Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          mjvgpowZVG39e29OJi0icRAerg7sLqplPDgTEBxbQEw=
Subject key identifier:   C4:A0:06:4E:16:15:BF:93:79:22:86:A6:70:FD:07:25:27:C5:FB:93
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       376EC699BC9DD32FB41250FDA7A2D3D911A0FE7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          01FB
Signing time:             Sat 19 Apr 2025 09:00:02 +0000
Manifest this update:     Sat 19 Apr 2025 08:55:02 +0000
Manifest next update:     Sun 20 Apr 2025 11:31:02 +0000
Files and hashes:         1: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: Em9nIZXC1XnJHHkeLO0Am9KIh2IHxIcFrayfBCdDiB4=)
                          2: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: 40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=)
                          3: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: DVRW50QGSfKkCx0M1+VA9DFoSNRjF7ldfT0pmPw8n2A=)
                          4: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=)
                          5: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: HbpluB+vivO7YuvRkcavSR95XpwFqM1QaaaswqvqUgw=)
                          6: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lMncz++kvT6MHNunBcJ6oHQBvWwWSBFElu5ZGi2kkO0=)
                          7: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=)
                          8: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: 3KJaKxQH8BfvmqPdr0f3pk4VVvf9POaN3twm4TXLa3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 11:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6e:c6:99:bc:9d:d3:2f:b4:12:50:fd:a7:a2:d3:d9:11:a0:fe:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr 19 08:55:02 2025 GMT
            Not After : Apr 20 11:31:02 2025 GMT
        Subject: CN=C4A0064E1615BF93792286A670FD072527C5FB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:d8:f2:5a:ae:0b:40:83:46:b5:93:98:d1:
                    17:31:e5:5d:fd:4f:c2:17:78:5e:60:84:e2:24:65:
                    78:50:e4:f5:2b:e7:b3:b0:07:e4:45:53:31:db:c5:
                    aa:8d:e4:94:dd:fc:08:a9:31:32:25:ad:91:b1:3f:
                    39:fa:b1:91:0b:a6:e6:6c:af:b1:78:77:7c:7c:a7:
                    b3:d5:14:27:cc:06:20:05:da:7e:ac:cb:66:39:3a:
                    8d:42:27:3a:43:b0:1b:ec:65:c3:ed:63:5a:e1:25:
                    a3:f6:4a:20:69:5d:ed:e8:e0:b7:27:27:9b:b5:8a:
                    bc:ca:0c:a3:cf:68:54:2d:ab:f8:8c:98:41:9c:0e:
                    c3:61:96:db:5f:20:55:92:65:01:fe:3d:00:27:81:
                    15:a9:15:c0:21:d2:92:33:51:d8:b5:03:46:d7:00:
                    1b:64:50:02:33:f4:f2:f1:7a:67:45:0e:99:c0:c7:
                    ea:f6:6a:21:1a:7d:c7:0e:69:71:88:13:aa:25:2d:
                    aa:73:0c:ce:4c:5c:45:70:7a:86:7a:d6:26:6f:dd:
                    10:fc:0f:af:8f:57:99:b2:0b:7f:5b:01:7f:bf:57:
                    15:4c:f5:27:d2:bf:2c:a5:4b:17:44:ff:46:de:19:
                    f3:df:28:5b:b2:90:a5:c4:ac:0f:95:31:35:3b:9e:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A0:06:4E:16:15:BF:93:79:22:86:A6:70:FD:07:25:27:C5:FB:93
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8b:2e:4e:63:9f:1f:32:e1:79:77:6e:8b:ca:9b:a4:e2:ef:
         87:4a:5b:c2:31:12:cf:42:87:03:3e:0e:9c:48:af:65:cd:84:
         8a:cb:72:68:cd:8e:9c:c9:5a:b3:44:7e:7a:ff:44:a9:e4:b8:
         ab:19:9a:86:d2:93:40:c3:5e:d2:25:54:ee:6c:f3:fe:40:b5:
         92:c8:48:e4:45:7a:4d:c6:61:bf:ec:ad:7d:fe:6d:9f:d8:dd:
         9d:df:c3:30:b5:8a:bb:6c:0f:2d:b3:91:34:c5:d4:43:4e:4d:
         16:be:d8:2b:08:2a:c4:47:f3:67:62:43:f2:cf:ed:01:fb:68:
         30:00:8f:73:bb:95:3d:75:53:c2:df:04:86:76:75:72:04:30:
         f7:a3:e2:56:95:54:e4:00:fe:61:31:97:48:8d:70:98:77:87:
         aa:bd:63:07:6b:36:57:f7:98:7f:cc:1d:e1:c9:12:ce:a4:89:
         38:dd:f8:01:70:a7:e6:e4:5f:c0:2e:d1:11:3a:82:2b:9a:02:
         34:e7:75:e1:ff:08:00:41:42:25:ab:33:80:6e:79:d9:af:9b:
         90:9f:56:7b:2c:23:95:6e:8a:e9:3e:1d:07:a2:fe:49:5a:c9:
         c7:8f:64:43:ac:a9:cb:f0:02:e4:c3:37:9a:ff:9c:e1:d7:7c:
         eb:c8:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:24 2025 by rpki-client