Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
File:                     9D35D29D04D84C156E4112BF977E37E007A4B928.mft (raw, json)
Hash identifier:          wZQlPq0uJVR4UOQHs2Ds6NjPzsiyThDtol+XCgSPBmk=
Subject key identifier:   A1:F0:4D:C4:CE:51:4F:89:64:67:89:24:9A:5A:1F:DF:D4:2E:34:72
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       27B821DC1EA5537191895134B4997ED602BAF574
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
Manifest number:          31
Signing time:             Thu 17 Apr 2025 16:39:29 +0000
Manifest this update:     Thu 17 Apr 2025 16:34:29 +0000
Manifest next update:     Fri 18 Apr 2025 17:36:29 +0000
Files and hashes:         1: 3136382e3139362e31372e302f32342d3234203d3e20323635313835.roa (hash: rs4igP0rol3QUSP0Ukez8pL4YsfuHmUd8fnekmzYeIg=)
                          2: 9D35D29D04D84C156E4112BF977E37E007A4B928.crl (hash: 0zvfjQdvp/z0LiU+KeBIK8wmAsYuRzY8tyKPgMfaeZY=)
                          3: 3136372e3235302e332e302f32342d3234203d3e20323635313835.roa (hash: xoylEXfPSjiluEJg5EeXbu52n5n9vcxig+jaA7WRHoQ=)
                          4: 3136382e3139362e31382e302f32342d3234203d3e20323635313835.roa (hash: teX9jzjYhsiSLM/d3uxORJN8BbdlkSevTPbirpElA+M=)
                          5: 3136372e3235302e312e302f32342d3234203d3e20323635313835.roa (hash: V/VLcFQtngcEknKR3HhnTVzf6u5+gZuJeswXK5tTePk=)
                          6: 3136382e3139362e31392e302f32342d3234203d3e20323635313835.roa (hash: HhhCjWQyHaWlHJMknayV1db32cd4oT7Mv5fPC/u+fPA=)
                          7: 3136372e3235302e302e302f32322d3232203d3e20323635313835.roa (hash: t7w+Jx8q2FYmpEqJjLAnjKl6DdatWNVQyP+WmHtkHk4=)
                          8: 3136382e3139362e31362e302f32322d3232203d3e20323635313835.roa (hash: uG4FGIlZt8/SEK2hGin2obNrSlP8VYyKrSAlcGaRX5c=)
                          9: 323830343a326266383a3a2f33322d3332203d3e20323635313835.roa (hash: mHBUXZXOZWNsRg9tadGWL23UPyYh7Mt+qtGl3aMu8Ic=)
                          10: 3136382e3139362e31362e302f32342d3234203d3e20323635313835.roa (hash: vJB3OKquVqV0ck7o3pKfhAsDINEoIS6KfFs87UzjsWo=)
                          11: 3136372e3235302e322e302f32342d3234203d3e20323635313835.roa (hash: MPqSTLlmxhFcu8JrzmMTCeoon9/LWUc5qr73P2qVKT8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b8:21:dc:1e:a5:53:71:91:89:51:34:b4:99:7e:d6:02:ba:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Apr 17 16:34:29 2025 GMT
            Not After : Apr 18 17:36:29 2025 GMT
        Subject: CN=A1F04DC4CE514F89646789249A5A1FDFD42E3472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:a0:eb:71:72:32:d5:0f:d0:e1:59:7f:8c:
                    c5:20:4a:a4:5d:6f:ef:b2:1d:02:3e:d8:84:38:a6:
                    2c:04:a4:23:a7:7a:16:b3:d5:ab:bf:e0:9f:2e:8d:
                    79:94:a3:e9:ca:8b:92:1c:9a:20:bf:e2:23:c5:c4:
                    bd:fb:bd:39:03:45:67:9e:49:64:61:df:ac:f5:ba:
                    1a:74:f7:86:c8:91:e0:54:f2:e2:34:db:ff:4e:f8:
                    7f:21:75:8b:fc:7a:69:bd:d1:df:41:6e:75:50:d4:
                    79:e2:cc:36:84:45:e4:ff:83:4c:b5:df:02:bc:14:
                    26:8e:99:5f:2a:a0:44:c4:ef:67:c4:72:3e:d8:9b:
                    71:2b:26:81:9d:9f:a2:0f:81:0f:f1:4d:68:14:b0:
                    12:28:6e:4c:38:c9:b8:8b:ee:9a:a1:7c:e5:ee:41:
                    8a:a8:58:fd:22:7e:6f:9b:f6:4f:27:b9:79:6a:7f:
                    ad:eb:a4:33:dc:f0:51:a6:f1:eb:56:1c:d5:f1:ce:
                    eb:4f:0f:e0:02:0e:af:ce:b2:00:9b:b4:23:78:c6:
                    49:c8:d4:56:bf:63:82:6a:a7:35:f5:aa:c2:fc:9f:
                    eb:a2:44:07:44:87:00:23:aa:7e:e4:ef:b6:27:3d:
                    c3:1e:df:8a:f8:32:c0:78:c7:da:ca:59:4d:29:69:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F0:4D:C4:CE:51:4F:89:64:67:89:24:9A:5A:1F:DF:D4:2E:34:72
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:8a:bd:33:5d:a5:87:fd:d5:da:df:04:95:cd:fa:b0:b0:
         1a:ca:16:76:8b:cd:74:68:6d:5c:35:b0:87:59:14:41:50:4a:
         ce:97:e2:01:88:f3:83:1f:1d:a7:e7:29:d7:26:8b:39:af:cf:
         a2:fe:3b:2e:37:3e:c3:20:5d:e4:77:d3:0f:da:91:79:38:80:
         33:82:b2:ea:9d:ef:40:14:6b:47:4f:e9:ad:d5:da:e8:e8:08:
         58:69:5b:7d:0d:a3:0c:6a:b6:b9:84:cc:2f:aa:4d:8f:bc:3c:
         9b:d8:9c:44:66:fe:f4:b7:b1:4a:53:7c:d9:d4:f1:b5:6d:a1:
         56:ec:ba:65:57:14:56:3e:f7:07:16:27:37:fe:70:f6:06:c8:
         a6:e0:35:16:52:6d:31:08:59:39:ad:91:dc:29:73:d5:dc:e4:
         0a:85:18:97:5c:b6:70:63:3f:77:75:35:43:03:b7:ae:df:8b:
         c6:eb:1f:d7:94:45:da:1d:0a:b6:b5:33:90:e3:4c:1e:61:7e:
         56:96:a6:01:1f:91:af:a4:00:19:d3:f0:77:93:66:b8:d3:21:
         ea:01:e5:eb:fc:20:8a:3e:09:ab:97:bd:85:41:b9:a7:f2:fc:
         ef:ec:37:b2:95:d4:74:13:df:67:a3:9b:5e:62:07:e6:82:64:
         26:da:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:50:11 2025 by rpki-client