Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
File:                     3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft (raw, json)
Hash identifier:          yN+j1Qgv+kBNGx+oQo7MFMykvBMi4SQDYsXo4Ng7HSM=
Subject key identifier:   B2:90:E9:04:DA:02:99:3A:51:F1:69:81:C2:D0:C9:96:67:4B:8F:C5
Authority key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE
Certificate issuer:       /CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
Certificate serial:       6D65A2B569A5D75709FE92CDF52BAE63EB94B9DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
Manifest number:          0211
Signing time:             Sun 04 May 2025 04:46:09 +0000
Manifest this update:     Sun 04 May 2025 04:41:09 +0000
Manifest next update:     Mon 05 May 2025 04:56:09 +0000
Files and hashes:         1: 323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (hash: OGY/LrMrlfQKwjbab8G09HMM8TnKgSFSf9D0yjKBpNA=)
                          2: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl (hash: cYxaDn4W/B3Kv6UPOGZimQUTpSYjUuG4uAiW0N2GvTY=)
                          3: 3136382e3230352e37362e302f32322d3234203d3e20323635333535.roa (hash: 8d7fb9ij+PooSWUf38BeSaVdGp1TOm0K0uvvCP+F8NI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl
                          rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 23:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:65:a2:b5:69:a5:d7:57:09:fe:92:cd:f5:2b:ae:63:eb:94:b9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
        Validity
            Not Before: May  4 04:41:09 2025 GMT
            Not After : May  5 04:56:09 2025 GMT
        Subject: CN=B290E904DA02993A51F16981C2D0C996674B8FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:12:55:a7:95:d9:3e:23:10:bc:77:94:6c:
                    b4:38:af:d8:b6:b7:10:be:f9:35:33:4c:7b:5b:69:
                    7c:2a:b8:7a:c6:b1:08:e4:c5:ac:f8:0c:d8:1e:d5:
                    05:a3:69:45:65:de:a5:4e:6d:46:b0:b2:53:01:b3:
                    2d:32:5c:47:16:aa:1b:13:45:6a:1e:df:d7:ba:13:
                    b0:55:86:a0:a3:83:9c:bd:d1:27:de:c8:a8:e8:23:
                    2c:76:aa:2c:f0:b8:bf:cc:0e:06:87:ec:71:7b:ed:
                    83:38:63:b6:46:ee:f0:d8:d9:08:f8:4c:81:c5:b1:
                    89:74:50:7b:72:7a:d2:ad:52:43:1c:c1:b0:f7:5b:
                    3e:df:a7:09:52:21:1f:81:da:c4:00:07:c9:db:7e:
                    23:ee:27:eb:3c:2b:60:a9:99:ae:99:bd:d4:22:a1:
                    f5:1a:11:27:7b:3e:10:18:2e:19:1c:be:53:42:16:
                    4a:f8:c9:1a:38:a0:43:ec:84:dd:a9:7c:66:44:69:
                    f7:25:c6:cd:b3:65:22:89:12:fe:b7:da:09:d0:a8:
                    3c:d2:56:82:72:5f:e4:5b:4a:f7:70:7b:04:c2:97:
                    b7:1e:47:46:7f:af:50:8c:e8:82:36:48:f4:0d:67:
                    56:f6:27:a8:f6:5b:57:45:d2:ee:5a:f9:4d:8c:26:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:90:E9:04:DA:02:99:3A:51:F1:69:81:C2:D0:C9:96:67:4B:8F:C5
            X509v3 Authority Key Identifier:
                keyid:30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5b:d1:0f:9e:84:4e:e0:ee:dd:42:ac:17:98:19:a6:34:bc:
         30:e5:db:88:0b:45:20:79:61:6d:96:42:d9:ea:44:c6:3d:e3:
         ac:89:74:b3:da:0b:4a:b6:34:4e:b5:00:90:7f:17:ff:dd:17:
         8f:01:80:99:db:c7:2a:3b:cf:a9:55:86:59:30:d2:05:15:d9:
         e8:74:80:c0:21:e9:fe:b7:b9:4f:54:8b:c7:ae:c2:5a:6d:90:
         3c:fc:7d:5e:c0:1b:35:78:c9:a0:9b:8f:db:7c:77:9e:67:ae:
         49:3d:2d:c5:c1:13:5d:d1:f9:f8:36:44:7c:e7:dc:96:8f:05:
         12:e9:92:53:88:b6:09:0b:19:53:7c:c3:d8:77:b0:69:3e:01:
         e7:47:66:22:ff:3c:3d:4d:cb:b0:22:d2:80:6f:cc:0a:9d:c2:
         b3:4e:ae:59:eb:50:7f:81:ae:75:47:1c:0c:8c:40:b1:71:1a:
         bb:b0:36:b2:02:2e:e1:90:9e:3a:bc:08:3d:1b:52:6c:dd:4f:
         0a:f3:4b:3e:e5:3d:16:e9:c8:e7:b1:aa:13:a7:54:1d:12:07:
         0a:32:ae:5b:10:10:36:17:76:e1:21:39:a7:a6:ca:e9:33:c3:
         23:42:f3:18:25:5c:98:0a:13:39:8c:71:00:00:43:ca:4a:a3:
         c7:e1:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:55:05 2025 by rpki-client