Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
File:                     A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft (raw, json)
Hash identifier:          IXW6skvG89jOKdWHOFg7k599U35EPr3M7LITYyyPDxs=
Subject key identifier:   C9:F1:29:95:24:97:36:9B:BF:0D:02:EB:CE:04:01:63:E2:60:11:40
Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
Certificate issuer:       /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
Certificate serial:       6D91ED458276FC4B88112E491FE1506BD408DC18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
Manifest number:          01D8
Signing time:             Sat 12 Apr 2025 12:08:28 +0000
Manifest this update:     Sat 12 Apr 2025 12:03:28 +0000
Manifest next update:     Sun 13 Apr 2025 15:07:28 +0000
Files and hashes:         1: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl (hash: cx/Ho5UIC5MlMKZZd+qFQh9Hd81/xNJSm8/u7cre0Zk=)
                          2: 323830343a386162633a3a2f33322d3438203d3e20323733363839.roa (hash: n1kbzFraQTrU55NvwMmEwJWQrPWRwSQumE6NyXA+2Wk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl
                          rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:91:ed:45:82:76:fc:4b:88:11:2e:49:1f:e1:50:6b:d4:08:dc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
        Validity
            Not Before: Apr 12 12:03:28 2025 GMT
            Not After : Apr 13 15:07:28 2025 GMT
        Subject: CN=C9F129952497369BBF0D02EBCE040163E2601140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e4:de:d9:db:05:f4:0c:5f:ef:e9:33:57:e0:
                    b7:5e:d5:3b:e6:41:bb:e2:03:73:db:e5:84:37:61:
                    53:62:13:60:38:8c:7f:94:90:53:71:ab:39:a6:9b:
                    20:71:87:16:1d:0f:b2:d1:16:8f:f2:ea:5d:67:66:
                    a4:d4:7a:b6:11:03:16:ec:69:49:14:09:0e:26:75:
                    30:ba:86:99:0f:a4:8a:73:ec:24:40:6d:b8:25:e0:
                    b2:fa:a4:11:00:ab:6e:58:4f:9e:9b:2d:b5:65:eb:
                    f1:c8:29:0f:64:2b:c4:da:f8:04:c3:ae:9b:18:d9:
                    c9:02:4a:46:24:0a:d4:94:64:d0:8b:90:4d:29:51:
                    cd:a8:b4:81:0f:c6:47:9b:c3:eb:45:a0:b1:76:01:
                    ef:9e:d1:57:48:47:c0:3e:15:90:c6:6e:1a:09:2e:
                    e5:78:1c:c5:bb:e2:85:65:8c:90:50:5c:8b:6d:63:
                    d2:0b:af:40:2e:a2:cb:2c:6e:b8:cd:45:84:47:2c:
                    db:2c:b9:d8:dd:90:67:4e:fc:83:22:cf:9c:90:11:
                    03:8d:e2:68:2c:ef:73:2c:e2:47:cb:72:75:cf:a0:
                    5d:e5:b9:92:6f:7a:27:d1:b7:d4:b2:c2:4d:a2:e9:
                    6d:18:05:db:4f:ec:83:d4:76:33:71:55:1f:ce:d9:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:29:95:24:97:36:9B:BF:0D:02:EB:CE:04:01:63:E2:60:11:40
            X509v3 Authority Key Identifier:
                keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:52:89:e1:e4:23:9e:6d:8e:9b:4e:1f:9d:cf:ab:71:d6:59:
         8a:a8:04:41:12:41:01:d5:59:f1:65:9f:21:10:2a:20:71:79:
         9f:34:d5:5a:43:9a:17:07:b4:46:21:62:65:92:55:c9:75:8d:
         2e:e7:f2:12:a8:85:b0:31:7e:27:d5:7b:e3:94:5f:78:88:8d:
         de:10:86:06:ce:71:43:d6:9f:51:c1:36:9e:0d:62:8a:d4:e7:
         a3:8d:52:8c:e3:4f:2f:78:ba:e4:80:48:83:54:21:61:25:d1:
         e2:0d:5f:af:63:4c:5c:78:33:9d:a0:51:35:55:d7:e1:32:68:
         0b:5a:e4:73:f8:1c:46:15:9c:a8:a9:8e:6b:96:73:8f:7e:ca:
         0d:b1:4d:f8:2e:64:9d:73:d8:22:fa:71:66:73:8f:fd:4c:60:
         54:9e:16:78:26:35:15:d8:03:b3:4b:47:3e:9c:cb:04:d4:aa:
         e9:ea:cd:cb:d9:29:35:c9:c6:33:e2:60:6f:25:fd:4c:65:0e:
         ac:8d:b3:e4:b4:5e:1e:22:03:85:87:55:5f:08:f3:6c:67:22:
         46:5d:97:16:f3:97:3c:59:7d:51:f3:87:33:8d:a5:fa:56:6f:
         8b:97:55:5a:7f:39:9c:1f:3e:ff:33:21:c1:6f:39:e9:c5:c6:
         62:f4:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:09:40 2025 by rpki-client