Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft
File:                     973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft (raw, json)
Hash identifier:          gKJnAsdUlNpXEZfv3NZpjB0t76H8p1Pg9QxlYfwERaM=
Subject key identifier:   9F:40:58:7E:1B:82:29:09:6C:EE:9C:79:90:D0:52:90:79:8C:AB:3A
Authority key identifier: 97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75
Certificate issuer:       /CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
Certificate serial:       187C0C27E5237A0A143C363AAF51192A7853CBD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft
Manifest number:          16
Signing time:             Tue 29 Apr 2025 15:05:03 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:03 +0000
Manifest next update:     Wed 30 Apr 2025 17:42:03 +0000
Files and hashes:         1: 3137372e37312e38382e302f32322d3232203d3e20323633363034.roa (hash: AudcQzPkwG7uDfbZQwd4CR/94lIwID2SLcM+8Rf4VP8=)
                          2: 3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (hash: CLVVHsIZqBkZiDioH9hmdHREqOjXWkavrc1EqIjeG+4=)
                          3: 973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl (hash: ttz2y2ejA+nFK2WXpOAy63Lvnoxo9KvXz5q/DriyRQM=)
                          4: 3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (hash: A2vCUQAE/3G225QVGKeDQml/I1bH+8ij0Sl2zGRXVcA=)
                          5: 3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (hash: XhZB6r3F/lPefNznAaeU8dDACZb68IQxSiO8p3bFbGw=)
                          6: 3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (hash: LXE6VCSI9OS9QaL8SAeAl2HzPuLSOq1ovtfwZRhZCSs=)
                          7: 3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa (hash: dF6WDysxEI98SH/UuEftlnHFni3+CgfCa3L4lnAv9sw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 17:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7c:0c:27:e5:23:7a:0a:14:3c:36:3a:af:51:19:2a:78:53:cb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
        Validity
            Not Before: Apr 29 15:00:03 2025 GMT
            Not After : Apr 30 17:42:03 2025 GMT
        Subject: CN=9F40587E1B8229096CEE9C7990D05290798CAB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:25:e0:bd:9a:06:cb:0d:55:d2:3a:83:57:
                    77:6e:02:f5:60:ae:aa:2a:0b:26:7f:7f:b0:07:29:
                    62:20:ff:9e:84:cb:c1:0d:0d:8a:75:d3:b7:8b:16:
                    d3:f4:71:e3:80:7f:e4:99:f5:f8:51:d6:63:52:48:
                    96:ea:ad:e7:75:96:4b:91:f5:e4:25:ce:53:b1:19:
                    8d:64:d3:dd:e5:a1:45:5d:84:66:b4:14:7c:cd:e2:
                    69:3d:79:5b:de:7a:cc:8a:60:a5:10:61:65:5b:0d:
                    f5:9a:a6:8c:43:c1:40:30:a3:d0:65:e4:4d:35:19:
                    41:75:8e:5c:05:38:fa:c4:3d:47:44:c6:d8:13:7d:
                    e8:c4:9a:be:93:7c:12:5d:64:df:1e:76:eb:95:cb:
                    96:27:01:20:77:b3:7a:3c:c9:bb:b8:da:4a:6d:8a:
                    ea:2d:5c:aa:5b:4e:db:9f:03:e8:47:d8:d5:75:f0:
                    46:55:fd:5b:d3:90:34:9c:f9:68:54:07:1a:e5:ff:
                    d1:c1:21:37:cd:24:b0:32:cf:dc:9c:20:af:e8:8f:
                    02:6c:cf:ba:2d:66:ae:c1:07:57:d9:6e:14:2f:cd:
                    44:43:b1:3e:61:4b:37:f4:0c:22:22:89:f8:02:50:
                    27:08:29:d0:bd:33:2c:6f:7c:ee:22:f3:9c:4d:ba:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:58:7E:1B:82:29:09:6C:EE:9C:79:90:D0:52:90:79:8C:AB:3A
            X509v3 Authority Key Identifier:
                keyid:97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:ac:0d:3b:b4:06:69:14:50:dd:85:13:db:20:1b:3f:05:
         81:d6:9a:fa:f2:87:b5:21:01:65:2a:56:86:e1:63:8d:a5:65:
         ee:b7:15:8b:ef:ca:52:ec:1b:e5:ef:b2:af:83:18:b2:67:fb:
         c0:22:e0:1d:c6:e3:66:03:37:75:b9:15:9b:6e:91:a8:b7:54:
         71:b2:d7:e7:9f:27:26:22:bf:5c:08:1d:f6:9c:5c:c2:af:7e:
         73:31:44:08:5c:79:d6:3f:81:14:f5:29:be:02:ee:ac:14:c6:
         17:df:c8:2f:9e:82:56:d5:18:de:64:a9:c2:7a:2c:f4:7d:1b:
         fe:67:5d:ec:d8:e7:62:8d:fc:9f:1a:aa:77:01:22:d1:da:fd:
         85:1e:87:1f:96:da:4b:f9:61:b2:7f:95:5a:78:ad:38:ba:7a:
         68:17:1f:e1:42:59:27:8a:74:3e:06:db:4a:5f:b2:e1:8f:cb:
         8b:52:bc:a3:fa:94:cc:ad:3a:2f:f5:7c:1d:9b:30:57:59:d9:
         57:97:a6:9c:ee:dd:dd:ed:86:48:73:f2:60:40:a2:54:23:10:
         c2:1f:37:36:e9:b0:e4:6d:99:c0:8e:ee:2c:b3:a5:38:11:00:
         99:ef:02:b6:ea:00:82:6f:64:07:3c:f6:95:c9:e3:7c:74:6b:
         6e:cc:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:52 2025 by rpki-client