Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          +ELkGf3iuy0FP10KOtEKydU2CXR/29y9qUJmw+GhNcM=
Subject key identifier:   EA:9B:AD:14:4E:59:27:B9:5C:E3:D8:D5:48:2B:DB:4C:C5:B7:AA:C4
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       4CC5A4363AD34C78D9BF34519344D20EC5CFC623
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          01EF
Signing time:             Thu 10 Apr 2025 05:03:22 +0000
Manifest this update:     Thu 10 Apr 2025 04:58:22 +0000
Manifest next update:     Fri 11 Apr 2025 09:02:22 +0000
Files and hashes:         1: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: 7jMPmPOvt2ZrJHcvH6dUZAHqARDiI+WsNBVcho6Ca4M=)
                          2: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: jFOKmZdUzrqB7DuIgqBanfryUkoDH0GXcs2RL/VGiII=)
                          3: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 1GNUZSNPHTUgvUkppz4F7t0eGoRsad2SmjP7A9wBQ4U=)
                          4: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: sqv4PJRsVf1fbuPiqi5aE4THOHXbUo9nkuAmPfa1rXE=)
                          5: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: C2Urw1CANF3BYR4oYboPvzubkyeHTC4GKOwLeRX1lQY=)
                          6: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=)
                          7: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 09:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c5:a4:36:3a:d3:4c:78:d9:bf:34:51:93:44:d2:0e:c5:cf:c6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Apr 10 04:58:22 2025 GMT
            Not After : Apr 11 09:02:22 2025 GMT
        Subject: CN=EA9BAD144E5927B95CE3D8D5482BDB4CC5B7AAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:88:74:37:3c:e7:9c:a1:a3:b7:dd:e5:62:
                    7f:68:aa:82:8e:40:b5:89:c2:da:20:a8:7c:a8:ab:
                    a5:e4:c2:eb:c3:72:23:a5:31:10:43:3f:ad:a6:5a:
                    0a:c4:56:48:34:c6:9b:1e:a6:07:79:62:b7:6b:54:
                    6c:64:04:b2:d3:14:b0:a3:0c:00:81:34:0f:9a:a1:
                    d7:9d:68:59:2f:dc:b4:ac:9d:df:49:f4:9e:eb:1b:
                    e6:f5:3b:ea:7e:b8:ed:87:ff:78:39:7a:3d:75:5a:
                    8c:aa:d4:54:a8:b8:d5:6a:bb:3b:2c:56:f6:71:ff:
                    a8:08:0e:49:57:fc:9f:ae:27:77:99:58:42:d8:eb:
                    73:0d:d6:91:cf:fc:e4:65:11:b4:ca:6b:7e:62:09:
                    1b:83:4c:3e:14:61:5d:70:ad:fc:f6:40:c8:88:56:
                    5d:0c:f6:d8:38:91:28:3d:5a:bb:5e:bd:1d:c4:9d:
                    e4:c8:27:ce:51:2d:41:95:93:f4:02:ef:93:b3:29:
                    58:5c:75:9a:1e:7c:3b:e9:66:2e:0e:51:13:96:34:
                    94:02:68:8f:b1:5d:67:f6:b1:38:02:b6:09:7b:cb:
                    38:8b:ee:54:5d:1e:a3:8c:90:ba:01:43:14:15:1d:
                    c4:f5:6f:57:79:42:0d:18:cb:b0:21:9b:5a:a0:57:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:AD:14:4E:59:27:B9:5C:E3:D8:D5:48:2B:DB:4C:C5:B7:AA:C4
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:9f:6d:04:92:02:d3:cf:68:78:8d:c3:36:a5:44:69:61:
         fd:2c:5a:07:62:b6:de:99:1a:d1:2f:ac:db:d4:e8:37:7a:56:
         f5:57:57:5d:ef:cf:ea:e8:0e:a4:0c:ed:9c:b0:4b:31:2e:fb:
         db:7f:ab:44:3e:b8:d5:59:3f:15:e3:a0:c2:35:06:7c:7b:0f:
         29:31:62:1f:85:67:6f:a2:aa:01:fc:36:41:d2:7f:d2:73:cf:
         33:b9:54:63:52:1e:30:ec:5b:ab:cb:51:37:32:ef:08:fe:9b:
         b1:2f:03:eb:d0:8f:f5:62:11:b8:90:77:23:81:0e:16:ff:50:
         7f:6b:5a:a9:61:70:64:66:05:3a:cb:a0:68:2c:2c:1e:50:b9:
         f7:10:8b:00:0a:90:84:8f:cb:e5:9b:77:6e:fd:0a:a1:f9:11:
         f8:48:aa:dd:21:2b:14:34:fa:53:63:96:af:32:b9:bd:8e:1c:
         db:5a:f3:91:17:b4:3a:8c:17:72:0c:57:1b:a6:5d:e3:ab:20:
         ea:9b:5e:33:3c:c9:27:bd:48:dd:f1:95:5d:8b:bc:9f:6a:b8:
         a9:94:0f:98:70:ea:d9:eb:93:26:f1:9c:c8:d1:0d:e5:94:59:
         69:28:83:44:58:a0:db:98:f6:ed:8c:e0:d5:61:0d:95:f3:c8:
         83:a2:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:24:41 2025 by rpki-client