    94:c3:3c:c9:81:21:28:52:eb:3b:2d:34:e1:4e:5c:
                    a9:25:d0:5a:c6:0c:3c:36:8b:76:e4:f7:d1:aa:11:
                    45:0c:0e:55:75:9f:d3:a1:96:e2:a4:8e:3b:20:3d:
                    ce:b8:e7:ae:ff:f2:a5:a6:7d:be:c2:2f:a9:fd:ce:
                    7c:d1:7b:9c:c6:de:fa:3e:dd:9a:e6:c7:c7:dc:92:
                    0a:4e:a5:de:8d:df:b6:90:39:12:93:8f:ce:b6:9c:
                    dc:72:75:b3:12:e2:f9:5a:7d:e1:a4:a2:a6:ef:60:
                    a8:9e:a4:ed:22:75:b5:1a:d4:53:1a:94:bf:a4:ca:
                    a3:cd:bd:68:a4:3f:a5:95:19:82:43:c5:b8:98:39:
                    02:70:41:79:cf:bf:04:5b:68:e4:b7:a4:3c:f0:a1:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5F:86:C8:3F:45:E2:87:E7:A0:44:4E:FE:8B:BD:FE:FB:5B:32:4E
            X509v3 Authority Key Identifier:
                keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:62:86:af:ba:17:fb:91:4d:b3:74:d8:34:ba:6a:50:c9:d8:
         40:f9:b2:34:b2:75:8b:65:75:a6:9c:87:bf:30:f5:7d:9f:9a:
         fe:1d:eb:4c:be:57:ab:37:4a:a7:5d:63:9a:dc:c8:db:33:bc:
         39:71:1e:25:99:f2:90:ee:15:77:2b:c4:62:72:9f:2f:db:ba:
         34:2e:ce:7f:27:92:fd:0f:ba:46:65:c2:08:98:6f:b9:39:16:
         66:4c:23:86:e6:42:14:6b:04:73:41:31:1e:17:03:e6:48:08:
         ab:7c:5e:6b:18:25:f2:e1:73:f2:6c:b7:e7:59:57:1d:ae:9b:
         d6:c2:d5:82:09:c9:f9:e6:8e:58:5c:57:3a:98:9e:f9:70:c4:
         f8:1f:19:60:2e:86:39:b6:0f:89:64:5a:ba:e7:c9:b5:69:c9:
         65:92:f6:54:e0:5c:17:12:10:93:d6:85:18:68:42:a1:4b:9d:
         4b:0b:43:54:ac:eb:22:b4:af:ed:77:c4:d7:00:22:d4:1a:ef:
         49:39:51:57:62:78:32:f2:d1:53:fa:0d:bd:23:90:93:47:5c:
         d0:3d:97:91:01:48:76:bf:0d:7b:43:9f:2e:7c:d8:89:27:ae:
         c4:21:77:cd:88:11:fb:81:47:ea:35:d3:e4:01:09:3f:76:79:
         6b:b1:b1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:09:17 2025 by rpki-client