Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
File:                     4F91864780E3C640327E24B527D2248C0C5CAD25.mft (raw, json)
Hash identifier:          fqYW5xjk0mXFnNyjrqcDF9bVlg3hlGVXaMEAVtY3Drw=
Subject key identifier:   64:24:73:90:DF:92:C5:C0:A7:7F:C6:2F:E0:76:CF:27:80:EB:D5:90
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       782F6446BFCDD8EF8DED38167D28F5FA1E2D99BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
Manifest number:          0103
Signing time:             Wed 19 Mar 2025 08:56:20 +0000
Manifest this update:     Wed 19 Mar 2025 08:51:20 +0000
Manifest next update:     Thu 20 Mar 2025 09:44:20 +0000
Files and hashes:         1: 323830343a6536343a3a2f33322d313238203d3e20323632393532.roa (hash: DjYnIWQIw5ct6/Q5BjqK7pUqh/AOseFi5Fy+pr/COxQ=)
                          2: 3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa (hash: d1rdYw+WohHTeJoQmV+Wst0zHDJ4n0we8oJb4iuXRyQ=)
                          3: 3137302e3234342e3130342e302f32322d3332203d3e20323632393532.roa (hash: oIY8cu4MSFQA4pfSIZovPTQO+XuAB9GW8kNvyVfbGV4=)
                          4: 3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa (hash: 3pHLTuvc6iKvbcHIu6jieiq2SLDCM3LtykLZmHBrpi4=)
                          5: 4F91864780E3C640327E24B527D2248C0C5CAD25.crl (hash: 932s4PG9d7tiJC3w6EjE1zxOr1SWspvisXZvw+avI9Q=)
                          6: 3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa (hash: YYY5LHvNiOIXLbX8zsHtfkroVpvH3VRV3a53S1TPPwQ=)
                          7: 3138362e3233332e3137322e302f32322d3332203d3e20323632393532.roa (hash: AJsOfr5wHT9YKSPMXmdoewYRPP7AYppI/d0nQRjAylg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Mar 2025 09:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2f:64:46:bf:cd:d8:ef:8d:ed:38:16:7d:28:f5:fa:1e:2d:99:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Mar 19 08:51:20 2025 GMT
            Not After : Mar 20 09:44:20 2025 GMT
        Subject: CN=64247390DF92C5C0A77FC62FE076CF2780EBD590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:ef:c1:49:70:a6:51:3f:24:78:2a:3b:96:
                    8c:5b:cc:80:c5:26:18:9b:49:b1:c0:d6:fc:70:1f:
                    ff:e1:73:0a:43:3f:5e:87:8a:9c:a4:a9:13:df:0d:
                    2d:65:39:e0:0c:7e:35:46:46:21:39:82:a5:0b:be:
                    c2:12:02:27:cb:a0:70:05:36:d0:f0:c0:52:21:62:
                    3e:b1:da:0e:0c:d5:7f:16:f3:89:a4:d5:cb:91:42:
                    c1:5a:78:7c:a3:e6:3f:6d:be:31:d6:37:32:fa:5d:
                    f7:9b:2e:85:db:2a:fb:b6:fc:34:39:72:40:c1:c5:
                    11:6d:83:61:f7:77:10:89:0e:23:b0:fa:fa:34:fb:
                    67:dd:4b:fa:d4:d2:1c:31:3b:64:d1:12:3a:13:ed:
                    db:3e:6d:f0:dc:41:93:64:26:43:16:e1:fe:5d:dd:
                    5e:29:0a:1a:9e:4b:56:8d:e6:f2:34:12:4e:b3:3d:
                    7c:27:cc:19:86:4b:b3:d3:24:90:f4:e2:52:00:d5:
                    9d:c4:8d:87:ba:db:48:0d:a3:02:13:69:ba:ae:1a:
                    9d:c8:0e:a9:39:ed:a6:90:76:28:99:9d:9b:cd:42:
                    b9:aa:4a:33:ed:50:46:a5:56:11:69:71:78:a2:66:
                    18:17:5e:d8:71:69:b9:c8:67:89:79:c4:35:e5:20:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:24:73:90:DF:92:C5:C0:A7:7F:C6:2F:E0:76:CF:27:80:EB:D5:90
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5b:6b:3b:1f:dd:3e:f8:46:6a:a1:c8:a5:5f:4d:b7:ad:d3:
         37:78:c8:5c:79:2e:a2:1c:14:cd:a5:57:70:52:f8:6a:ad:74:
         47:cc:e8:7c:ff:f8:f3:92:93:3a:6f:f9:59:23:d8:16:d5:e3:
         9f:e4:08:74:9a:66:cf:d1:a1:44:cb:6e:26:70:7b:23:1c:f2:
         b7:1b:05:a9:30:7f:df:2b:a1:a4:9e:2a:2c:12:25:40:47:5d:
         11:6e:3c:55:cf:79:7a:1f:61:6a:10:af:44:2a:9a:c7:a9:81:
         5f:ee:32:a7:57:71:4f:3b:98:26:7d:e6:f0:e1:06:f9:dc:19:
         28:6c:b0:a9:2e:76:3b:62:92:74:a7:05:6f:55:60:01:58:20:
         52:7e:76:02:4c:53:6e:b2:ee:43:23:4b:90:37:93:fd:a8:65:
         13:4e:ad:9d:5a:5c:a6:25:13:c6:29:4a:f4:17:ff:59:3f:1c:
         b0:77:a7:36:df:52:7f:58:47:21:d5:d5:e1:4b:95:92:c7:90:
         b0:8b:4d:61:8c:48:e2:98:85:c0:dc:41:aa:e6:4d:6b:95:66:
         36:3b:8f:b9:64:32:7a:40:80:b2:45:29:60:db:61:fc:3a:60:
         f6:c6:d1:22:02:89:80:ae:12:55:82:47:bf:3b:5e:ba:31:e3:
         0e:60:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 19:19:45 2025 by rpki-client