Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
File:                     BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json)
Hash identifier:          gT6D4SN6MsEcDAwdkPt9tC8jT1eqESaNHqlOrdQwpqo=
Subject key identifier:   22:13:F6:4D:EE:83:32:7F:C7:C5:2A:23:7E:E5:5D:F7:60:22:E5:66
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Certificate issuer:       /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial:       0A2BBFC048B25806EBFC52110AC9AC0EC661FE08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
Manifest number:          01AD
Signing time:             Wed 04 Jun 2025 05:07:51 +0000
Manifest this update:     Wed 04 Jun 2025 05:02:51 +0000
Manifest next update:     Thu 05 Jun 2025 07:50:51 +0000
Files and hashes:         1: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: NDp9eJe+42eDm6yXHvEdf9HcdpGANCOWFpMiqcNAZv8=)
                          2: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: XfrUNW+VPw60KaeHV5p3kOM80e57D0NasLdIk1UFYYY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
                          rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 07:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2b:bf:c0:48:b2:58:06:eb:fc:52:11:0a:c9:ac:0e:c6:61:fe:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
        Validity
            Not Before: Jun  4 05:02:51 2025 GMT
            Not After : Jun  5 07:50:51 2025 GMT
        Subject: CN=2213F64DEE83327FC7C52A237EE55DF76022E566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:e2:39:c7:8d:29:f0:59:30:16:51:c4:59:
                    99:13:2d:18:a3:4c:5e:b5:40:03:a8:6b:ec:b5:34:
                    47:6d:9e:65:fd:97:ec:87:90:32:42:19:d5:d1:5c:
                    d9:c3:d9:40:7c:04:fc:a3:00:4e:a6:7e:51:c1:86:
                    73:e0:41:20:df:ef:ab:8f:dd:0e:bc:70:52:17:1a:
                    3e:c8:94:49:a0:fe:ec:69:78:a2:72:c5:30:bb:44:
                    c9:a5:f0:b6:4b:d9:13:f0:4a:99:b5:4e:ff:26:00:
                    54:22:21:31:fd:a5:ab:94:68:f3:7f:75:d5:0b:ca:
                    a7:87:63:32:5d:a4:ae:4e:f8:1a:3d:0e:aa:f6:2c:
                    7f:ba:61:51:65:52:cc:86:32:76:9b:a9:03:90:cc:
                    bc:37:44:32:b3:4c:fd:9a:92:21:b4:cb:d7:b7:d7:
                    42:95:3e:22:1e:02:ad:e1:aa:4f:f7:69:c6:9a:43:
                    c6:b7:17:7d:14:99:b8:c9:b0:c6:25:b8:ba:f5:9c:
                    14:5b:20:d4:3a:7f:00:92:5c:63:a6:31:3c:f1:3b:
                    56:af:0b:b3:62:2f:a0:dd:8e:03:64:5e:24:ad:30:
                    bd:1d:b6:34:3c:7f:d8:93:78:e4:62:45:66:0a:ea:
                    9f:5b:c1:a3:cc:ec:b6:b8:c9:32:a9:c5:ad:ac:74:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:13:F6:4D:EE:83:32:7F:C7:C5:2A:23:7E:E5:5D:F7:60:22:E5:66
            X509v3 Authority Key Identifier:
                keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:f4:0c:95:19:7b:cf:6d:0f:53:3f:b3:20:44:38:52:0b:
         ad:8a:2d:cc:af:16:e1:d5:a8:5a:49:70:d1:77:ae:39:94:b1:
         fd:e0:56:88:21:7f:07:58:97:42:e3:12:77:bb:10:e4:42:15:
         1b:70:f9:01:6f:47:2b:84:d6:06:41:a1:a3:6c:a5:4f:3b:0d:
         9f:21:72:bc:b7:7f:1a:79:e5:df:e4:16:ab:6b:61:87:5d:71:
         0b:19:07:00:66:6c:04:61:ba:fe:3f:54:97:0d:9a:63:ae:52:
         fc:6f:fc:33:de:e8:ae:ce:86:47:71:9d:5d:c4:63:9e:01:08:
         74:3d:58:2a:74:b3:a6:c5:e5:60:94:65:ef:b4:36:1d:42:ac:
         0e:0a:54:f0:c2:69:85:11:cd:97:fb:e1:74:d0:9c:f8:09:5b:
         89:8d:e3:f9:7c:01:da:51:7b:ca:1b:83:e7:5f:39:45:b4:50:
         c6:9c:9f:ba:f4:4f:19:d4:0b:48:a5:a3:8d:7f:41:f8:01:62:
         c5:dd:a9:80:37:93:b5:2c:c7:d7:02:6a:7c:91:f8:7c:d0:38:
         82:47:cf:51:b4:82:f8:d1:51:84:c4:a6:f7:dd:ff:9e:04:77:
         2b:85:b9:ae:cf:ac:ff:11:b9:16:c8:e4:1d:01:9f:a2:2b:84:
         1d:29:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:31:26 2025 by rpki-client