Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
File:                     3332A8C3B68FE79476953E58B1857203FA676F0F.mft (raw, json)
Hash identifier:          /b4WJk5hoNKSm3FnJ3CroyoCHvJzv/75ik5+LiKNC0Y=
Subject key identifier:   E8:D8:A2:D6:CD:B0:06:87:B2:07:1B:21:8D:77:F0:1E:A3:F8:84:C8
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       4274599BDEF0E089B73D20C0E52BA4A3F7995723
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
Manifest number:          0126
Signing time:             Mon 17 Feb 2025 21:42:40 +0000
Manifest this update:     Mon 17 Feb 2025 21:37:40 +0000
Manifest next update:     Wed 19 Feb 2025 01:34:40 +0000
Files and hashes:         1: 323830343a323038383a3a2f33322d313238203d3e203533323233.roa (hash: +t8Bsv1AI35r7hbtARB1XxfKGcOByed27RSYAE5NzH4=)
                          2: 3133322e3235352e3134302e302f32322d3332203d3e203533323233.roa (hash: P0UDnzxKa9tFFHi5vvnv/wyK4fi42gmAxZyiuJkQ710=)
                          3: 3332A8C3B68FE79476953E58B1857203FA676F0F.crl (hash: tzGln6kiT2VKKphqOEmOXtNJG/HHFOxp7bwmHHcvIbo=)
                          4: 3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (hash: opBiZMtfOeghjoYhF88oemIIItH9XmF6j/KHZYPR9tE=)
                          5: 3138362e3235312e38302e302f32312d3332203d3e203533323233.roa (hash: 573mIUEsMazU9aU2hdN742J0b6XDN8PFNZlq1l9n8vQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 22:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:74:59:9b:de:f0:e0:89:b7:3d:20:c0:e5:2b:a4:a3:f7:99:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Feb 17 21:37:40 2025 GMT
            Not After : Feb 19 01:34:40 2025 GMT
        Subject: CN=E8D8A2D6CDB00687B2071B218D77F01EA3F884C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:8b:e0:c0:86:2d:c6:57:05:54:42:1e:a3:
                    c1:16:4e:6b:89:4c:aa:05:2b:e5:05:f0:56:8a:7c:
                    79:a3:bd:9e:22:fb:1a:fb:ba:f4:88:af:64:c6:23:
                    31:e2:47:4b:88:ef:88:74:83:58:c9:5a:e8:1f:df:
                    46:a5:ec:be:61:cb:29:6b:7c:25:1d:65:33:6e:4a:
                    62:32:32:26:c4:c2:7a:fa:05:fc:aa:b7:a6:06:35:
                    6f:fb:7b:c9:f2:26:66:39:a9:1e:6d:9f:04:6b:96:
                    8e:f3:28:48:0f:a5:b3:9e:8c:70:34:d2:b2:c0:4d:
                    b0:b3:fd:9b:91:20:8f:bb:05:47:cd:f4:a9:13:ae:
                    42:75:0a:9b:c1:fa:57:1a:8c:68:4d:a8:47:f3:b2:
                    f3:3b:b9:43:93:06:fa:1d:02:b9:b3:7b:67:c1:f4:
                    3f:9f:e0:b7:a2:70:a3:97:cf:cf:38:20:6a:75:73:
                    78:1d:9f:6c:82:0f:e1:0a:92:94:c6:1b:41:08:a9:
                    8e:4c:86:82:e2:e2:48:3e:fa:27:ab:42:7f:e7:99:
                    fd:a6:f0:37:24:7c:f0:d5:32:7f:ab:ed:71:eb:88:
                    85:06:c6:01:b2:d9:c3:4d:f0:7c:e5:86:44:7e:a8:
                    de:ce:bb:50:ed:8e:87:9b:ef:2a:79:3c:9c:49:2d:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D8:A2:D6:CD:B0:06:87:B2:07:1B:21:8D:77:F0:1E:A3:F8:84:C8
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:d1:53:94:e7:b9:1f:f9:ba:5e:a0:8e:8c:08:9e:41:0d:6b:
         f6:f8:2a:6e:2f:29:52:d3:28:f2:1e:fd:18:56:4d:30:5f:f6:
         84:42:1f:b7:2a:32:af:45:1c:7d:86:34:0e:6f:cd:7e:69:f1:
         00:b0:7a:9c:e4:64:33:a3:2a:40:63:0c:25:a7:99:b3:d8:11:
         b6:6b:7a:ec:81:57:5c:0c:24:04:96:82:84:69:01:64:62:35:
         ac:87:58:08:21:1e:d5:46:d1:92:1e:e1:f7:b5:27:48:34:a3:
         36:e8:57:e0:44:a8:d3:fd:91:14:4c:a0:21:dd:f1:a2:00:a4:
         7a:64:f3:cc:11:a3:99:ed:f5:1c:2e:8b:aa:e8:6a:7c:d9:09:
         d2:92:f4:d6:90:65:25:22:1e:a9:35:02:fe:73:9e:02:2e:00:
         1e:60:81:cf:61:a2:75:95:5e:72:c1:68:f6:63:fe:5c:d8:9a:
         e4:eb:d2:d4:f7:72:68:44:c6:2e:b2:5a:24:73:54:f7:88:f0:
         c9:a1:ab:fc:d3:9b:bc:97:99:bb:81:b9:8a:aa:66:df:44:06:
         c5:02:b6:03:68:54:ab:5a:aa:8b:bf:19:7b:40:d6:5b:87:14:
         c7:8b:03:2a:2e:a1:b5:58:0f:da:70:75:cb:ec:92:35:7a:66:
         a0:8e:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:01 2025 by rpki-client