Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft
File:                     51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft (raw, json)
Hash identifier:          DFSGzG0crPekEGNpR3sQI8b7Wu7pYk9zGf1GPj/c+FI=
Subject key identifier:   1A:3E:A8:62:2E:7C:50:F6:38:A8:9B:00:37:53:55:44:C8:BE:43:9C
Authority key identifier: 51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB
Certificate issuer:       /CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
Certificate serial:       3B81964CC4A0B70108F12EAA9AB60876C88129AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft
Manifest number:          01EB
Signing time:             Sun 06 Apr 2025 05:34:36 +0000
Manifest this update:     Sun 06 Apr 2025 05:29:36 +0000
Manifest next update:     Mon 07 Apr 2025 08:38:36 +0000
Files and hashes:         1: 3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa (hash: Eorb36ezqK4/dt2ug3qG0PGo9bPnl6gCBfv175GxFRY=)
                          2: 51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl (hash: xXY8pxH5EXcnHS5Ad3HEhQgLbdwXlbvgJZ+yyYed/3A=)
                          3: 3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa (hash: 62mp1wdIuz9/eEoBCT92iM60OSKXgGM7OmAfIPs2ccM=)
                          4: 323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa (hash: Q61C4vXNAbJfstRUZ5m3XRi8trVc0JIpS4lnKRE+SL0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl
                          rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:81:96:4c:c4:a0:b7:01:08:f1:2e:aa:9a:b6:08:76:c8:81:29:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
        Validity
            Not Before: Apr  6 05:29:36 2025 GMT
            Not After : Apr  7 08:38:36 2025 GMT
        Subject: CN=1A3EA8622E7C50F638A89B0037535544C8BE439C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:77:19:66:80:1f:48:4f:4d:be:ef:31:c2:
                    f0:ac:3d:bd:7e:0b:87:0d:25:3f:23:ea:94:46:2c:
                    ac:0f:6b:76:7d:07:80:97:8d:c4:fb:e5:5a:96:e4:
                    a9:a1:78:0a:e0:cc:ed:7e:19:89:c2:a4:a5:81:34:
                    0a:d8:f7:d6:85:75:03:22:a1:c5:6b:e6:f1:39:c5:
                    d1:59:fd:e5:dd:55:0e:df:30:2d:6a:8d:56:db:3d:
                    f8:a2:e2:9d:18:b6:ef:6a:30:d2:90:80:87:78:61:
                    d2:de:94:67:77:81:2e:e0:83:28:fb:bd:bc:50:e7:
                    09:06:cf:f0:2c:58:b7:3d:e1:64:49:d5:2a:45:31:
                    70:d3:ec:13:1e:1a:ed:78:a2:c8:60:fc:f5:c4:74:
                    bb:e3:a2:2e:65:a0:29:bf:40:eb:21:05:e9:cb:c2:
                    ca:c3:a9:1a:96:f4:ac:e3:7e:88:ec:06:f8:f1:24:
                    8f:11:cf:56:69:03:21:f9:f6:98:92:32:b7:88:ba:
                    09:40:12:cf:37:b5:b3:0f:13:10:f8:f7:af:92:4d:
                    90:2d:d8:f4:a2:43:74:2a:9f:2e:39:fe:26:7f:04:
                    66:41:b2:34:45:fd:92:77:4f:33:83:cb:20:da:c4:
                    c6:8f:dd:81:aa:ca:8e:0a:fa:3c:52:04:5b:6e:c7:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3E:A8:62:2E:7C:50:F6:38:A8:9B:00:37:53:55:44:C8:BE:43:9C
            X509v3 Authority Key Identifier:
                keyid:51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d0:4b:35:a5:a7:23:e3:d1:2f:7a:56:4c:e3:94:4f:b3:7a:
         8b:f0:ac:d6:f5:75:8a:56:23:d3:be:a7:f2:1d:86:96:a4:aa:
         ae:17:e7:20:0e:36:02:72:0f:34:a6:a1:59:09:e7:35:0c:dd:
         06:30:54:f2:98:e6:19:1f:6a:26:c9:c0:05:d5:c6:89:9e:e4:
         e9:78:66:2a:21:ac:dc:b7:bf:1a:bd:2a:3b:eb:04:c6:b1:bc:
         f0:dd:c0:8c:19:1e:01:77:28:bf:ba:3f:a0:68:16:31:26:b2:
         74:68:94:cd:5b:8b:e6:8c:7c:09:5c:60:c4:63:44:ad:43:da:
         fd:94:71:95:86:29:e1:3c:cb:30:c4:ed:59:1e:55:90:e9:5d:
         bf:d9:b5:9a:2c:34:11:3c:15:31:11:04:c0:2e:65:f0:d8:13:
         fe:ae:08:34:b3:b5:f7:45:21:4f:4b:1a:ee:66:69:ca:66:de:
         60:b2:ab:8b:5c:2e:27:16:ef:11:45:7c:e8:ba:3a:5e:b8:3e:
         01:f5:62:4f:cd:c0:2d:43:6a:f8:4e:f6:c9:63:7c:c3:46:a8:
         86:b9:47:7c:59:22:78:35:80:0b:06:ee:71:5a:55:b2:dc:f2:
         c1:f9:c1:b6:6d:32:e6:ca:8f:df:6d:42:00:5c:41:30:af:a5:
         f4:27:76:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:34:43 2025 by rpki-client