Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
File:                     70BE7503F48CCC14271EE75026EB08184789273F.mft (raw, json)
Hash identifier:          fubAMemHXF6InGS8iZ42SqtSWxnwKI12Ou5R5JYXmUE=
Subject key identifier:   21:58:E3:30:1D:73:CC:03:E9:4A:02:2A:6A:08:F4:5F:9C:73:99:9D
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       22CCD057A08CDCD1F68EFF1A6413CBCCB24EA819
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
Manifest number:          20
Signing time:             Tue 22 Apr 2025 01:56:03 +0000
Manifest this update:     Tue 22 Apr 2025 01:51:03 +0000
Manifest next update:     Wed 23 Apr 2025 03:17:03 +0000
Files and hashes:         1: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: k/hN6TA+OFbKdFdz77MEM9ytllTB/QKnmxnXWeZa6qY=)
                          2: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: GnaFMFJMItjMD48L6aTqrOzJUKteHuSGOsSUDz/lric=)
                          3: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: RSdKeQglPgtopD8BJEGkCpkbirujqQSQj4MlN2LDu/o=)
                          4: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: ozqJWRXyGQb9byfX9zSPxp1Hhcod/DSMtaO1jZwvMiw=)
                          5: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: wyl4HwDk9SAF88SAhsmqolpBK40MpFDUT27xQj1gA1Q=)
                          6: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: QJ4HiBHxsCQQPRAtx+xxKlZCua3P1Dk8tHsptc5rspI=)
                          7: 70BE7503F48CCC14271EE75026EB08184789273F.crl (hash: s/ZIceKOXtfDNl1ZYrW95przuwbbtaHIa4ZUV9KEte0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cc:d0:57:a0:8c:dc:d1:f6:8e:ff:1a:64:13:cb:cc:b2:4e:a8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Apr 22 01:51:03 2025 GMT
            Not After : Apr 23 03:17:03 2025 GMT
        Subject: CN=2158E3301D73CC03E94A022A6A08F45F9C73999D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:dd:30:9d:68:26:2c:d6:ed:87:09:04:3a:
                    6e:ec:73:33:11:ac:e9:b3:54:2c:9c:14:d4:e0:f8:
                    1d:70:da:20:0d:c0:b5:12:ed:78:17:56:2d:cf:c7:
                    93:1b:6a:7c:59:b9:1b:f5:44:6c:fe:c3:3c:5a:a2:
                    63:49:45:39:a1:c5:d9:cd:1d:cb:72:cb:d8:de:88:
                    23:4b:6d:01:c2:17:3a:85:f6:64:43:d2:ae:2d:39:
                    bd:5b:8d:b1:0f:1e:d8:03:dd:a3:b5:7e:38:ff:d8:
                    66:a4:76:ce:ba:9e:d7:3d:17:5d:69:6e:af:3a:05:
                    ce:ed:cf:4c:00:9b:4d:0d:b5:40:c9:8f:aa:3f:95:
                    83:f2:ca:b9:fe:dd:cd:af:4c:aa:4f:01:85:7f:f0:
                    98:40:09:ee:07:cf:ca:d2:72:72:e1:fb:50:23:77:
                    61:62:1e:80:5f:7f:3f:52:a0:33:95:a4:b9:7d:86:
                    3d:fb:09:8b:2b:17:e7:2a:58:1e:64:88:da:69:b7:
                    31:30:c3:a0:c0:8a:07:a2:7c:fe:ac:2e:7c:a1:e6:
                    4e:f0:21:a5:c4:86:81:71:0a:c1:84:8a:08:47:bc:
                    e6:44:0b:dd:bb:e1:f7:4f:14:4d:de:7c:d3:9b:1b:
                    83:b4:b2:f8:88:fb:5e:03:1f:da:bc:fa:49:6e:f9:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:58:E3:30:1D:73:CC:03:E9:4A:02:2A:6A:08:F4:5F:9C:73:99:9D
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f2:68:ad:b8:87:19:44:d6:fa:17:2f:bc:29:ee:4f:11:a3:
         6b:80:c2:33:08:be:d3:5d:fd:64:4d:37:51:05:0b:86:2a:4c:
         c1:f5:39:1e:f5:4c:ad:65:d5:c9:f4:07:ad:1d:36:3b:37:65:
         4f:ba:e5:ec:3d:e0:d1:40:cc:4b:5d:34:04:46:fa:c0:33:bd:
         62:cb:9f:08:d0:ee:ba:70:45:9c:a8:d1:a1:1c:17:ae:83:cb:
         0d:e6:59:1b:40:5a:ae:0e:0c:c7:e7:24:61:fd:6e:a8:78:d7:
         83:c4:ea:20:0d:26:fe:33:86:58:d2:34:5c:c4:b1:6b:29:d6:
         de:8c:16:d0:98:1c:1e:c1:b0:5e:9d:e3:49:74:ef:64:8d:4f:
         05:8a:4f:7e:94:8c:eb:fb:09:d0:c4:94:ab:c6:5f:78:ef:38:
         ed:ff:98:ec:14:e7:cd:ca:f1:38:09:aa:2d:16:1b:5e:bc:51:
         6b:b9:22:2c:78:49:05:fb:89:9f:86:0a:27:46:d8:32:68:e5:
         33:32:39:6d:f6:a9:e1:8a:77:a0:f5:a0:27:a6:c8:68:62:3f:
         c1:2a:b9:aa:88:83:df:b1:8e:40:7d:98:6b:c1:6a:7c:99:89:
         5f:8f:42:06:b0:3d:bb:f1:08:85:01:d5:c8:2b:57:ef:4a:b2:
         cc:47:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:29:20 2025 by rpki-client