Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
File:                     7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft (raw, json)
Hash identifier:          A3F3uqMphEBJ3oklQ+KcBW/RmbAuhyCWwScGTZTln7k=
Subject key identifier:   29:CF:AD:25:ED:90:F3:7D:9E:B5:0A:26:12:C2:F2:56:5D:C6:34:86
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       19A020DB0F583294A2FA389060AF357286D28A8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
Manifest number:          01E9
Signing time:             Fri 04 Apr 2025 21:40:00 +0000
Manifest this update:     Fri 04 Apr 2025 21:35:00 +0000
Manifest next update:     Sat 05 Apr 2025 22:27:00 +0000
Files and hashes:         1: 3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa (hash: bRNVOZwBRYHeRLOC9VFJrTZW20aV4eMBJ0UbBc7OJL4=)
                          2: 3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa (hash: 4bkZgKiQUw/bCtUNTcBVGW3qimlL8NES5CdU9BpOcmg=)
                          3: 3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (hash: CDVybznQUICv+97JC1NTzuzJDlRwjzfxqO4x+j+8S9U=)
                          4: 3133382e39372e31362e302f32322d3234203d3e203532363034.roa (hash: ADJcyWrTUrSA2wIn1N23WaRSq+5BCusmLWHHlJv5llM=)
                          5: 3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa (hash: SdMfwOjgcA1R4Gwfzli7K9nzpPKqJk7EL6mIUoQaN1E=)
                          6: 323830343a6432383a3a2f33322d3430203d3e203532363034.roa (hash: kJjwIHnZZ2V959/qFZXoTKiDtanW1Nmeghj39L8sSQ4=)
                          7: 7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl (hash: bGTS2jtAsi0pdPPrJQap1/u0gITOCAn+b0JvMFWFZzo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a0:20:db:0f:58:32:94:a2:fa:38:90:60:af:35:72:86:d2:8a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Apr  4 21:35:00 2025 GMT
            Not After : Apr  5 22:27:00 2025 GMT
        Subject: CN=29CFAD25ED90F37D9EB50A2612C2F2565DC63486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:ce:1f:13:ff:4e:84:65:b2:1b:8c:d0:05:
                    6d:a6:86:8f:96:7c:97:60:3b:79:8b:57:b9:02:75:
                    c1:b8:ca:35:e0:1f:84:51:c0:42:66:3b:c7:8c:91:
                    90:9c:48:b8:1b:e4:22:61:f9:8c:71:8e:a7:ef:16:
                    24:2c:5e:e6:47:64:d8:65:85:ea:33:03:1c:9b:46:
                    0c:f8:64:08:60:ab:35:2e:03:81:1d:56:da:a5:b7:
                    5e:36:b7:d0:5c:f4:25:46:37:eb:88:54:ac:92:86:
                    cb:05:61:1b:34:41:31:c1:26:d8:58:ef:2a:05:d3:
                    a2:b2:3b:0e:89:67:7d:6c:ed:3d:92:be:ce:62:e0:
                    0a:57:ad:a5:31:4c:41:7a:a4:b1:a8:a5:f7:82:e8:
                    b5:6e:36:27:08:37:c5:a5:82:55:94:4a:ef:94:77:
                    8e:76:45:9b:61:1d:25:a5:c9:5b:8c:04:1c:a7:28:
                    d1:61:e3:9b:92:8d:63:25:3a:ff:03:91:a5:a1:04:
                    8b:64:87:7a:d2:56:64:5c:b9:79:e3:75:39:47:4e:
                    fe:20:79:fe:f2:2f:74:ed:d6:63:99:50:6a:08:a9:
                    77:5d:63:2c:76:75:db:7f:fd:d4:4b:ed:b8:20:cb:
                    ef:42:3f:5a:33:d5:52:cc:4e:a4:57:f6:3c:a4:37:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:AD:25:ED:90:F3:7D:9E:B5:0A:26:12:C2:F2:56:5D:C6:34:86
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:0b:86:8d:9c:83:d1:6a:6d:7b:22:4a:08:bc:3e:b3:e3:
         8b:ea:dc:fe:5f:5d:be:15:05:6c:ce:35:73:d8:b4:bc:e0:87:
         c3:fc:de:56:3d:ad:24:23:2e:4e:8a:e6:99:18:75:f7:cc:39:
         67:52:5f:11:27:77:0c:7b:87:1e:48:5b:54:3d:e6:5b:e3:63:
         c1:b0:84:a6:02:d0:24:a7:2e:aa:87:d5:e3:f6:52:51:d2:7c:
         f8:8c:ab:f6:e1:3a:fb:3e:32:7c:d4:c6:c9:fc:7e:07:00:6c:
         27:23:57:9e:c5:21:73:4d:58:e2:22:a7:02:66:80:79:3a:2a:
         4f:e4:5b:7e:cb:f7:32:1d:5e:f5:1b:72:2a:6e:8c:fc:23:ef:
         ee:db:bb:e1:47:45:76:a2:12:d3:2a:ea:28:e0:31:49:aa:08:
         cc:e2:39:88:48:11:8b:52:84:8b:11:29:b5:7a:06:cf:2b:13:
         c0:c0:51:c7:6a:b3:03:29:11:1e:79:63:b4:af:3d:3a:ed:48:
         c4:a7:16:51:2a:ce:e7:8b:1c:df:f0:96:dc:84:26:17:2e:74:
         4b:c2:e9:99:f3:ba:e6:61:6c:0f:30:6e:f4:e4:9e:ae:d5:3c:
         b1:72:0a:0a:3d:5a:84:d3:02:35:19:15:9e:89:03:1a:19:be:
         5c:7a:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:05:52 2025 by rpki-client