Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
File:                     275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft (raw, json)
Hash identifier:          ZLrt9VwAOR5fAw2gNUTgMvcF+XPdnE6tmMh8sDQeLuA=
Subject key identifier:   E9:2E:96:DA:02:AB:FB:6E:FE:B5:9B:C4:E9:67:7D:E3:9F:75:E3:3E
Authority key identifier: 27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Certificate issuer:       /CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
Certificate serial:       65EB12027B27AC5D34AA72C43FA9BF36FA619064
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
Manifest number:          020C
Signing time:             Sat 03 May 2025 13:36:16 +0000
Manifest this update:     Sat 03 May 2025 13:31:16 +0000
Manifest next update:     Sun 04 May 2025 16:47:16 +0000
Files and hashes:         1: 3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa (hash: Ry4WEHqQ3COy4GFObdDBhjjlH3TTWPjEE+vFu0K5ing=)
                          2: 323830343a373039343a3a2f33322d3438203d3e20323730373335.roa (hash: j50q5Q+ow8SJ6PGS5kNHGAOsLKmLHvprt+8f7xkhG/s=)
                          3: 275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl (hash: DSMTBKgxpkPP6T9k/2hHYlisvD73jTJzgt3638gOROw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl
                          rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 14:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:eb:12:02:7b:27:ac:5d:34:aa:72:c4:3f:a9:bf:36:fa:61:90:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
        Validity
            Not Before: May  3 13:31:16 2025 GMT
            Not After : May  4 16:47:16 2025 GMT
        Subject: CN=E92E96DA02ABFB6EFEB59BC4E9677DE39F75E33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:64:79:16:4c:0a:d8:9f:97:30:0b:90:38:
                    5f:6f:e9:20:10:a5:37:25:ce:28:40:7b:6f:ee:3c:
                    da:d0:52:db:b1:2a:88:43:72:a1:e7:ed:ba:62:76:
                    26:41:6b:bf:17:a8:77:93:10:f9:dc:68:a0:2d:91:
                    53:30:38:75:a3:85:98:2a:8f:81:17:43:cf:7f:38:
                    2c:f6:86:8b:c6:62:42:51:6b:c0:5e:c6:20:45:5a:
                    dc:c4:06:83:7d:d9:4b:18:b0:1c:f2:ae:89:44:f0:
                    03:7e:94:44:52:e3:5a:59:08:41:7c:cb:80:76:3c:
                    5c:43:33:21:3c:b5:75:54:a1:2f:8c:1d:79:d0:bc:
                    54:c0:e6:1e:22:7c:e9:c8:5c:72:67:83:76:ff:6c:
                    4e:fb:9f:44:b0:f3:d9:58:c9:19:4f:aa:a1:4a:4c:
                    35:d6:b7:a4:6e:6e:e2:38:87:82:16:3d:bb:af:1e:
                    9b:07:3b:7e:05:5a:36:b3:6a:78:1b:44:58:7e:5f:
                    5a:4d:d2:57:25:d1:e4:53:70:16:eb:ac:ca:32:b6:
                    e1:3e:d1:3a:74:ed:a5:39:d3:b3:8a:85:0d:54:3f:
                    be:20:23:58:05:5e:43:14:4d:8c:5f:a1:88:d2:19:
                    00:9d:3c:2c:1f:72:49:50:29:02:23:28:63:13:7a:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2E:96:DA:02:AB:FB:6E:FE:B5:9B:C4:E9:67:7D:E3:9F:75:E3:3E
            X509v3 Authority Key Identifier:
                keyid:27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:69:8c:be:00:2d:e2:b5:b9:7e:04:53:5e:0e:07:c3:19:d9:
         73:cf:84:59:43:c0:db:7e:d9:fb:b0:fb:50:07:0e:da:b9:01:
         88:3a:b9:2c:a4:ff:cd:2c:05:76:fe:25:34:9d:13:d3:c3:b2:
         68:16:fe:c4:54:a9:43:a7:f3:c2:8e:93:a8:de:f4:af:db:e0:
         fc:d8:c1:3d:f3:cb:07:2d:57:d7:c9:49:81:05:93:9d:76:52:
         4e:0b:51:5e:d6:b8:27:d6:8d:01:83:12:a4:9d:11:76:21:ef:
         2c:8a:de:70:3c:a0:ca:7e:1a:db:22:0f:b9:d1:1b:88:d5:94:
         da:2e:1d:e7:38:0d:9b:03:4c:0c:45:bf:86:0a:20:54:80:d0:
         b3:c1:0c:40:22:25:44:ad:fb:f1:77:48:97:36:c8:6c:30:4d:
         bf:26:00:fa:1b:c8:ef:15:8b:b2:b9:76:17:c6:8d:2c:5e:b7:
         90:8a:2d:0a:f4:b6:fc:db:3a:7c:03:54:67:4a:d1:85:14:6e:
         2c:30:6c:fa:8f:8a:bb:0d:a0:4a:d6:ba:00:9a:a4:d6:7c:a1:
         ff:7c:ad:20:7a:bc:e4:f2:cd:9f:c6:9c:6d:5f:fd:47:b8:eb:
         c6:f8:ed:c6:53:8f:2a:a4:c8:68:5f:2b:6e:f8:c1:55:69:48:
         5f:5a:bb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:23:54 2025 by rpki-client