Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
File:                     3332A8C3B68FE79476953E58B1857203FA676F0F.mft (raw, json)
Hash identifier:          9xssR9w4XmHxY7/n364dndfcXhFmdx+l7CbFL2wbmUY=
Subject key identifier:   03:47:52:35:5E:10:D2:42:34:99:FF:92:C4:6B:59:5A:2E:80:26:04
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       4BEDDCACB45166AAC529B9E003786D54F3173541
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
Manifest number:          0172
Signing time:             Wed 16 Apr 2025 11:25:28 +0000
Manifest this update:     Wed 16 Apr 2025 11:20:28 +0000
Manifest next update:     Thu 17 Apr 2025 13:51:28 +0000
Files and hashes:         1: 3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (hash: opBiZMtfOeghjoYhF88oemIIItH9XmF6j/KHZYPR9tE=)
                          2: 3332A8C3B68FE79476953E58B1857203FA676F0F.crl (hash: IvFJN3wGDBUGm98jdhpkJT5UbrGN6dkDClI5/VU1tEw=)
                          3: 323830343a323038383a3a2f33322d313238203d3e203533323233.roa (hash: +t8Bsv1AI35r7hbtARB1XxfKGcOByed27RSYAE5NzH4=)
                          4: 3138362e3235312e38302e302f32312d3332203d3e203533323233.roa (hash: 573mIUEsMazU9aU2hdN742J0b6XDN8PFNZlq1l9n8vQ=)
                          5: 3133322e3235352e3134302e302f32322d3332203d3e203533323233.roa (hash: P0UDnzxKa9tFFHi5vvnv/wyK4fi42gmAxZyiuJkQ710=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ed:dc:ac:b4:51:66:aa:c5:29:b9:e0:03:78:6d:54:f3:17:35:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Apr 16 11:20:28 2025 GMT
            Not After : Apr 17 13:51:28 2025 GMT
        Subject: CN=034752355E10D2423499FF92C46B595A2E802604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:20:0c:ee:49:bc:15:3c:a6:78:6f:3f:27:
                    60:96:76:47:87:61:27:e4:eb:00:8e:f9:c6:78:29:
                    28:cf:b3:86:87:da:6a:eb:7c:5f:9a:45:5d:d1:57:
                    a5:81:ca:f0:6e:7b:e8:5c:ba:43:bd:1f:97:c1:e9:
                    d9:a8:15:55:10:ff:90:c7:43:40:7c:41:44:77:ce:
                    6e:50:be:ba:88:15:52:09:0d:9e:c9:a3:cf:2a:d6:
                    04:46:4e:77:52:eb:31:99:0d:e4:c5:ef:bb:f6:9e:
                    1c:aa:69:90:17:21:8a:3d:f6:d2:42:fd:b7:23:8e:
                    1a:5a:c4:21:4f:b3:6a:12:69:53:49:b1:e5:81:25:
                    aa:9a:1c:e7:d0:75:a2:b7:27:f8:13:07:7f:f6:74:
                    fd:d1:3f:34:1b:9c:e2:24:3e:8d:39:b5:67:56:61:
                    44:6d:6b:dd:fd:5e:80:f0:9e:6c:bf:4a:fb:45:e7:
                    eb:d0:a0:9d:ba:0a:ca:9e:37:b7:c4:76:f8:9f:84:
                    25:4d:07:83:38:a8:8f:0d:5f:e2:ff:81:7f:6b:3e:
                    23:51:8f:d4:cf:58:06:65:3a:ce:d1:cd:00:f7:12:
                    2c:a6:44:99:c5:26:47:e6:a5:e1:31:e6:ea:08:a3:
                    81:88:9e:d5:dc:11:75:cb:27:db:6a:28:27:df:ff:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:52:35:5E:10:D2:42:34:99:FF:92:C4:6B:59:5A:2E:80:26:04
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:58:3c:2b:68:fa:cf:aa:e2:84:83:b1:f7:0d:e6:61:8e:73:
         f5:87:1c:8b:c1:17:1e:3a:d0:ca:25:ca:bb:e0:56:3c:0e:03:
         a3:51:90:59:4e:10:ca:11:ef:93:25:d3:be:8c:99:05:6b:7e:
         b6:8c:83:66:3a:d7:29:fd:86:aa:38:2a:32:bd:1f:20:72:1d:
         d5:89:b0:06:67:91:83:40:84:e7:12:88:de:8a:b1:3c:7d:e3:
         28:9d:08:77:4c:e4:b9:e6:e4:cc:95:82:f2:f0:9f:70:96:98:
         7b:03:ad:79:1b:69:7f:a8:3e:93:fe:38:12:59:08:61:57:6c:
         f1:06:40:6f:f0:a0:95:7f:bf:99:d4:49:ce:0c:f8:ec:86:d6:
         da:37:f4:b4:1c:da:2d:2b:e3:5a:be:25:11:f1:1d:09:7b:51:
         91:e4:1d:99:a7:80:d6:97:6d:59:81:94:70:9d:c9:7d:66:e1:
         84:1e:b7:d8:8a:31:c8:da:ff:e7:2a:e6:1a:02:3d:e9:37:2e:
         e6:9e:ff:15:5e:77:9e:16:fd:c9:76:86:8b:45:46:a2:5f:a1:
         b4:d2:61:a9:34:0d:b7:01:f7:fa:62:fb:0e:12:a0:8c:4b:9b:
         ec:e9:51:7e:28:bc:82:05:43:89:0b:f3:bf:77:e4:e0:f9:dc:
         4c:ac:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:49 2025 by rpki-client