Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
File:                     553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft (raw, json)
Hash identifier:          I/rcG9JL3OnAh/MKJf2TT5f7Sf3Iim7UlmTn1nxDjVA=
Subject key identifier:   37:46:C7:51:D4:36:E7:5F:1F:05:E6:9E:11:0C:B6:DC:30:B8:BF:C5
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       2F18281FADE784591D2C91AD2058C3736027DD1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
Manifest number:          0215
Signing time:             Mon 07 Apr 2025 20:40:00 +0000
Manifest this update:     Mon 07 Apr 2025 20:35:00 +0000
Manifest next update:     Tue 08 Apr 2025 22:41:00 +0000
Files and hashes:         1: 323830343a316263343a3a2f33332d3336203d3e203631373438.roa (hash: R9Ypkor/WoHs60LGm1RBpGk2/E0qx6LSSMm085WqZk4=)
                          2: 323830343a316263343a3a2f33322d3332203d3e203631373438.roa (hash: fx3GC2PjzxZS+TP5eg2gWKqb+Bx1gDYgAGUp7a+Uz6A=)
                          3: 3133312e3130302e35322e302f32322d3234203d3e203631373438.roa (hash: qfXE7nk5zIvZ8zF6lSKD0ac4PVKN8s6TbiY3e3LYvPE=)
                          4: 323830343a316263343a383030303a3a2f33332d3336203d3e203631373438.roa (hash: fHDktS56ceDRKJNTcLYQHshho2zr/20DhLThwfyjX9g=)
                          5: 553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl (hash: Aj89NpQC7ry3JF2MMYcquaMONji9JAQL6iQqIWJKQck=)
                          6: 3137302e3234352e39362e302f32322d3234203d3e203631373438.roa (hash: okVUoFBlFLld3axAtCBF6exoM2whDbn+7HWWF6SACoo=)
                          7: 3136382e3138312e3139322e302f32322d3234203d3e203631373438.roa (hash: ZXRVRjNECSD6TToif/BN4X1G+EfyrgQhssN5r5VJ7+k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:18:28:1f:ad:e7:84:59:1d:2c:91:ad:20:58:c3:73:60:27:dd:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr  7 20:35:00 2025 GMT
            Not After : Apr  8 22:41:00 2025 GMT
        Subject: CN=3746C751D436E75F1F05E69E110CB6DC30B8BFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:40:72:77:11:7f:90:34:75:8e:cd:b7:0f:
                    41:ef:47:09:16:77:93:62:1e:2c:85:e1:43:ca:a7:
                    d8:90:50:09:4d:a0:60:5e:63:68:6a:33:7a:36:63:
                    b4:25:cd:4b:a8:1a:4a:96:2e:ec:65:e0:b7:5c:75:
                    81:43:3c:65:25:31:f5:dd:25:e0:61:f6:b8:96:44:
                    cd:aa:30:8b:d5:64:05:22:21:a1:54:91:62:1f:13:
                    d7:33:cf:1d:10:06:c1:68:eb:4b:9d:b8:7e:ce:bf:
                    57:e2:63:a1:67:ae:62:c3:c1:6d:7b:e4:42:57:02:
                    ff:21:cf:c1:ab:71:7b:74:ba:e0:3a:ab:f1:a3:c0:
                    b6:01:38:9a:72:6b:64:b3:fe:67:4d:4e:00:19:19:
                    5e:73:fb:50:9b:3b:8d:20:ac:ef:87:b9:5a:96:fa:
                    ae:eb:03:57:18:be:c8:65:96:f6:99:4b:33:ff:3b:
                    2d:a4:65:86:4f:bd:21:c5:08:b2:61:ee:32:85:48:
                    8c:ab:be:80:ee:52:e2:61:55:1b:de:2f:5d:95:36:
                    57:90:9c:c1:2c:40:81:1a:19:43:6f:ef:cc:f7:7f:
                    79:b3:b6:63:5d:19:a3:c4:ff:9b:78:06:17:f8:45:
                    15:51:65:40:be:91:ce:75:e5:a1:aa:bc:fd:a8:d9:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:C7:51:D4:36:E7:5F:1F:05:E6:9E:11:0C:B6:DC:30:B8:BF:C5
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:ec:0b:4b:11:5e:03:0d:71:2d:b7:25:ea:9c:28:5f:08:
         ea:9c:ed:43:c7:e7:50:64:e2:b7:3c:7c:98:cb:6b:b6:b6:66:
         dc:c0:e1:5d:fd:6e:76:e8:64:46:90:c3:8f:e6:3a:1a:b0:cf:
         23:83:fb:86:6f:91:cc:63:ae:7e:7c:94:5f:87:8c:f0:03:fc:
         99:ad:19:60:1c:ad:16:60:54:23:31:53:c9:b0:e3:ab:b3:3a:
         07:7a:c3:0f:03:c6:0e:9c:a7:99:45:b1:13:18:63:59:bf:29:
         40:50:05:c5:b4:f2:69:96:26:9a:42:34:fc:d3:70:68:4c:21:
         6e:24:40:f9:4b:9e:03:54:10:0f:7a:66:57:ac:fb:46:a2:a9:
         83:a0:85:49:53:5e:50:d6:63:5e:5d:7a:b0:8b:71:bc:67:01:
         58:4c:a9:b1:cf:19:0e:e5:a1:d6:90:97:b4:0e:e9:00:ef:2b:
         db:f6:38:ab:96:b6:3c:c2:f3:b7:0c:21:9e:3d:12:b0:5a:c1:
         b6:4b:e2:8c:38:55:86:a7:42:05:da:63:98:d6:83:bf:bf:d7:
         73:b8:95:bc:00:b2:61:09:4c:f5:cb:99:90:ed:59:d5:a2:92:
         e3:73:6a:b4:2b:93:9d:44:51:b7:4b:41:94:8f:b9:98:2e:bb:
         3b:2d:b9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:01:02 2025 by rpki-client