Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft
File:                     5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft (raw, json)
Hash identifier:          k8x3e6nqhr/IaLj/rMPQDP6irpNkLkTapgvGlb3DFjY=
Subject key identifier:   43:2C:04:47:F0:54:39:C0:E0:2D:80:FC:D1:47:90:32:49:61:40:CE
Authority key identifier: 51:96:AC:1F:82:B6:DD:9F:73:6E:54:97:59:F6:3E:C7:0D:9A:C6:4A
Certificate issuer:       /CN=5196AC1F82B6DD9F736E549759F63EC70D9AC64A
Certificate serial:       571D4AB6AB4F4D16AEDDC2B33C590E95FD4F119B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft
Manifest number:          64
Signing time:             Fri 04 Apr 2025 04:53:55 +0000
Manifest this update:     Fri 04 Apr 2025 04:48:55 +0000
Manifest next update:     Sat 05 Apr 2025 05:39:55 +0000
Files and hashes:         1: 5196AC1F82B6DD9F736E549759F63EC70D9AC64A.crl (hash: xwDzYV+w46AAfm9tPUXsyIeAXuVadXs0nvt0tMeUplE=)
                          2: 323830343a386539383a3a2f33322d313238203d3e20323733343336.roa (hash: ZgE7mkajnWfDvkfEErUbfcj4/me8cWyO3HdXxbdwaYw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.crl
                          rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 05:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1d:4a:b6:ab:4f:4d:16:ae:dd:c2:b3:3c:59:0e:95:fd:4f:11:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5196AC1F82B6DD9F736E549759F63EC70D9AC64A
        Validity
            Not Before: Apr  4 04:48:55 2025 GMT
            Not After : Apr  5 05:39:55 2025 GMT
        Subject: CN=432C0447F05439C0E02D80FCD1479032496140CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:f3:55:fb:4a:2e:1a:33:4b:bd:86:a3:a5:
                    10:af:c3:f3:fe:43:e5:89:97:78:11:09:20:fd:74:
                    c1:c3:8a:b3:dc:29:a9:5b:a2:a1:95:95:0c:f4:dd:
                    b2:63:4c:6e:48:14:ff:ed:34:9a:5d:d2:7e:14:23:
                    6f:ab:63:39:00:5c:b7:12:1a:b7:ab:f8:f2:3e:d5:
                    e3:0e:10:f1:dd:75:e2:55:63:6b:04:a3:c4:70:e4:
                    b2:f7:1c:64:4b:ba:8c:7d:31:94:25:fd:3c:37:39:
                    8b:12:07:57:6a:16:e5:6a:7e:58:a7:61:8d:a4:65:
                    48:2f:13:44:b7:b1:f5:41:96:24:bf:ae:4a:ca:f9:
                    10:e1:d9:3b:9e:93:f7:a6:ce:4b:b3:72:07:5b:55:
                    a8:42:8e:0a:8a:fc:0f:e7:06:86:f6:42:34:16:2c:
                    90:95:24:f4:62:43:cd:7a:f9:7d:ba:e9:98:67:ca:
                    e7:5f:63:67:72:19:62:32:a3:d6:7b:92:49:6c:1d:
                    9a:35:ed:86:8c:88:17:de:97:8e:47:dc:be:80:5a:
                    87:d2:e2:3c:e1:6a:0c:1e:09:9b:41:a6:a1:41:79:
                    83:40:8b:d4:92:95:f7:dc:53:8a:9f:5d:97:a6:5f:
                    c6:6b:73:dd:4d:7d:31:50:81:02:f9:6b:b6:80:ac:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:04:47:F0:54:39:C0:E0:2D:80:FC:D1:47:90:32:49:61:40:CE
            X509v3 Authority Key Identifier:
                keyid:51:96:AC:1F:82:B6:DD:9F:73:6E:54:97:59:F6:3E:C7:0D:9A:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:17:aa:74:59:e6:9f:37:ff:69:7e:da:97:1b:2a:fe:51:03:
         1f:21:ac:65:fa:1d:12:ec:54:71:80:8f:22:42:e2:66:97:67:
         cd:a2:05:61:f1:57:c3:75:7f:1c:29:e5:d2:ee:fb:b1:65:c4:
         e7:43:e5:9c:97:b4:29:c0:f3:ea:8a:4c:61:6c:a2:d9:26:7a:
         61:fc:08:97:64:3d:2d:fa:48:99:a6:e7:d9:8e:b3:e8:91:4e:
         0e:ea:49:6e:88:44:f4:e0:f9:84:cf:74:c7:5c:e1:60:0b:c2:
         da:29:05:0e:7c:97:94:c1:88:d3:41:2f:33:87:13:1c:51:9e:
         89:eb:33:2f:3a:50:0a:63:88:9c:fe:80:4a:f9:ab:16:d1:a7:
         f3:36:97:d8:88:ab:67:94:ab:8e:c8:d2:30:27:0e:9c:5c:2e:
         9d:73:b2:eb:7b:64:4b:6f:06:1b:41:79:d3:8d:ef:0f:00:71:
         f1:cb:f1:16:78:dd:47:58:db:e5:1f:5a:3b:62:a6:fe:0d:d6:
         57:70:2e:4b:9b:d0:ca:5c:b9:15:68:c9:67:22:30:c4:b4:38:
         aa:bb:99:a3:0d:18:c0:c1:6f:ac:02:6a:ab:69:08:ec:42:12:
         a1:84:7b:18:86:c9:61:b0:e5:9a:83:49:15:0c:53:21:64:22:
         39:97:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:41 2025 by rpki-client