Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
File:                     B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft (raw, json)
Hash identifier:          lsHQcyRvlJSW4hkwV3tveDZa6I5LYO7ZALU5zgylfUE=
Subject key identifier:   24:55:52:07:39:F1:F0:19:DA:83:F0:3E:1E:38:64:45:6E:9E:DD:46
Authority key identifier: B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91
Certificate issuer:       /CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
Certificate serial:       3E6702A50A0A2230F746CB8543AC70880C73B7C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
Manifest number:          E2
Signing time:             Mon 05 May 2025 12:13:46 +0000
Manifest this update:     Mon 05 May 2025 12:08:46 +0000
Manifest next update:     Tue 06 May 2025 16:12:46 +0000
Files and hashes:         1: 3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa (hash: jXWBDLiYB1m25FMwuM+A/KotQrDbMeAmlT0ztnJgTgw=)
                          2: 323830343a376133343a3a2f33322d313238203d3e20323731333535.roa (hash: JdloexSasxLzwx2pYEJ1mS18dGc8eTSh1DjoYob/pjA=)
                          3: B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl (hash: Xm+B1my3NGT/g+nDZqPRF8iPBZDyDDCw7kpjGK/qsj4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl
                          rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 16:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:67:02:a5:0a:0a:22:30:f7:46:cb:85:43:ac:70:88:0c:73:b7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
        Validity
            Not Before: May  5 12:08:46 2025 GMT
            Not After : May  6 16:12:46 2025 GMT
        Subject: CN=2455520739F1F019DA83F03E1E3864456E9EDD46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:cc:83:54:25:52:d1:6e:9e:2e:0f:e0:67:
                    ba:a7:64:62:84:4d:6f:9f:db:f0:11:84:e6:f7:0a:
                    6f:43:d8:8f:b1:66:af:dd:b3:22:db:c9:42:e5:a6:
                    46:c3:66:44:51:b3:6e:4b:ad:1f:f9:57:eb:8c:2d:
                    2e:c6:73:52:2d:65:77:70:26:bb:43:c8:26:a3:33:
                    79:77:3d:36:5d:d4:31:aa:13:23:78:ec:da:d6:e9:
                    8b:4d:2e:c7:f3:3b:6b:67:5f:fe:e2:04:2d:17:22:
                    e6:6a:20:8a:4f:c8:1a:25:2b:f7:3c:78:c3:e9:23:
                    0b:ca:c2:a6:d6:52:1b:bd:90:67:11:15:b1:0e:bc:
                    26:d3:40:d4:13:36:90:a2:b5:ac:e4:ed:ed:92:fd:
                    b6:6d:71:22:41:e9:8e:27:a4:3c:f4:6e:54:2f:6f:
                    cc:d1:46:cc:76:bc:e6:2a:19:e2:6c:89:d8:9b:20:
                    82:36:4e:01:5e:07:39:4e:c4:33:18:dd:47:17:87:
                    16:39:ac:8c:be:61:6e:da:eb:b0:0c:59:38:da:10:
                    77:03:42:79:e7:9a:11:a8:e3:60:c8:05:20:c3:8e:
                    65:9e:f9:43:7a:53:5f:64:56:1e:4a:5e:e9:a9:f6:
                    e5:8d:45:86:1c:d6:6f:0c:6c:c6:88:3a:37:14:cb:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:52:07:39:F1:F0:19:DA:83:F0:3E:1E:38:64:45:6E:9E:DD:46
            X509v3 Authority Key Identifier:
                keyid:B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:1a:4f:d1:ad:60:3d:45:e0:0c:a1:1e:79:0a:7e:0e:d0:
         42:36:f6:d6:91:f3:e4:88:88:a9:29:53:61:76:b5:a3:7e:63:
         7e:26:06:55:a2:cc:35:fb:a1:57:5a:29:30:33:06:58:17:84:
         54:b3:17:2c:fa:3d:0d:77:2b:07:6e:ca:bf:04:96:3d:4d:f3:
         40:2c:42:80:09:8d:56:9e:b3:41:82:f7:a5:98:09:b4:9a:46:
         71:cd:ef:e0:47:fe:05:27:2f:de:15:41:32:f4:21:16:6e:04:
         c1:e2:14:19:76:11:c3:5b:56:17:c9:ae:42:6e:88:7f:fe:00:
         f2:ab:43:7c:a2:25:00:b7:c6:7c:03:4c:9e:07:d0:cb:94:8c:
         47:29:af:0c:bc:bd:3f:8e:c4:b8:b9:26:88:b6:f4:d4:46:c7:
         69:c6:fe:d4:56:f2:99:79:7b:73:1c:40:8c:d4:bc:cc:9c:26:
         81:f9:d2:84:38:57:bc:49:3e:62:70:16:5b:4e:ef:ec:b8:5e:
         0c:fe:4a:e5:8b:89:74:34:76:fa:a3:90:70:55:05:ce:fa:18:
         03:59:f9:05:62:07:91:a1:30:74:7f:46:b6:39:c9:b0:85:7e:
         bf:17:a0:65:4c:9a:bc:70:5b:7f:96:0d:5a:cb:fc:3b:f4:9e:
         70:2f:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:06:39 2025 by rpki-client