Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft
File:                     C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft (raw, json)
Hash identifier:          HklWKr2uMU6E9ViewIGiwI4/UUC8+hVdBtJcXSNxxmc=
Subject key identifier:   41:22:DD:9E:13:6C:2D:AE:31:BD:ED:09:BE:79:1E:FB:3C:A3:12:58
Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3
Certificate issuer:       /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3
Certificate serial:       74A265B8EE9F5ECA72690E88BF17E0F665A52287
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft
Manifest number:          67
Signing time:             Thu 10 Apr 2025 05:50:26 +0000
Manifest this update:     Thu 10 Apr 2025 05:45:26 +0000
Manifest next update:     Fri 11 Apr 2025 09:16:26 +0000
Files and hashes:         1: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (hash: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=)
                          2: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl (hash: 8DHAWqfoBSZIwdAVjQ1lsqr1MgproL5XwQp/U2MNjlc=)
                          3: 323830343a363933303a3a2f33322d3338203d3e20323730323534.roa (hash: Vi58jILCPaGdfjCNKSlfegkMsczPE3KoQ/bs4WgeL5s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl
                          rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 09:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a2:65:b8:ee:9f:5e:ca:72:69:0e:88:bf:17:e0:f6:65:a5:22:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3
        Validity
            Not Before: Apr 10 05:45:26 2025 GMT
            Not After : Apr 11 09:16:26 2025 GMT
        Subject: CN=4122DD9E136C2DAE31BDED09BE791EFB3CA31258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:40:0c:b8:8c:7f:37:ef:2f:40:07:77:8d:
                    65:d7:27:a2:7b:23:48:7e:6f:2b:44:f4:d2:d4:c5:
                    19:ca:81:0d:2a:32:fb:29:9d:a2:3c:48:30:b9:dd:
                    3f:40:56:6a:6a:92:22:7f:cb:49:39:70:1a:41:76:
                    58:93:87:84:e6:c0:c3:6e:92:6c:51:79:ad:5a:fc:
                    e0:c3:34:cb:04:9d:34:5e:2b:47:13:4c:aa:8d:7f:
                    95:d3:4c:78:af:2c:8d:3e:a5:b9:a6:9c:74:09:9a:
                    47:64:1c:5e:d6:29:01:8f:ec:ec:6e:8a:27:4e:f7:
                    58:ff:24:a0:eb:14:e8:3c:9b:33:9f:63:b5:c0:96:
                    fc:90:56:f0:3c:70:a2:1d:3d:59:cf:08:d1:70:f7:
                    a2:00:8d:31:58:1c:de:3d:5b:09:73:c9:71:7b:cf:
                    ef:7d:22:2f:72:af:fc:7f:14:c7:eb:cf:b3:05:20:
                    64:fc:04:23:e3:bf:cd:ab:fc:5e:6e:d3:51:7b:94:
                    fd:f8:7c:17:2d:c6:60:54:e1:df:c3:aa:08:16:46:
                    f2:58:20:e4:01:37:19:4d:6e:dc:89:b9:2a:c2:0d:
                    4e:4f:45:47:d1:af:ea:59:75:a2:12:19:77:bb:66:
                    10:06:fc:c4:e3:5f:33:80:97:3d:3a:8c:0a:29:dd:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:22:DD:9E:13:6C:2D:AE:31:BD:ED:09:BE:79:1E:FB:3C:A3:12:58
            X509v3 Authority Key Identifier:
                keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:23:33:f5:03:61:b4:56:e6:4c:f3:2f:4d:92:ef:7e:ba:a0:
         7a:98:42:c2:ef:dd:ba:14:85:91:cf:fd:0e:23:3e:1a:e7:0d:
         42:eb:18:f6:eb:2b:08:53:71:84:52:23:ce:c2:c4:a3:51:71:
         c5:b1:20:08:fe:c0:6e:41:73:a0:78:4b:68:21:d8:45:5a:80:
         5f:f9:77:86:7a:8f:14:e4:f9:0f:22:cd:9a:0a:cb:94:12:8d:
         70:db:f7:c6:7c:5e:df:f7:6f:3a:fa:aa:8c:06:26:5e:f3:b6:
         63:ba:43:64:95:6b:27:e1:0c:01:b0:b3:1c:92:c0:71:a2:8b:
         2c:f0:bb:6f:82:7f:f0:47:b5:57:f4:28:3a:b5:8e:16:ad:aa:
         38:37:7e:1b:b1:81:70:f6:ac:f3:8a:47:6f:97:a9:1a:55:bd:
         f2:3c:25:a2:da:d0:51:66:c2:98:90:da:7f:e5:d8:e1:63:ac:
         fa:83:16:ce:06:f1:7a:5d:0b:2f:d8:2e:39:0e:28:1b:77:b0:
         51:20:0f:ad:29:60:88:e8:ba:ae:9b:ac:ef:47:15:e9:41:43:
         6b:81:0b:aa:2b:68:51:25:d9:03:37:31:2a:aa:88:c1:11:22:
         ab:cb:95:a4:78:c5:b7:25:e2:d7:ce:3a:a7:1a:93:64:1e:da:
         a1:f3:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:25:41 2025 by rpki-client