Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
File:                     470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft (raw, json)
Hash identifier:          D0YXCztbyUEUrb7wXqbrLx44uTyODHrK/qg2IAOq7/Q=
Subject key identifier:   C3:50:F7:12:4B:1F:BB:81:AD:03:50:4B:D3:EA:B5:2B:19:13:CD:DB
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       61CAB0A6D3826DF58A0226A023C48324A4A27200
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
Manifest number:          02DE
Signing time:             Sun 08 Jun 2025 09:04:42 +0000
Manifest this update:     Sun 08 Jun 2025 08:59:42 +0000
Manifest next update:     Tue 10 Jun 2025 00:02:42 +0000
Files and hashes:         1: 3230302e31372e39362e302f32302d3234203d3e203130383831.roa (hash: Dd0MNbIQ9MHzANoy93/V9XUFZhqzUx1sUtab3MJ5vQQ=)
                          2: 323830313a38323a3a2f33322d3438203d3e203130383831.roa (hash: R5X7TgUXCHd4SY4o06VYZ2ngQGnnUyNflXm6oDMtsxw=)
                          3: 470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl (hash: rzpl4sv7Wqe4Iv7cAa01DezvtYWi3FhIye+MKJ9+FJs=)
                          4: 3230302e3133342e302e302f31362d3234203d3e203130383831.roa (hash: SjGEF7jl/SrzMPfuWamc6DOzm/lQD5V2YArTJ1qeZ1E=)
                          5: 3230302e31392e36342e302f32302d3234203d3e203130383831.roa (hash: /gc+Hp8hFYY6cpjhxSaE5ZKs/x/81jP9mgHggoODu6Y=)
                          6: 3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (hash: EqD3FLMgDqM/N5k54C5xgd9XjW29tzS0P2lCbP0478M=)
                          7: 3230302e3233362e302e302f31392d3234203d3e203130383831.roa (hash: OyN30w34v+XEYJuBDNPpHRW8FgoEgFZORPe14ApOCOM=)
                          8: 3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (hash: u4bLjuVXDa9Rq9UR54870oC8J8+TetV0EboyJh9CCTg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ca:b0:a6:d3:82:6d:f5:8a:02:26:a0:23:c4:83:24:a4:a2:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Jun  8 08:59:42 2025 GMT
            Not After : Jun 10 00:02:42 2025 GMT
        Subject: CN=C350F7124B1FBB81AD03504BD3EAB52B1913CDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:94:f6:0a:75:a3:a7:77:3e:ce:6f:0b:be:
                    07:2c:db:5d:ce:bb:62:36:d0:c4:1f:ad:10:d2:7b:
                    c7:1b:1a:a2:ec:a5:6f:da:ba:81:0d:6f:f3:9f:70:
                    3d:e4:15:85:66:ec:e2:70:9d:29:24:2e:fc:b6:7b:
                    49:40:28:f8:07:26:84:cd:d2:96:da:13:54:6d:e7:
                    94:ed:3b:da:c1:de:45:7c:0c:8f:04:58:da:ed:55:
                    90:61:04:f9:be:4a:2d:2a:46:c6:6a:78:0d:4c:27:
                    2b:54:29:b3:e3:d4:f8:ce:0e:7f:a0:49:83:04:b0:
                    96:85:7a:10:1c:ef:58:e8:b4:a0:5c:eb:2d:19:f2:
                    86:9f:57:9b:38:76:b8:86:d6:b0:de:e7:fa:9a:b0:
                    16:5e:12:7a:1e:a3:9f:02:cc:d2:a5:dc:71:5e:53:
                    76:73:b2:1c:f5:15:ac:27:44:5f:d9:ba:88:dc:f8:
                    04:91:99:23:ef:97:3e:fe:d5:d6:da:5a:a3:3f:b4:
                    69:00:d0:29:49:96:5c:41:6b:3c:5b:28:ba:54:c3:
                    ad:58:f2:26:ec:a4:aa:59:e1:8e:35:72:bb:6a:71:
                    7b:cc:1c:af:1d:b5:c5:d1:d6:51:ac:de:78:c4:26:
                    99:2d:bb:9c:98:ca:6d:15:91:d3:b4:b2:d3:e4:6a:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:F7:12:4B:1F:BB:81:AD:03:50:4B:D3:EA:B5:2B:19:13:CD:DB
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:70:ac:a3:29:56:c1:50:84:00:30:08:9f:12:ba:88:59:
         c7:d0:dc:91:fc:77:ef:2d:e4:d3:11:71:07:7d:7c:c3:8c:a4:
         1f:6b:25:e4:19:ea:1a:45:54:15:ff:e3:28:df:74:88:70:47:
         86:ca:45:04:96:70:1b:06:a8:6e:68:d6:95:21:96:be:ea:ad:
         30:d8:aa:a8:0d:70:39:f2:6d:d5:ea:60:6a:f7:b1:ca:a8:48:
         9d:a5:f8:f6:bf:90:94:eb:f8:35:bf:6e:8f:03:53:cd:61:d4:
         31:c5:b4:1b:8e:77:7b:ef:7d:19:9b:1c:b1:68:7d:bf:3c:66:
         4c:64:5e:3f:c5:ae:0c:48:59:5f:4d:bd:56:21:fe:ec:95:ca:
         40:e3:a5:ae:95:c1:3d:d1:3c:55:82:c6:01:6a:ad:f5:af:87:
         f9:ac:b5:ec:1f:82:94:69:6e:05:7e:da:f6:a1:f8:f3:bf:59:
         b4:04:eb:86:07:a9:d1:0d:b6:4d:84:4f:a5:ed:77:7f:3d:c9:
         5a:28:af:2f:b0:7b:fd:dc:be:87:b7:80:63:d7:5a:8f:ae:02:
         f5:6c:db:c0:1e:5e:46:9e:ab:00:26:5b:26:6c:cb:6c:d6:70:
         c2:71:45:96:ec:10:d2:84:c6:7c:81:42:b3:ec:77:51:f9:fb:
         61:59:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:48 2025 by rpki-client