Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.mft
File:                     4D66245FAFFC221002868F98943E16DAB7A8B51F.mft (raw, json)
Hash identifier:          nq9tX85RTeGBtL4dZbFK2WATya+bMevN/NZAq1NGha0=
Subject key identifier:   CC:35:7F:BF:CB:44:E6:DE:E1:75:8C:43:04:CB:76:7D:8E:62:B3:9E
Authority key identifier: 4D:66:24:5F:AF:FC:22:10:02:86:8F:98:94:3E:16:DA:B7:A8:B5:1F
Certificate issuer:       /CN=4D66245FAFFC221002868F98943E16DAB7A8B51F
Certificate serial:       75DAD1FCACD583A945CBBA24304129AB00C3727E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D66245FAFFC221002868F98943E16DAB7A8B51F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.mft
Manifest number:          A9
Signing time:             Tue 29 Apr 2025 19:02:55 +0000
Manifest this update:     Tue 29 Apr 2025 18:57:55 +0000
Manifest next update:     Wed 30 Apr 2025 20:52:55 +0000
Files and hashes:         1: 4D66245FAFFC221002868F98943E16DAB7A8B51F.crl (hash: rLyv1ZnsF6GMKQ1CXjf8jeF3Lkcfb0UI4nYk0GuVitw=)
                          2: 323830343a383232633a3a2f33322d313238203d3e20323732353033.roa (hash: scCSLrmIDclGO+i688mfmQznCVPLaUCLdY4DhwEkvKk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.crl
                          rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D66245FAFFC221002868F98943E16DAB7A8B51F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 20:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:da:d1:fc:ac:d5:83:a9:45:cb:ba:24:30:41:29:ab:00:c3:72:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D66245FAFFC221002868F98943E16DAB7A8B51F
        Validity
            Not Before: Apr 29 18:57:55 2025 GMT
            Not After : Apr 30 20:52:55 2025 GMT
        Subject: CN=CC357FBFCB44E6DEE1758C4304CB767D8E62B39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:a3:3c:da:83:9e:49:70:1f:c4:1f:d4:18:
                    f0:bf:5d:6f:eb:c3:a5:4a:5f:1c:dd:6f:af:cb:2c:
                    95:b7:7b:1b:71:94:c0:95:ed:19:24:4a:09:e8:d3:
                    c4:88:1a:9c:81:f6:bf:9e:aa:91:8a:4c:aa:21:74:
                    f6:2b:a0:59:72:cc:de:f8:b4:ed:87:a5:9f:b4:30:
                    2c:4b:ff:8d:b2:19:ee:17:6c:b6:a8:55:b2:e6:d7:
                    ef:36:c3:b3:83:da:75:15:2e:d2:bb:8d:a0:ce:ff:
                    e0:25:ad:e6:f2:ef:5a:a5:4d:99:dd:ee:b8:5c:cb:
                    b9:f9:f2:35:71:05:39:ed:4f:23:ba:95:c0:46:fc:
                    d1:8c:c2:51:b8:b0:71:72:29:60:3e:fc:15:6c:1e:
                    31:05:f1:4e:94:ff:27:06:a8:21:f4:27:ea:b6:cf:
                    7f:93:1b:cf:db:be:17:3a:1b:4b:49:d7:7d:fb:20:
                    e0:9e:45:ca:d1:92:a6:9b:cd:5c:34:08:16:ce:95:
                    eb:00:9f:79:66:52:7b:4b:87:ed:77:40:65:14:7d:
                    d0:86:c9:b6:b8:47:4e:e0:66:94:3a:69:a8:7a:59:
                    0c:6c:14:6a:d6:ce:9f:38:57:8c:4e:f4:56:4a:0a:
                    19:1f:71:52:b8:8a:46:e9:43:a3:99:e3:4d:22:0b:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:7F:BF:CB:44:E6:DE:E1:75:8C:43:04:CB:76:7D:8E:62:B3:9E
            X509v3 Authority Key Identifier:
                keyid:4D:66:24:5F:AF:FC:22:10:02:86:8F:98:94:3E:16:DA:B7:A8:B5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D66245FAFFC221002868F98943E16DAB7A8B51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QScHbgXZcbCfU1teh5T9NmE8JspJjgNPCBwTrh5dh2H/0/4D66245FAFFC221002868F98943E16DAB7A8B51F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:1e:ba:97:5a:65:0a:ee:fe:f2:78:78:66:ba:85:2c:5b:
         40:3b:dc:ce:71:2c:74:4f:02:e6:ee:fa:9d:6a:bd:1a:1d:48:
         cf:2f:46:ea:2b:e5:51:40:ba:77:2e:c0:b2:45:61:d7:a0:99:
         9c:04:40:7f:4b:8d:ec:16:15:cc:63:43:b2:32:1d:0b:7e:45:
         c3:26:2d:0c:e5:01:8b:95:36:7b:bc:96:c6:2c:b4:f5:69:be:
         b2:ef:70:9d:9f:eb:22:6f:6f:84:08:f0:46:92:bc:b1:05:06:
         55:b1:00:88:4a:a4:6d:e5:ac:51:57:60:e4:13:dd:06:0c:1c:
         bf:ec:67:2c:23:19:6e:70:5c:cf:8a:b5:2c:26:a3:c3:03:51:
         f3:58:c2:5b:51:db:ca:51:03:5e:42:62:ea:7a:5d:5d:32:a3:
         fe:78:3d:8a:21:00:d6:0e:77:57:80:1f:1f:0e:c0:01:5a:1c:
         5c:3a:14:a0:91:b8:61:5d:aa:5a:23:7e:57:59:f4:54:36:f6:
         4d:33:d3:d0:19:83:c1:42:1c:19:e1:88:4b:c3:1f:d8:1f:58:
         70:23:39:43:c2:f9:03:e5:b4:80:38:b2:e1:fb:1a:26:78:27:
         a7:05:a8:e5:fc:c6:7c:d5:00:95:d4:3a:d5:89:cb:ba:9c:79:
         cc:dc:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:29 2025 by rpki-client