Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
File:                     91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft (raw, json)
Hash identifier:          yH1K7qfMgQS7o7rgw5kgDr0E3NZX+/6de9L7ISY2a1A=
Subject key identifier:   D7:84:D5:28:B1:96:F7:FE:85:75:76:3E:7D:57:5A:3B:C1:29:8C:AE
Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0
Certificate issuer:       /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
Certificate serial:       773EC99A7A9DF3F6CA2196EBC826A931DF9CE8D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
Manifest number:          99
Signing time:             Tue 29 Apr 2025 19:23:46 +0000
Manifest this update:     Tue 29 Apr 2025 19:18:46 +0000
Manifest next update:     Wed 30 Apr 2025 19:55:46 +0000
Files and hashes:         1: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: is1ce/85QOT7NztHS8d8OT2MR60xfEDAWq9FgKQpdCU=)
                          2: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: q9Oe28bXTlG+wjfdfY0S2DKhkmcDPIsB3IHCjEfJUgQ=)
                          3: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: 0eX90yaw+P6ZAxEPr/PJb8WsvDlA//ZNAwA4O0HitxQ=)
                          4: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: ouWOBSiTWgfnPLxBeA+7q0eMzrly3oy5U/Yxyh/uQG8=)
                          5: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: C3k9FGsSHArcVIZOFQJRWxG6FRMI/42eNpKGM7EODK0=)
                          6: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: 4z8E5xkgAubJe79uhls2hM7yWHwnaNYYxTpUhSzfajo=)
                          7: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: GO7w8eqGTa8dskb5vIgzwgtC6sLrRWDcLwvfKurJi/c=)
                          8: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl (hash: DONvOKQa9wTLYxCn86Lx1npTWBZGH3XGj5p7uvU2PiI=)
                          9: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: CcBSySmTVrGXjBmAZJ2qP+CxFizJEFvF6UAVfbjFZgA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 19:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3e:c9:9a:7a:9d:f3:f6:ca:21:96:eb:c8:26:a9:31:df:9c:e8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
        Validity
            Not Before: Apr 29 19:18:46 2025 GMT
            Not After : Apr 30 19:55:46 2025 GMT
        Subject: CN=D784D528B196F7FE8575763E7D575A3BC1298CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:c1:4b:7e:a7:c6:f6:1a:12:c1:eb:00:0d:
                    3b:c5:a7:70:9f:68:d8:f9:dd:b6:eb:1b:b0:b5:62:
                    be:85:11:a9:05:48:ac:c0:8e:a7:d4:d4:6b:87:31:
                    b6:ba:3e:89:db:b1:31:41:25:5f:38:9b:db:10:bd:
                    9a:29:c1:be:4f:80:2b:09:48:f6:28:33:87:d0:4a:
                    f2:ff:3d:ac:12:10:43:15:8f:6e:a0:90:5a:88:74:
                    cf:eb:23:c0:ef:e0:54:eb:3b:75:44:40:47:a6:47:
                    b0:89:c3:7f:50:22:a8:98:ac:94:32:95:08:2f:77:
                    5e:18:35:67:cb:a3:a6:d3:16:9e:9a:5f:8d:5d:19:
                    c2:00:bb:42:c0:fc:61:7a:34:bb:17:1e:0e:e5:ef:
                    e8:07:b9:dd:ab:a8:91:db:97:af:80:a4:89:a1:88:
                    0e:61:94:0d:e1:a8:9e:30:8a:f8:72:e7:3d:a4:d9:
                    49:03:75:da:71:97:17:6b:ac:07:05:ca:09:7a:2a:
                    59:45:40:a1:d6:d1:d2:63:8e:3c:d1:bc:95:00:67:
                    19:35:5b:72:ba:2d:8c:45:c4:78:d2:15:d4:4c:64:
                    30:93:05:6b:30:84:b5:4c:17:2e:be:ae:b4:cc:28:
                    ae:4d:19:3b:6c:08:55:df:29:d2:5d:85:81:16:a7:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:84:D5:28:B1:96:F7:FE:85:75:76:3E:7D:57:5A:3B:C1:29:8C:AE
            X509v3 Authority Key Identifier:
                keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:34:1e:05:5a:63:0b:29:fc:02:26:c4:33:96:93:9f:14:
         b8:54:a5:b1:c1:76:cc:3e:34:9c:5e:7f:f6:a3:fb:ec:27:f5:
         4a:2f:8b:6c:b5:e7:55:ed:b0:bf:33:6c:8b:3e:54:7d:b7:f5:
         ca:38:a5:62:0e:45:bc:de:b5:b5:a6:e2:8e:76:b8:01:56:f4:
         56:36:32:f7:0e:f8:1b:77:ca:9b:89:de:96:ab:22:2e:fb:89:
         ea:fd:e9:3c:77:cd:6d:c7:0d:29:be:46:b9:d2:d6:19:06:0f:
         e7:96:25:8f:82:af:b1:3e:3f:f9:22:6c:eb:b1:fa:b0:40:d7:
         50:0c:ae:17:67:3c:6d:e6:8a:3b:f0:9f:19:03:c7:94:03:d2:
         b9:1c:bf:89:92:6b:dc:ed:81:82:dd:70:32:3e:c5:3c:d1:40:
         e0:e3:f7:13:cd:21:82:19:96:20:2f:07:db:57:25:02:f9:01:
         cb:99:e6:8e:7e:3a:90:92:98:f9:9b:a3:fb:b6:ec:63:96:20:
         72:82:a7:64:e7:3e:cb:61:73:bd:8d:67:70:0e:55:97:85:bd:
         76:db:59:81:76:3f:db:0f:c8:bb:e1:51:79:84:86:bf:f5:53:
         94:36:b4:10:1c:a4:6a:39:bd:a7:27:f4:16:b3:91:fd:97:04:
         8e:2c:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:36:27 2025 by rpki-client