Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File:                     CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier:          eoPMUhDHjK2gEA0+7hDAxYKfj5dkpD9d70u5PrNnANE=
Subject key identifier:   31:0F:4C:87:0C:9C:A4:36:04:A0:95:66:D9:F6:FC:3A:64:CF:59:F1
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       110A0DD8B1EE591451F79509FDC66053B7BB5FD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number:          0228
Signing time:             Fri 04 Apr 2025 19:10:00 +0000
Manifest this update:     Fri 04 Apr 2025 19:05:00 +0000
Manifest next update:     Sat 05 Apr 2025 19:10:00 +0000
Files and hashes:         1: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=)
                          2: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=)
                          3: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=)
                          4: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=)
                          5: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=)
                          6: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=)
                          7: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=)
                          8: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=)
                          9: CA2ED340034D0368230850867C30E245990118A2.crl (hash: iI64V4GsJP5KhSTYc0q7osuNA8DwhsVHwly+pIGqNOc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0a:0d:d8:b1:ee:59:14:51:f7:95:09:fd:c6:60:53:b7:bb:5f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  4 19:05:00 2025 GMT
            Not After : Apr  5 19:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8d:6a:4f:0a:6c:6d:06:70:a0:07:5c:fa:8d:
                    c3:9b:47:89:cd:54:a4:ff:ba:22:d8:f5:9a:55:f4:
                    b6:5f:e3:c4:64:9f:3e:68:25:01:e4:ab:38:1e:d5:
                    ce:92:61:1b:3d:70:5e:1d:89:0c:7c:26:8c:25:c4:
                    5e:7c:96:c2:bc:ae:25:b3:6b:30:28:9d:e6:45:73:
                    ea:94:73:2f:09:42:30:31:51:2a:8c:9d:bb:90:49:
                    0a:45:98:ad:c7:e2:d8:6e:b8:0a:25:15:18:b5:59:
                    3b:c3:2b:e6:0c:4c:1c:a6:09:ba:4a:d6:fc:de:2e:
                    b3:6d:f4:40:d2:7c:32:74:7d:b6:8c:52:a6:1f:c8:
                    f8:18:b3:c9:22:7d:3d:00:4b:43:a1:78:82:25:3e:
                    af:d6:75:68:dc:81:d2:65:8d:d6:56:68:4c:a1:5e:
                    fb:2d:2e:20:3c:36:41:1e:5b:5d:9e:2b:00:43:99:
                    12:51:e5:e1:73:68:b3:b2:9d:66:33:58:59:12:33:
                    43:37:2c:20:b0:e2:83:d0:0e:df:32:fc:f9:d8:68:
                    b7:31:25:49:90:31:7c:e4:8a:ae:08:d2:d9:9b:55:
                    9a:0b:7a:61:6f:51:8b:a3:c5:66:95:e7:51:1f:f4:
                    1b:78:13:82:d5:a9:d3:ff:f7:7a:1c:c8:3f:cc:62:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0F:4C:87:0C:9C:A4:36:04:A0:95:66:D9:F6:FC:3A:64:CF:59:F1
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2e:19:84:7f:c5:93:9f:87:4b:99:b7:db:1d:f1:0d:4d:81:
         b0:e4:f5:44:e7:4d:2a:c9:96:f5:20:7e:0c:5a:a8:21:c9:85:
         92:74:ae:a0:96:12:ba:6e:a7:cc:38:6e:26:39:80:fd:e4:6b:
         20:e5:d6:11:c6:06:9b:3c:8c:e1:c3:4a:8b:c0:85:6c:bc:f1:
         ab:66:f1:90:b0:01:f5:a5:df:8f:84:7f:05:dc:e8:9b:fa:97:
         f8:d6:74:d7:b4:ea:ed:81:b9:9f:bb:89:1c:84:44:ba:39:d3:
         c3:7a:21:38:dc:3f:3b:97:e1:ad:f9:75:c4:62:cf:e7:18:fb:
         b0:44:22:17:8b:bc:07:8a:d8:19:a3:22:dd:dc:1f:a5:e5:8f:
         ab:4f:7d:c8:db:d1:41:c0:32:1b:f8:ae:4f:c1:9f:5e:5c:b4:
         8a:b4:60:6b:44:a3:81:d8:d3:b5:25:16:b7:22:33:27:5f:3b:
         6a:47:09:35:1d:47:e3:03:c0:cd:5a:e6:ec:f0:61:58:e2:d7:
         14:76:39:4f:1c:49:f4:df:62:0d:46:0c:51:36:5a:12:f9:c7:
         c2:f4:56:e9:a3:89:dd:55:1f:fe:b0:bf:85:f6:03:8b:24:d1:
         87:ca:cf:4c:82:51:94:90:d2:0a:83:56:9d:cb:81:f8:5d:cf:
         35:46:71:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:13 2025 by rpki-client