Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
File:                     9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft (raw, json)
Hash identifier:          CJr6Wr3LAocxALck16xQqNvLMcEFE8pCX7VAwj57xUo=
Subject key identifier:   84:3A:F4:81:16:C2:28:88:31:BA:4D:4F:5A:E1:5E:57:3E:2D:53:CD
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       6096117B1EAFA52CD25565949399AE1577C287C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
Manifest number:          0202
Signing time:             Tue 22 Apr 2025 12:17:43 +0000
Manifest this update:     Tue 22 Apr 2025 12:12:43 +0000
Manifest next update:     Wed 23 Apr 2025 14:38:43 +0000
Files and hashes:         1: 3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa (hash: qOYxKSbXFMWYCMCd0cfHsLap9YWtU6g/mQikYImWVDs=)
                          2: 9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl (hash: GQNWr9kIIy1dCOODOUdeo5z0L7pxv8gmvo6p8IwJKgA=)
                          3: 323830343a373566343a3a2f33322d3332203d3e20323731303830.roa (hash: KKo6mEZg+6hrNQFSZNxSdJVJv8IrUPtF9TS32n705fs=)
                          4: 3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa (hash: huZBXjBveXbkeDl9Ygz407fh26bfhevldZk2IvNbD+c=)
                          5: 3137372e38362e3133392e302f32342d3234203d3e20323731303830.roa (hash: cFBXGMUIwpvstinGqmfTxtN04/8OHzSPNQ71b7NtOq4=)
                          6: 3137372e38362e3133372e302f32342d3234203d3e20323731303830.roa (hash: D/atcLMvKF2Idxb5HIRLCDpkwyKY/xYbVaCXzt7E0Kk=)
                          7: 3137372e38362e3133362e302f32322d3232203d3e20323731303830.roa (hash: BDZX1mXQO26bKhRKl0TTv6LaJjeu90nNCFCGAkjZO/o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:96:11:7b:1e:af:a5:2c:d2:55:65:94:93:99:ae:15:77:c2:87:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Apr 22 12:12:43 2025 GMT
            Not After : Apr 23 14:38:43 2025 GMT
        Subject: CN=843AF48116C2288831BA4D4F5AE15E573E2D53CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:95:6e:d6:fc:37:38:50:24:84:f0:7b:53:
                    72:c2:33:ec:d1:b3:ec:23:b2:cf:0d:3f:fb:98:b5:
                    f3:2d:3a:67:11:95:af:09:cb:16:af:b1:85:66:7f:
                    b6:6a:c7:0a:c8:17:69:59:cd:58:da:f3:14:2c:2c:
                    ea:65:ba:b7:58:4e:96:c4:47:c6:32:94:16:68:79:
                    68:05:6c:b5:46:da:a9:e2:6e:3d:76:71:78:48:5e:
                    cf:df:50:40:e3:4c:b0:fd:16:04:b0:d8:7b:15:de:
                    f7:9b:5c:55:09:71:af:77:c3:27:94:db:fa:48:5c:
                    dd:6e:14:5f:ab:57:32:05:c9:07:df:c5:d5:c1:42:
                    ab:56:68:70:4d:9c:53:7b:c0:a3:de:a6:cb:99:44:
                    42:e7:5c:5c:81:be:bb:56:b4:75:ab:2d:cd:9c:fe:
                    e3:7e:17:af:b4:d6:1c:61:24:8e:f4:c5:80:82:73:
                    4f:c7:e8:9a:24:61:99:c9:2b:1f:21:ae:77:47:ab:
                    68:22:db:1b:e1:bb:fb:58:8c:26:08:35:b9:13:01:
                    58:3d:eb:26:a1:1c:c1:5d:4d:3c:2a:53:6e:42:2e:
                    12:dc:22:bb:12:36:26:2d:5d:47:45:9d:06:f0:bb:
                    d6:d0:8c:45:65:d4:28:88:e8:8d:97:a8:06:d2:26:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3A:F4:81:16:C2:28:88:31:BA:4D:4F:5A:E1:5E:57:3E:2D:53:CD
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:c2:3e:bc:6f:77:d7:8a:f8:1e:8a:af:12:7f:55:d7:57:
         9d:ba:d6:d6:a7:b1:7d:e2:c3:e9:3d:8e:75:ff:20:f7:0d:c4:
         60:c4:b4:50:91:c5:02:46:1a:38:e4:d1:41:2d:78:06:3f:ea:
         4c:6e:c0:2c:9e:2e:fb:46:64:ea:30:21:b5:d8:6f:85:fc:7e:
         4b:e2:5e:6f:09:93:55:02:bc:de:6b:99:0f:50:b4:e4:54:60:
         7d:43:a7:b4:27:06:51:1c:d3:f1:a3:6f:99:aa:b3:41:1c:41:
         7b:dd:d1:54:93:fb:a6:2b:4a:3d:8a:2d:9f:3e:49:a0:52:ca:
         e2:0b:8e:cb:c1:59:2a:01:4b:76:58:19:ac:31:7e:85:c4:de:
         52:8e:03:9b:dc:f6:59:bd:ba:6a:3b:e9:09:31:7a:09:86:e6:
         07:02:42:e2:d7:3d:f4:ed:81:af:22:3f:28:1e:38:75:1f:11:
         a9:1a:3a:c6:44:75:41:bd:a5:91:43:be:8e:b8:ea:1c:4f:b7:
         f2:09:d4:49:b7:ea:58:3b:45:43:03:4d:69:61:cd:ca:c9:96:
         26:ef:c8:05:30:03:f3:c1:c6:77:73:eb:a9:69:b4:5a:ca:07:
         58:1e:f5:84:6e:ad:bd:3e:20:b0:47:80:fa:bd:a1:ed:07:06:
         76:65:88:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:41:29 2025 by rpki-client