Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft
File:                     9D1976629022211514D82A46F1AF3344D2E667F3.mft (raw, json)
Hash identifier:          CR/VuHssNno9RTmxGe4XgJ7CwhAPvbtWZdtxgQN3RdI=
Subject key identifier:   16:5E:42:34:DA:4D:2B:3A:C9:02:1A:60:AA:AF:42:04:2B:0A:EA:38
Authority key identifier: 9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Certificate issuer:       /CN=9D1976629022211514D82A46F1AF3344D2E667F3
Certificate serial:       3FFC5CE99AD59EBDED40E1E425CBF36533CC249E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft
Manifest number:          88
Signing time:             Mon 17 Feb 2025 19:34:18 +0000
Manifest this update:     Mon 17 Feb 2025 19:29:18 +0000
Manifest next update:     Tue 18 Feb 2025 20:45:18 +0000
Files and hashes:         1: 9D1976629022211514D82A46F1AF3344D2E667F3.crl (hash: HX2+0Z+0mp7lImSH1PGGPZJbXb8mb+kpzab7O6ASPd8=)
                          2: 3133312e3130382e36372e302f32342d3234203d3e203631363830.roa (hash: GVO2j3whv3QxzgaaF+MsA7DbirwTemexfta9EcZSPI0=)
                          3: 3133312e3130382e36352e302f32342d3234203d3e203631363830.roa (hash: 5XYrWecKBJIGPnYXovVlebNP5gBxb1ad+E+Z4IPJAlQ=)
                          4: 3133312e3130382e36362e302f32342d3234203d3e203631363830.roa (hash: VsHpInH1Hy89SHajoZueLIIYnnU1uCZkAPp3lr7jKIs=)
                          5: 323830343a316365303a3a2f33322d3332203d3e203631363830.roa (hash: ppan4gv0K+ZiQ3TGJ4RRkU2+VzrCQCw3cD/Qk3tm07o=)
                          6: 3133312e3130382e36342e302f32322d3232203d3e203631363830.roa (hash: vglaPSlZ2cyuJWX7glVcgG0bfLRHvjfuE/FasuFPuWg=)
                          7: 3133312e3130382e36342e302f32342d3234203d3e203631363830.roa (hash: Ru7BA/ZzHr3BP41zTYZePxXDp4Gg3A9O5yfPPFXixDQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 20:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fc:5c:e9:9a:d5:9e:bd:ed:40:e1:e4:25:cb:f3:65:33:cc:24:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1976629022211514D82A46F1AF3344D2E667F3
        Validity
            Not Before: Feb 17 19:29:18 2025 GMT
            Not After : Feb 18 20:45:18 2025 GMT
        Subject: CN=165E4234DA4D2B3AC9021A60AAAF42042B0AEA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:bd:82:a9:6e:92:ac:25:29:c4:10:75:77:
                    96:40:01:f5:44:2b:58:61:7c:11:bf:0a:54:27:fb:
                    6e:31:cf:1b:e5:34:4c:c0:dc:82:44:06:b8:df:50:
                    7a:92:95:0f:22:cb:24:72:6a:3f:e5:76:cc:60:a2:
                    4b:a6:c8:95:ff:d4:58:b2:15:94:db:d1:70:04:af:
                    66:e1:0c:56:33:93:12:25:91:6b:9c:f8:a8:99:db:
                    67:04:53:de:6a:dd:19:03:a0:57:f5:d3:89:7b:06:
                    37:50:fe:c8:ef:66:04:77:c6:15:48:c5:0a:1f:fa:
                    bd:a3:60:6b:86:93:48:fa:15:7d:4f:ed:91:6d:ce:
                    20:a7:82:51:eb:70:bd:f9:49:bf:f5:d4:67:d5:04:
                    2b:80:aa:ad:47:38:8e:7f:ec:96:cf:5f:50:f4:39:
                    33:7c:b1:b4:09:cf:de:3c:40:21:b9:62:8e:f1:f1:
                    da:6d:c0:b4:49:3c:f5:f0:aa:02:5d:36:b1:3b:4c:
                    4d:b4:c5:06:da:91:ec:a4:94:23:58:40:08:0a:43:
                    fc:5b:0c:fd:ef:bf:12:14:dc:63:2b:58:b2:39:58:
                    49:c0:8a:3b:9c:b8:51:54:e3:cf:d0:0b:4c:23:b7:
                    22:0b:9a:3c:c7:2d:fc:85:db:d0:dd:35:29:3e:63:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5E:42:34:DA:4D:2B:3A:C9:02:1A:60:AA:AF:42:04:2B:0A:EA:38
            X509v3 Authority Key Identifier:
                keyid:9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:df:ce:46:ff:2d:e6:50:3b:e1:3c:3a:43:9c:8f:dd:b3:8d:
         15:26:6e:f0:99:18:e2:5a:f7:3f:ec:bd:64:cc:c7:35:f3:ad:
         62:2d:32:f9:c0:38:97:fb:cf:f1:77:9c:82:9d:c3:f7:87:ad:
         ac:fa:36:cf:74:86:ce:26:3f:2b:8c:0a:ec:8f:ec:8f:de:f7:
         1c:ba:ac:87:bb:0e:0e:99:86:47:9d:c1:4b:dd:3d:46:d3:a8:
         39:ac:51:95:a5:f2:14:7f:0d:fc:a7:52:14:90:71:41:be:82:
         11:50:f3:78:ce:d6:22:e0:7a:db:dd:1e:99:fe:de:a7:75:91:
         e2:fe:26:65:78:95:1d:a9:60:49:fe:85:70:c0:3b:71:ff:9c:
         54:91:79:b6:e2:ac:f9:84:ba:e0:10:df:89:46:24:85:00:da:
         0d:30:0a:e4:78:91:33:ad:be:e3:fa:75:3e:47:6a:97:2f:f5:
         4a:4b:56:38:23:eb:b0:10:21:90:e9:74:67:21:85:fc:31:38:
         ae:2b:99:d0:ed:f0:6a:34:f9:fc:d5:75:b2:6e:42:1b:ad:00:
         f2:0f:17:31:49:50:d9:a3:e6:a1:d1:ec:67:4e:37:55:22:18:
         5d:06:6c:70:18:76:cd:40:af:42:4b:ad:06:b2:b5:c3:46:8e:
         c9:0d:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:43 2025 by rpki-client