Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
File:                     296C1957CA1EAD9BA9385FA528C36D900C425F48.mft (raw, json)
Hash identifier:          UR2mlu4vu7ExTpHJ58gb+I07IoRcZUgLC8Sb1XBWWGI=
Subject key identifier:   9D:D1:DD:A4:2C:98:05:4E:D7:26:AF:EF:1D:41:84:E5:D6:3E:07:D2
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       5775791FF8E14089779D9CE2568B6DDC6BD43DBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
Manifest number:          12
Signing time:             Sat 26 Apr 2025 19:23:07 +0000
Manifest this update:     Sat 26 Apr 2025 19:18:07 +0000
Manifest next update:     Sun 27 Apr 2025 19:43:07 +0000
Files and hashes:         1: 3138312e3232342e32362e302f32342d3234203d3e20323730353634.roa (hash: xVEk1L81qX01xxW4IyS4YM+0De8Mti9s0l9YDGy2nP8=)
                          2: 3138312e3232342e32352e302f32342d3234203d3e20323730353634.roa (hash: VrPL3TxiedADmI5FEdoZcrKGF4HcT0E4E0g6y1Z2Iok=)
                          3: 296C1957CA1EAD9BA9385FA528C36D900C425F48.crl (hash: AzkxFqW6FWAEzRLA5BwppZj+nj4VkEmhB66/q3U5+aM=)
                          4: 3138312e3232342e32372e302f32342d3234203d3e20323730353634.roa (hash: K6v+BNgmcrA2NGGI4YpvsgF2J/sl4soIFWLeroEeeBQ=)
                          5: 3138312e3232342e32342e302f32342d3234203d3e20323730353634.roa (hash: gi2TJpuh+msqZ1T3Ji3xFnrT9Cu+4du04Mo60K4LNqM=)
                          6: 32342e3135322e33372e302f32342d3234203d3e20323730353634.roa (hash: j1m1dEZ5q1dJyi4OWRJR5pm8KOyuDxV2ubfApptV/NU=)
                          7: 32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (hash: s0+LY9NPez3OzzMtpOH0ZD9Jf83IGdXVOwgSYdJ/8Sw=)
                          8: 323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (hash: JrjXmpuAR4nLSLkW7VGjjln8ADGB1CbFOR1f12E6R6k=)
                          9: 32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (hash: yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=)
                          10: 323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (hash: 5NigUzx/I6sMjEJnsNecKw16Xyfbit5USCbCcSdmdzs=)
                          11: 32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (hash: /vDLq0zmn0A8Fu43Fs1L85absc3v5lAacCAsUIfqGgU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:75:79:1f:f8:e1:40:89:77:9d:9c:e2:56:8b:6d:dc:6b:d4:3d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: Apr 26 19:18:07 2025 GMT
            Not After : Apr 27 19:43:07 2025 GMT
        Subject: CN=9DD1DDA42C98054ED726AFEF1D4184E5D63E07D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:31:c7:71:cb:6a:35:4a:ee:4b:0d:ed:75:
                    ab:3d:0b:ab:80:0d:e9:a2:1b:89:ba:31:bd:58:63:
                    6e:48:4a:83:e5:28:46:b2:fc:f8:17:b7:83:58:e3:
                    9f:7e:76:29:d2:b1:41:d9:78:12:e4:10:8e:75:19:
                    2d:99:77:9a:f5:a2:62:c7:2c:d9:f3:45:7a:20:38:
                    9e:08:88:a3:d1:9b:70:20:f9:83:65:97:09:96:58:
                    f7:aa:33:f8:50:b4:63:6f:35:ea:ea:79:1b:a3:17:
                    5e:a5:8a:6d:eb:b5:7a:f7:1c:18:87:78:5d:c0:33:
                    2d:6b:3e:c9:f9:98:b7:cb:2f:a5:79:62:07:db:d0:
                    35:d8:58:9a:db:d0:85:12:1b:5d:27:54:b8:29:c5:
                    8a:a6:c4:ee:c6:0b:98:1e:e8:5e:8e:39:23:31:20:
                    16:7f:66:de:8b:5f:f6:03:90:82:c4:3e:ce:a2:bf:
                    68:78:86:cd:b0:dd:57:fa:8b:bb:c7:b7:fc:68:74:
                    2f:0c:94:ba:ae:9b:aa:04:01:24:ba:ba:2d:75:5b:
                    29:7f:3a:4a:bc:67:bf:a0:59:17:b0:06:0a:d2:2b:
                    eb:63:78:ed:87:6e:96:f1:b4:b7:3e:12:a5:a9:65:
                    d2:6c:a6:30:2f:71:26:92:9b:a2:42:93:60:36:dd:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D1:DD:A4:2C:98:05:4E:D7:26:AF:EF:1D:41:84:E5:D6:3E:07:D2
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:50:0c:ce:32:18:05:28:4b:79:d3:91:92:66:09:82:18:
         22:bc:a0:c3:55:5c:07:fd:82:4d:65:a2:83:75:be:d4:52:27:
         f5:8e:94:3d:d0:ce:bd:ea:7d:49:d7:33:1d:23:d6:ba:01:94:
         58:70:39:79:5d:ab:95:0f:18:21:d4:5b:1e:9a:b3:70:bb:48:
         3d:c1:26:0b:f5:03:64:20:f6:fa:e7:29:8a:e7:ae:f2:16:1b:
         f2:5c:ef:69:56:7a:3d:eb:3e:19:5c:1c:c1:d1:66:d2:22:e7:
         60:10:86:b4:38:8e:da:60:45:c1:9a:eb:dc:de:cc:c9:7c:2d:
         72:e6:f2:b7:16:2a:f8:f2:3d:e8:ff:3b:7e:56:84:de:d9:01:
         6e:42:b5:39:40:52:53:d5:1d:67:1d:19:22:9a:37:db:6a:47:
         ef:b7:a0:80:57:8d:b7:6d:64:24:e4:98:69:0c:39:3f:a4:b2:
         ba:6d:9d:1d:18:53:ce:61:0a:54:75:bf:b5:21:0d:f1:e8:35:
         07:18:08:84:87:f4:a6:0d:aa:ac:d1:4a:75:f8:d5:b2:d1:7f:
         a1:90:dc:68:13:8b:34:25:17:de:50:02:4c:6c:55:91:0d:a2:
         bd:b6:89:03:dd:fc:9e:51:b5:85:0c:4d:b2:9a:14:5c:0a:fe:
         53:7f:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:12:38 2025 by rpki-client