Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
File:                     19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft (raw, json)
Hash identifier:          azbk3lOuxt2OFBPom1gRZRiofj4XRPb0nQdfllPKxqI=
Subject key identifier:   6A:97:40:91:35:34:D8:FD:6A:EA:05:24:EC:A3:B8:2C:33:C4:43:7C
Authority key identifier: 19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59
Certificate issuer:       /CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
Certificate serial:       49273787003BC1B644C11A39AF2547F5929E8E27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
Manifest number:          38
Signing time:             Wed 19 Feb 2025 03:12:07 +0000
Manifest this update:     Wed 19 Feb 2025 03:07:07 +0000
Manifest next update:     Thu 20 Feb 2025 05:15:07 +0000
Files and hashes:         1: 3138362e3232372e302e302f32302d3234203d3e20323632373635.roa (hash: M2one68sTTfjWoTrqMbX9pnsnn4iExyDhTNVSZ9zOPs=)
                          2: 3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa (hash: wnqmO7zy+DY1zGNM6U0m4VxBJ0bceSOLw74PAZdaiag=)
                          3: 3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa (hash: ZJstMgP4PFpCzUvv72rdZjDN0CD/9d8GF/sSAtnwSzc=)
                          4: 323830343a316466633a3a2f33322d3336203d3e20323632373635.roa (hash: E2EyG6L3VMBfdDeZeg7N4M4v/IpcCr04uIWhN8e66jg=)
                          5: 3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa (hash: 6iuF+Q+4WKZLeOiNzcTKQsr68o5YrtRBFSTP9VPgBfw=)
                          6: 19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl (hash: P0cFgYc+LWOBeFEmI4s7xYbrAUCY0kLBiit3sybgRT8=)
                          7: 3133382e3132312e3235322e302f32322d3234203d3e20323632373635.roa (hash: G6k/mrJJFdpSo8mL7F5Tq5WoPbnHkRN8F1sMhYhIi80=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 05:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:27:37:87:00:3b:c1:b6:44:c1:1a:39:af:25:47:f5:92:9e:8e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
        Validity
            Not Before: Feb 19 03:07:07 2025 GMT
            Not After : Feb 20 05:15:07 2025 GMT
        Subject: CN=6A9740913534D8FD6AEA0524ECA3B82C33C4437C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:d4:76:f6:59:6c:b7:b0:3e:95:a7:74:d6:
                    a0:62:f9:9d:7a:cd:74:5b:2d:36:c6:eb:49:3a:c2:
                    a7:51:90:73:34:1d:ca:af:a6:f6:31:06:38:27:54:
                    d4:50:af:97:e3:7e:c0:a3:7c:15:c7:66:32:dc:e0:
                    1b:58:a4:ab:cd:19:12:8b:ee:c6:b0:6a:1b:24:9b:
                    1f:cf:ba:b5:7b:15:21:e4:33:59:ad:57:95:83:b4:
                    0e:1e:73:c5:27:fd:78:aa:f1:36:fd:7c:0c:86:66:
                    fe:2b:89:17:19:03:37:15:76:89:3e:ba:28:8a:2a:
                    d1:47:e4:00:c5:c4:ff:a9:f2:3e:63:f1:d8:4a:72:
                    d9:61:bd:c8:4f:9e:3e:40:37:d4:91:fb:4b:a3:3c:
                    77:3c:0e:f9:f2:a8:87:97:fd:6d:c1:39:64:a8:df:
                    2a:44:f4:9c:0b:54:60:73:0c:e5:1a:0b:03:e3:d9:
                    6b:9e:06:f8:7e:e4:50:51:a3:30:23:63:28:bc:1b:
                    b5:10:87:d0:70:bd:7d:98:37:e5:50:27:1d:a6:3a:
                    bf:61:e6:4f:44:db:8c:da:25:15:4c:79:ef:42:df:
                    75:74:f1:2d:cc:b3:69:51:a5:09:8c:73:95:66:50:
                    40:0a:a5:9d:ea:d4:fd:d5:68:ce:02:1c:65:ec:e8:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:97:40:91:35:34:D8:FD:6A:EA:05:24:EC:A3:B8:2C:33:C4:43:7C
            X509v3 Authority Key Identifier:
                keyid:19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:22:12:9c:94:41:87:2d:35:96:9f:f6:13:8b:cc:43:14:79:
         ef:2e:1e:2b:9f:93:f9:14:ad:a8:dc:b9:63:40:45:42:bd:de:
         2d:9d:92:14:5b:d1:ca:e9:5a:2a:62:af:69:2f:60:f1:86:58:
         12:01:b4:c7:db:3e:99:de:51:7e:f4:96:e9:8b:72:81:f1:56:
         13:85:57:ff:59:e2:03:e4:02:0f:e8:62:80:49:df:77:3d:6f:
         46:69:39:05:f2:94:1b:fc:3c:e0:47:24:55:49:a3:49:26:57:
         4f:ba:92:c2:18:bd:fa:0e:cb:9f:d6:98:5a:ee:be:04:38:fe:
         d6:3f:64:23:34:75:a7:36:41:d3:95:2a:f1:58:a9:98:d0:f3:
         e1:6c:99:2a:b7:24:df:10:a8:52:c9:e7:90:a2:8f:c4:d7:4a:
         9a:f6:13:b2:e0:ae:a7:87:59:43:16:f1:dd:3c:b6:e5:d4:63:
         8d:76:99:5b:4d:18:71:04:f4:a1:5e:03:0c:6d:91:43:14:da:
         4e:38:80:c3:45:8a:97:fb:73:c1:f4:f5:71:2c:4b:94:51:1e:
         c4:23:7f:97:9b:c2:75:61:a9:52:c4:c7:8b:06:14:1c:94:ba:
         59:d6:b7:93:f5:4e:55:8d:9a:a8:16:bb:c2:11:ec:28:56:5e:
         02:10:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:59 2025 by rpki-client