Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          WZhUbXg+EHiVQsRzBaWkhScXL59jBd8ra8P3FHCV2Dc=
Subject key identifier:   40:1F:5E:12:21:D4:03:91:53:7A:BD:84:E3:D7:8E:75:5D:47:F6:FF
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       25DE984004FFBA85FE66CCC7D099A0E95268A2CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0136
Signing time:             Fri 02 May 2025 09:56:19 +0000
Manifest this update:     Fri 02 May 2025 09:51:19 +0000
Manifest next update:     Sat 03 May 2025 11:19:19 +0000
Files and hashes:         1: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=)
                          2: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: OypzA2BTcE6/4j17gxonSsWbuapJVaVp9b3e59gHB2c=)
                          3: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=)
                          4: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=)
                          5: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=)
                          6: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=)
                          7: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 11:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:de:98:40:04:ff:ba:85:fe:66:cc:c7:d0:99:a0:e9:52:68:a2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: May  2 09:51:19 2025 GMT
            Not After : May  3 11:19:19 2025 GMT
        Subject: CN=401F5E1221D40391537ABD84E3D78E755D47F6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:24:4f:f6:86:e5:ca:ff:1d:ba:9c:20:6c:
                    5c:f4:b8:8b:d0:65:5d:30:a1:a1:dc:9a:36:a4:19:
                    10:9a:c1:d9:f3:e2:8b:2e:d8:fa:48:f6:33:97:0b:
                    07:38:85:bc:45:ed:cc:94:ca:20:71:0a:bb:b9:be:
                    45:06:f8:6d:fb:08:e6:44:3d:55:d1:5d:2b:5e:ac:
                    1c:f8:48:7e:be:63:ed:d0:b7:25:63:8e:df:a2:2e:
                    bd:f2:08:40:84:c1:e6:3e:96:36:d2:ce:f1:6e:5f:
                    ff:90:ac:2d:4c:cc:fe:3f:b2:5c:d0:1a:d9:b9:1b:
                    05:65:62:94:72:96:0d:ec:cb:cc:fa:9d:5d:c5:fb:
                    d4:02:fd:b3:ea:74:5d:24:74:92:d9:a6:97:e8:0a:
                    b6:28:75:31:63:0c:ce:a5:6e:75:8f:c9:f7:d9:c2:
                    76:a9:b7:07:47:9c:69:0d:b8:2a:14:c7:8e:30:c8:
                    d5:95:7e:7e:e7:49:4b:00:7d:cd:49:ca:1a:35:47:
                    ef:8f:b2:ec:4b:b2:94:f3:06:e0:32:f7:fb:5f:1e:
                    4b:ec:0d:11:6e:10:11:73:4e:fd:28:73:e2:2d:70:
                    f8:a4:b7:e3:e9:6a:f6:b0:05:74:b0:eb:3d:ca:fd:
                    88:a5:11:93:25:14:42:95:6f:05:73:20:ce:a3:cb:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1F:5E:12:21:D4:03:91:53:7A:BD:84:E3:D7:8E:75:5D:47:F6:FF
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:74:a8:80:6e:e5:19:2b:65:75:f1:1c:49:96:0a:9b:52:23:
         d4:49:f0:6f:77:c0:24:40:f0:bc:2e:b9:3e:0e:d1:3e:ee:6d:
         b8:92:d2:e5:8a:d3:c3:61:d1:f5:07:f1:e6:ad:16:24:f1:d7:
         a5:b2:30:68:f0:16:9b:55:ad:eb:e4:7f:aa:10:34:94:6e:43:
         85:b5:91:88:9e:05:a2:aa:9d:dd:27:da:e9:a2:6b:a2:0d:73:
         da:a9:cf:f3:7b:29:d2:d4:a5:bb:8e:e9:06:49:34:db:33:1b:
         d2:f5:19:c0:b8:0e:6e:4f:13:0e:84:9e:db:ef:93:4a:fc:fc:
         fb:61:bf:6b:7f:fd:92:3f:66:fd:f2:9e:72:33:07:ab:d9:0c:
         b5:48:8c:07:42:3d:e6:f4:0d:2b:4d:92:63:23:68:59:4f:13:
         6e:81:18:af:e2:b8:bc:0a:f2:d2:86:a5:c4:64:d3:a5:cb:05:
         95:82:fa:ae:de:2f:1e:aa:eb:2c:de:e0:2b:d0:aa:6f:91:f6:
         e3:de:5e:a8:cb:c7:ff:ec:9e:80:3d:f7:f5:9f:31:e3:a6:9b:
         f6:8a:6b:bc:f6:dd:a4:3d:94:c7:00:41:a6:b6:92:6a:0e:a2:
         36:6e:0e:87:e6:74:aa:5f:9c:38:14:5b:36:2f:90:37:fb:4b:
         0e:c3:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:55:28 2025 by rpki-client