Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
File:                     0D3D646783321347829AF3DBE2CF61D9810C07DF.mft (raw, json)
Hash identifier:          DE/R/XVTId7IGrBQK/IHu+unwSsm3C4fgFjVsfBQW4M=
Subject key identifier:   27:C6:71:DD:98:A5:62:79:C5:92:53:8E:80:1D:C7:53:EE:C7:BC:52
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Certificate issuer:       /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial:       53DCD91A616BB56FE479907D5FAA14CF9B7BAE8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
Manifest number:          27
Signing time:             Wed 19 Feb 2025 12:11:31 +0000
Manifest this update:     Wed 19 Feb 2025 12:06:31 +0000
Manifest next update:     Thu 20 Feb 2025 15:26:31 +0000
Files and hashes:         1: 3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa (hash: D/r0y3N2RH60nODdsXf1TrEtigqlC3rNydMzBYzg8zM=)
                          2: 3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa (hash: YIKTebQ591d26o5lMq6zjNC+Rl5EiFbDG9Vs+KYFP6k=)
                          3: 323830343a323666343a3a2f33322d3332203d3e20323633383636.roa (hash: 3b5SMS2DTjjRxX3pSpDvA5Ns0EVL7q4htdfrAqyTHzg=)
                          4: 3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa (hash: uOTCXcJUdwGtc94NsKtNIejlJ++NnNHAphQPM/+CB4A=)
                          5: 0D3D646783321347829AF3DBE2CF61D9810C07DF.crl (hash: HUJaQNU2BrD7RpnWynlLeZ9y3/y7UPtnzQ9TioIwgKU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 15:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dc:d9:1a:61:6b:b5:6f:e4:79:90:7d:5f:aa:14:cf:9b:7b:ae:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
        Validity
            Not Before: Feb 19 12:06:31 2025 GMT
            Not After : Feb 20 15:26:31 2025 GMT
        Subject: CN=27C671DD98A56279C592538E801DC753EEC7BC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:46:19:28:9e:46:f0:06:7f:3a:b9:b7:95:
                    ef:09:31:3c:6b:76:fd:b5:4b:1f:c5:0e:d2:59:14:
                    de:de:f2:70:71:54:5d:85:f6:a8:af:a7:2d:14:f2:
                    9e:61:ec:2b:dc:e1:64:75:c6:76:5b:fe:81:46:8c:
                    05:ce:b6:98:b6:ff:d8:91:da:6b:ec:b5:1a:a7:ce:
                    f0:31:99:b2:63:44:ab:66:6b:17:f4:ab:87:4b:1a:
                    1b:3d:d9:ad:51:e3:24:c3:78:24:ef:4f:79:3c:3f:
                    82:42:84:a2:4c:11:9d:1f:a8:5f:d2:ff:fd:0f:9c:
                    44:9a:08:f1:4f:49:e3:e9:aa:5f:0f:65:59:e2:a1:
                    a7:11:cc:42:dc:7d:08:da:7a:22:ae:aa:e9:24:6e:
                    83:a1:74:f2:28:83:cd:7e:ed:20:93:35:b6:ec:71:
                    f6:c7:db:56:7f:40:00:be:25:a3:25:52:74:38:12:
                    f3:28:31:de:ff:8f:ed:59:b7:64:ae:7b:b8:55:5c:
                    45:e6:24:2c:51:00:4d:2b:05:51:57:47:53:3b:a6:
                    e1:0a:e1:77:57:2e:8c:f4:cf:d1:24:36:84:48:15:
                    ff:12:a3:f9:d2:b2:6e:bb:b7:82:6e:37:6d:a2:28:
                    7d:32:0b:22:61:bc:52:73:fe:df:a2:be:2d:99:2f:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:71:DD:98:A5:62:79:C5:92:53:8E:80:1D:C7:53:EE:C7:BC:52
            X509v3 Authority Key Identifier:
                keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:be:d6:f1:79:ac:7c:9a:57:3d:cf:fd:f7:66:2f:52:cb:
         ed:ec:f5:3b:c9:bb:77:1b:68:b7:46:ed:b8:84:2c:a4:b6:20:
         05:56:5e:ed:0d:46:c2:06:6a:c6:47:b5:32:af:4c:06:22:96:
         b3:92:b7:6f:89:42:38:fa:d3:f8:61:f5:77:5d:d2:72:ab:48:
         94:18:8c:79:ce:9f:75:19:c3:7f:d7:3b:54:d8:b4:66:03:ca:
         56:03:88:47:c8:7a:9f:6e:59:49:cf:ff:b6:ad:0d:4f:db:ba:
         01:04:91:3b:51:fb:a6:e1:05:a5:9c:f5:c5:01:3e:0a:49:6c:
         5b:a3:a0:d1:04:3d:f0:5c:22:38:ac:5b:b8:4b:54:38:50:54:
         5f:e1:20:ef:d2:69:7f:ff:be:8f:ab:a1:11:b5:db:c1:9d:a9:
         7f:af:85:fe:b0:76:1f:36:85:59:57:5c:17:2a:c8:a7:f1:7d:
         fd:93:2c:56:b4:4c:9e:38:05:f0:3e:06:34:40:1d:00:57:9e:
         a3:77:dd:91:23:3d:2f:57:fc:79:2f:20:21:ed:ca:15:14:cd:
         4a:9a:09:62:51:c2:85:1f:64:3e:6a:e0:44:45:ac:62:c1:8f:
         db:97:12:48:12:af:e3:95:f1:13:c0:8e:ed:f2:b1:75:75:f9:
         68:eb:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:39 2025 by rpki-client