Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
File:                     2E8650E1A7B09F7749A5126450B8242131048354.mft (raw, json)
Hash identifier:          sEPI4c14+arqHs2OKLqKR4fIqMvz9IwoD3JRKiMEq4E=
Subject key identifier:   0D:10:D7:99:41:78:12:16:67:E6:E2:C9:C7:82:FB:3F:E9:64:C1:CC
Authority key identifier: 2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54
Certificate issuer:       /CN=2E8650E1A7B09F7749A5126450B8242131048354
Certificate serial:       6C4F97BF2C104AD4617E10548FDF914BCF99EF94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
Manifest number:          3B
Signing time:             Wed 19 Feb 2025 08:45:02 +0000
Manifest this update:     Wed 19 Feb 2025 08:40:02 +0000
Manifest next update:     Thu 20 Feb 2025 11:52:02 +0000
Files and hashes:         1: 2E8650E1A7B09F7749A5126450B8242131048354.crl (hash: fvb21O5SqsjyeZZvXSvTmBOku8pTF5efuR92L+FAQRE=)
                          2: 34352e3137332e3232302e302f32322d3234203d3e20323638383239.roa (hash: 0fbl4Nt+LJET4F45bay6iK3Uv8jm0eAtJZhWEv6V2gY=)
                          3: 323830343a356234303a633030303a3a2f33342d3334203d3e20323638383239.roa (hash: HdfrmK0WCTRS0CN/KbFV5GfzHGe7J3tX4nwtnLJC8Y0=)
                          4: 323830343a356234303a383030303a3a2f33332d3333203d3e20323638383239.roa (hash: 9+e4o7wDP5vil4UkM3MJfpA1wkqsKjpP1kmMIfTDrxo=)
                          5: 323830343a356234303a3a2f33332d3333203d3e20323638383239.roa (hash: H2a7GxOWagC5TIiAYn1gLC5jcrJ4e5MwxJn9kAp37E8=)
                          6: 34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa (hash: aoR4SWmGzpQPG69zKzbTb09O3XY3+zdRv+Fu0NAqgaA=)
                          7: 323830343a356234303a383030303a3a2f33342d3334203d3e20323638383239.roa (hash: bfHXTfbc87jJz6e+fZocCYgtqTquZLKecVJORLkJUdg=)
                          8: 323830343a356234303a3a2f33342d3334203d3e20323638383239.roa (hash: wK0ZQJFbKvQzsOCDuudk7QQ/bB1rRY2GpFKFYVxgOJ0=)
                          9: 323830343a356234303a3a2f33322d3332203d3e20323638383239.roa (hash: uWtTok8/SWinpdvoaLccJqLT3QzD22YmQzKWwYQIB9U=)
                          10: 323830343a356234303a343030303a3a2f33342d3334203d3e20323638383239.roa (hash: bhsKrD7ojXoMwGt8AyWWdSVOidNf4TwPVXnlI/jv3s4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 11:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4f:97:bf:2c:10:4a:d4:61:7e:10:54:8f:df:91:4b:cf:99:ef:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8650E1A7B09F7749A5126450B8242131048354
        Validity
            Not Before: Feb 19 08:40:02 2025 GMT
            Not After : Feb 20 11:52:02 2025 GMT
        Subject: CN=0D10D7994178121667E6E2C9C782FB3FE964C1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:93:dd:6e:e3:bf:6d:3e:70:e4:aa:85:cc:b5:
                    c8:04:fe:10:e4:be:36:18:aa:02:b8:ca:d8:e6:d3:
                    b2:27:c1:70:51:9f:1e:1f:66:9c:bb:3c:53:c1:4d:
                    db:cf:2c:be:f0:ff:ec:48:56:59:97:c0:b5:00:bd:
                    e3:b3:c8:dd:40:0e:5a:ac:62:b4:80:16:4c:8b:71:
                    3c:37:97:80:7e:ce:41:b5:30:c6:9e:bf:38:b7:d4:
                    32:26:1b:e4:73:f3:dd:d6:dc:03:51:e5:d2:a2:ab:
                    52:aa:da:13:2a:b8:78:f2:93:c3:96:a6:4f:2c:aa:
                    c9:be:c5:68:3f:a5:44:90:81:3e:7a:94:74:d7:59:
                    f3:77:ca:40:81:2c:6c:f1:76:2f:f0:89:b5:16:51:
                    ed:34:ef:f9:1f:38:53:04:3f:3a:7c:bb:60:1c:7d:
                    6f:c7:07:94:c9:be:3d:ba:70:ab:ce:23:2c:30:a1:
                    7d:1b:5e:e8:e4:b0:56:c9:2b:98:c7:96:31:26:5a:
                    97:8c:d8:8e:ca:5c:46:f0:e9:65:a8:42:ea:79:68:
                    80:b3:91:aa:6e:79:91:2b:26:cb:bd:fd:19:5a:0a:
                    5e:32:f0:39:72:78:c0:00:26:8e:c4:4b:46:39:c9:
                    b8:20:cb:19:79:de:48:48:df:5b:9b:27:76:32:17:
                    0d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:D7:99:41:78:12:16:67:E6:E2:C9:C7:82:FB:3F:E9:64:C1:CC
            X509v3 Authority Key Identifier:
                keyid:2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:c0:b4:d6:ce:59:d9:75:3c:a8:b1:3b:f5:56:e1:8c:a6:
         bd:1c:89:7d:80:18:30:8f:5c:c6:e4:e4:89:e1:40:b1:cc:e6:
         52:8f:9f:0b:dd:6a:1d:31:a5:f2:07:21:df:56:fe:80:26:af:
         17:3a:99:11:ea:aa:f0:1b:7b:15:69:ec:40:c1:67:7f:fe:77:
         c0:ed:90:c6:32:af:05:27:a5:a1:db:d5:e7:f6:86:97:6b:01:
         9d:99:a2:98:8e:c9:76:fa:ec:c5:95:0b:cb:60:cd:be:45:41:
         ca:19:ff:c2:55:9f:87:bb:a4:b7:ac:f0:ae:94:ba:d9:0b:74:
         51:b2:f6:7b:2c:3d:cc:50:43:2d:6f:14:b9:7e:7a:61:94:8b:
         96:86:bc:c3:64:22:a1:d9:75:51:5f:48:9f:3d:3e:f9:e3:71:
         83:d2:76:67:77:d5:f4:d1:bd:f6:03:61:d2:2b:48:cb:c2:98:
         bd:5b:c5:6a:2a:7d:92:62:38:64:21:ec:b1:65:c6:87:ac:4e:
         7f:40:42:4a:dd:94:8a:69:6d:2d:09:9c:7d:25:32:72:11:ef:
         2b:57:b0:92:91:91:c0:07:8e:81:59:da:3f:00:48:4a:74:36:
         d6:76:89:dd:9e:00:77:a1:e8:b4:32:9c:ca:93:b9:d8:4c:56:
         2f:fc:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:47 2025 by rpki-client