Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
File:                     CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft (raw, json)
Hash identifier:          UEbyiJWveLQea17986K5Q1a+63ZaG6fI2oJmY4rpW44=
Subject key identifier:   49:C1:1C:44:4A:E6:EB:5C:9A:57:84:9E:23:CA:54:1E:67:FE:40:64
Authority key identifier: CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
Certificate issuer:       /CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
Certificate serial:       19C38437CA60984E9E5EE9AA78E36783F14B1400
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
Manifest number:          2A
Signing time:             Fri 11 Apr 2025 20:50:07 +0000
Manifest this update:     Fri 11 Apr 2025 20:45:07 +0000
Manifest next update:     Sat 12 Apr 2025 22:32:07 +0000
Files and hashes:         1: 323830343a376134633a313065303a3a2f34332d3433203d3e20323731333633.roa (hash: iNVEW2R1mm2uk+w0lcHdrAg4jujWaoaSnoOte2ThJKE=)
                          2: CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl (hash: q42R7lH5udd2T0+474ehGNSKMzPf9s/sFQPW2c7QWps=)
                          3: 3138312e3138392e33382e302f32342d3234203d3e20323731333633.roa (hash: DaJSAzIxOfyXNW3+ZZ2BV00o3wOMQG9v9xHnzBuZVD4=)
                          4: 3138312e3138392e33392e302f32342d3234203d3e20323731333633.roa (hash: sm6myzNr7/4e5VC716TC9hNKrx+a/1kVfK4gxp+vGUk=)
                          5: 323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa (hash: q5ZLMfONHtrzh7YiOXVkNWb8WyHCyM48+StJiIlS7z0=)
                          6: 3138312e3138392e33372e302f32342d3234203d3e20323731333633.roa (hash: ppOnK92cAPr1IpmogHrZaotmLg87chNyTTID/OTYlPo=)
                          7: 323830343a376134633a3a2f33322d3332203d3e20323731333633.roa (hash: Pn+ooSlqJ7pGShinNVjdo+76gL+/8JJ5YGNEPP5T+k8=)
                          8: 3138312e3138392e33362e302f32332d3233203d3e20323731333633.roa (hash: DuzOsXBkb8LzXffyGKlNJWsCreEKUnWu6ZOdCyWClXg=)
                          9: 3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa (hash: B1MHcjXQCUGEsADwyaFSOLtn65crTopqhbU9++J6Vb0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 22:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c3:84:37:ca:60:98:4e:9e:5e:e9:aa:78:e3:67:83:f1:4b:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
        Validity
            Not Before: Apr 11 20:45:07 2025 GMT
            Not After : Apr 12 22:32:07 2025 GMT
        Subject: CN=49C11C444AE6EB5C9A57849E23CA541E67FE4064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:b4:d7:b1:36:f1:e0:8f:fd:05:76:2d:da:
                    64:86:b6:7d:dd:b8:f6:ff:0c:e1:00:6e:3e:af:dd:
                    5f:4f:b5:37:b4:e8:3e:34:da:ac:7b:14:49:42:a2:
                    8f:b2:8e:f3:e6:04:aa:48:af:9b:fb:35:69:3f:61:
                    18:62:d6:43:ca:93:61:f8:1d:2a:7d:20:dc:ab:f5:
                    43:29:60:a5:29:2d:30:9b:7e:74:c3:96:05:2a:1c:
                    c7:14:51:49:ff:21:d7:bc:b4:76:af:79:8e:f3:6c:
                    a2:21:a3:31:7e:02:d3:19:fa:0a:98:15:4c:56:6b:
                    c6:2c:02:e3:61:1e:56:c5:ad:33:a8:af:a0:31:bb:
                    78:5c:61:01:28:ed:a7:62:c3:c1:54:c3:7e:e9:95:
                    a2:3c:8b:cd:f2:19:3b:75:21:7d:a5:2a:c8:2b:c4:
                    b4:b3:06:a3:80:3e:04:1c:1f:c4:81:57:0d:e6:b3:
                    04:ae:c8:89:26:8e:ae:63:5a:9b:31:df:87:f3:59:
                    16:ac:38:57:33:d1:ba:8f:7f:d6:a8:11:06:91:bc:
                    21:f8:48:f0:c3:5d:d2:b8:e4:ac:32:45:c5:a6:a3:
                    06:cf:cf:28:d4:2c:98:94:2a:39:9f:96:e3:c9:05:
                    fc:51:24:ca:bd:78:25:63:ba:3f:21:61:7e:91:85:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:1C:44:4A:E6:EB:5C:9A:57:84:9E:23:CA:54:1E:67:FE:40:64
            X509v3 Authority Key Identifier:
                keyid:CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:28:3b:22:ff:63:3c:f6:05:df:a3:f1:71:ca:10:79:29:
         d3:36:6c:02:48:ee:eb:c4:48:38:c1:41:80:89:84:ca:05:12:
         f5:aa:04:ae:42:7b:cb:0e:84:bb:b0:b2:0b:af:ad:7b:8a:33:
         a7:e5:47:0e:8d:11:08:98:aa:0e:97:be:fd:14:a0:58:cb:45:
         1f:33:b0:ee:56:fc:a3:ad:7f:42:39:24:84:4a:a7:26:0b:a9:
         77:3a:6a:04:59:cf:0f:21:4d:a4:01:8b:16:26:00:51:c9:64:
         6b:a7:3f:35:ee:f3:9c:8f:d4:9b:bb:94:0c:6f:fd:ff:30:f6:
         13:1b:40:58:cb:d0:92:cc:60:70:59:34:e1:e3:87:2e:2f:0b:
         6f:11:ca:b7:7a:22:12:03:7f:10:8c:df:a5:b4:6c:fc:d8:71:
         b5:7b:83:c8:2b:e6:5f:d5:b8:e5:b1:93:61:a4:12:6a:84:26:
         77:45:be:dd:a5:92:7d:ff:5a:da:ef:30:b0:c6:03:81:44:6f:
         25:22:7b:0b:b8:96:f2:8f:69:27:8b:4d:7f:af:82:4b:5c:e6:
         f2:22:c1:4d:12:db:9a:5f:be:ad:c6:78:c3:16:2f:6a:3b:eb:
         08:87:8c:72:0a:43:0b:8b:ef:b9:e4:9a:a4:6c:f3:2c:4e:d6:
         f5:95:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:54:14 2025 by rpki-client