Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
File:                     7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft (raw, json)
Hash identifier:          4jhSX0cedi7teupP4yNNOXvjGg6M7v7qxqqkyxI45eg=
Subject key identifier:   60:4D:8E:71:38:50:4A:9A:BF:AD:4C:18:94:1F:72:C7:F5:9E:77:FE
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       5FC203EE211E11486E3A4390FBB5BAD7D4E12CFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
Manifest number:          0242
Signing time:             Tue 22 Apr 2025 16:08:52 +0000
Manifest this update:     Tue 22 Apr 2025 16:03:52 +0000
Manifest next update:     Wed 23 Apr 2025 19:57:52 +0000
Files and hashes:         1: 3137372e3135322e38322e302f32342d3332203d3e203532353237.roa (hash: Jq+PZsrRJ4s7fQAzlY4Cnge7npZcjmxNBNh2beiApko=)
                          2: 3137372e3135322e38332e302f32342d3332203d3e203532353237.roa (hash: wW/1ATmATt1qCRQM0Cw7nbFsqdHyzVlF4w5ub/uQSRY=)
                          3: 323830343a6465633a383030303a3a2f33332d313238203d3e203532353237.roa (hash: LqcTbjzyc6Fz0hSC/mba36mxGduHOVyS8iKyBoALRKM=)
                          4: 3230302e3135302e3235322e302f32322d3332203d3e203532353237.roa (hash: TQ07dwLnff467M5+uxDdEBL4XwW64e9MnafCw5OQUmk=)
                          5: 3137372e3135322e38302e302f32342d3332203d3e203532353237.roa (hash: DUCDaHQON74vAH0t2tgHECN8DoEF2tgVQTZZwdI0gLE=)
                          6: 323830343a6465633a3a2f33332d313238203d3e203532353237.roa (hash: Z7We70YVHV8Q0k5aF1YazksbKotjSlOKEHnDvdbV9Uw=)
                          7: 3137372e3135322e38342e302f32322d3332203d3e203532353237.roa (hash: TFypdHDunAbQinFNxb5YKWC6ti/q0pMwjzk2aZbfRsc=)
                          8: 3137372e3135322e38312e302f32342d3332203d3e203532353237.roa (hash: xS2wxR/Jdn5L6YtdHKijM/EEKiyF783LeZeWN1E6H/s=)
                          9: 7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl (hash: dUF+TApjWW0JVAPCZy2dJrL8G4tkNX7Xw7A9U+81GlU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c2:03:ee:21:1e:11:48:6e:3a:43:90:fb:b5:ba:d7:d4:e1:2c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 22 16:03:52 2025 GMT
            Not After : Apr 23 19:57:52 2025 GMT
        Subject: CN=604D8E7138504A9ABFAD4C18941F72C7F59E77FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:a0:8c:fa:ba:65:e4:8a:7c:5c:23:e5:5b:
                    75:f0:b5:09:3c:80:a8:8b:10:d5:2e:bf:87:00:ae:
                    bf:6a:da:14:2c:ea:5b:05:f4:4f:1f:8a:74:67:47:
                    1b:4b:52:73:f5:17:f2:ad:7e:40:84:6b:ba:39:9c:
                    01:fe:77:41:5a:8a:93:66:52:cb:67:f9:a0:81:09:
                    90:03:28:e2:36:63:70:8b:a9:ea:53:ed:6d:b1:af:
                    db:d8:66:99:b8:63:b8:c4:71:67:a8:33:03:f2:e5:
                    bb:c5:09:58:6d:73:17:e6:0b:91:19:b7:d7:60:de:
                    54:75:e3:cb:1f:9a:51:1c:72:29:43:96:28:4c:56:
                    5b:c7:bf:fa:08:2e:ab:f5:e9:63:60:cb:95:37:8b:
                    77:e3:c0:84:d1:29:56:92:4b:98:4a:03:35:90:6e:
                    ad:06:c3:b1:3e:9a:19:7a:e5:ff:99:85:1d:bd:63:
                    52:62:13:88:cf:da:fd:e9:f0:61:a6:42:c9:4f:4a:
                    a9:af:de:df:7d:b3:ec:b7:98:2c:3a:45:6b:36:81:
                    a1:79:39:94:4e:e9:48:ac:63:3e:33:3c:af:31:d4:
                    6b:15:3f:20:45:4f:c4:7f:25:85:40:ba:93:bd:55:
                    f4:54:4f:08:ba:bd:43:ac:62:c2:f4:ef:68:53:3b:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:8E:71:38:50:4A:9A:BF:AD:4C:18:94:1F:72:C7:F5:9E:77:FE
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:97:4a:c2:56:6c:f6:a1:68:e6:78:38:57:a2:ac:e4:f4:
         1f:04:0a:95:db:81:32:77:e0:7e:19:fa:79:f1:0d:96:c4:c4:
         20:4f:11:97:56:82:46:d0:f4:7e:a7:57:84:16:37:b4:f2:0e:
         ff:b8:13:db:3d:c6:6d:87:d3:dd:58:6b:ab:9e:d8:82:19:56:
         8e:c4:14:c8:7b:d9:ec:9c:e3:12:d1:e7:e4:f9:05:f7:bb:93:
         16:da:0e:bb:1a:9a:6b:74:9a:28:70:6d:e2:0a:10:2c:22:ae:
         5c:56:4f:ca:0c:07:7c:99:f3:41:21:bd:b5:3b:e3:ee:30:e1:
         1f:00:b7:a1:8d:5a:ea:05:55:83:cb:e5:34:f6:d0:a3:56:a5:
         3b:7f:e6:96:74:66:2e:26:a3:d3:b2:47:c1:7e:1a:af:cf:23:
         b0:ab:ab:c6:83:2a:98:75:ef:ca:8f:22:7e:df:36:0a:b4:bb:
         19:9b:9e:fe:5f:92:8d:b2:c4:bd:1e:38:17:cd:1e:87:70:d7:
         62:5f:59:45:5b:9c:16:70:f3:4e:50:27:25:b8:74:01:02:a6:
         db:fb:43:1d:7e:b5:33:aa:0d:16:c4:40:7d:47:c7:7a:d5:e1:
         28:2f:16:cf:e2:5e:b5:cc:e5:52:e5:0f:be:4b:75:b2:02:ef:
         4e:db:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:01:14 2025 by rpki-client