Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
File:                     29693FC359A5A86688559CF55626142C53AF60AF.mft (raw, json)
Hash identifier:          b6sTuT1FIFV1RfX/u+LuaZL0Djn4Ciyv6qDSyJyyqKk=
Subject key identifier:   BE:80:47:9C:D9:0F:FF:27:AD:24:2F:15:7D:E9:E8:C7:43:4A:34:00
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       11F1A41E0A2C33A223376B69F846256F110C00E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
Manifest number:          020A
Signing time:             Mon 28 Apr 2025 19:44:02 +0000
Manifest this update:     Mon 28 Apr 2025 19:39:02 +0000
Manifest next update:     Tue 29 Apr 2025 20:55:02 +0000
Files and hashes:         1: 3136382e3232382e3137392e302f32342d3234203d3e20323634393236.roa (hash: j1jF9/RrsQ4NNkvMSmn2vHrGan4nESToT/+np3B6JNg=)
                          2: 3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa (hash: miWyRi5Wy54osDX4WtXOd4oFcI5wptcjy31ToN1P8S4=)
                          3: 3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa (hash: uJRNgUpfYLxohRLkH6jf39sa/xmIi1UjbJJAHV34J4o=)
                          4: 3136382e3232382e3137362e302f32342d3234203d3e20323634393236.roa (hash: eQ9m29gjm1b1zOeIjvFQebhfVn7RWS/k7a7yiQL1AQM=)
                          5: 3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa (hash: rI0u1+0P5xZnT3z6RDZJU/rvwCZ507QIyoyGchdjpmE=)
                          6: 3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa (hash: VxtIhEU+KjZ7srWaFz5vR63zpbt5PvHvVBtDVauTTG0=)
                          7: 323830343a333030343a3a2f33322d3334203d3e20323634393236.roa (hash: 3UmHpmFjNu9z929FSMUEX+wDYx+nFf5iIN8AdmezNdM=)
                          8: 29693FC359A5A86688559CF55626142C53AF60AF.crl (hash: 2nVew+pMigk28ICNgKI9FUTmClN7L0EbyzaHGNjpxPU=)
                          9: 3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa (hash: Vh5KVB445yDRtz3X1WJFos45hJiCOIoaKDhErXq8N/8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f1:a4:1e:0a:2c:33:a2:23:37:6b:69:f8:46:25:6f:11:0c:00:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Apr 28 19:39:02 2025 GMT
            Not After : Apr 29 20:55:02 2025 GMT
        Subject: CN=BE80479CD90FFF27AD242F157DE9E8C7434A3400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:9a:13:99:e3:cb:44:ea:41:18:77:89:e7:
                    2c:ad:2a:68:9c:78:37:6e:ba:28:23:6a:f3:5a:5a:
                    3f:fd:ea:bb:bf:c8:82:72:5a:0c:bf:36:49:e1:bb:
                    41:55:97:f9:d9:cb:1c:2b:5b:69:9e:19:78:33:48:
                    12:7c:2d:eb:ce:9e:f1:b5:25:e0:9c:a5:52:89:f8:
                    ad:d1:72:ad:2c:3c:dc:2d:cb:f5:0d:74:0b:4b:b3:
                    78:f8:b9:89:26:3e:96:89:c2:ac:cf:d4:4c:f1:eb:
                    2a:9d:da:21:09:c3:eb:34:bd:06:50:61:93:db:d1:
                    27:df:fa:45:e8:a6:72:c5:8e:52:45:72:39:be:67:
                    70:25:e3:cc:c8:16:b3:75:86:b5:0f:d8:36:99:2c:
                    66:14:25:6a:1f:b5:e6:1d:61:a8:17:b8:28:71:b5:
                    90:90:51:2c:52:dc:31:73:e1:44:12:ac:9e:9b:d5:
                    f2:67:7a:7d:0d:bc:2a:13:1c:7e:6e:bc:0d:0e:b6:
                    4b:d9:0f:c9:88:19:df:25:53:4e:2a:cb:07:1d:9e:
                    6a:92:f7:af:91:20:bd:a4:d8:f4:fb:ae:f4:56:2f:
                    ba:3e:f6:9a:64:33:17:47:af:dc:28:e1:e4:75:61:
                    cb:45:c8:87:aa:82:a0:65:2f:0c:37:a1:27:09:19:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:47:9C:D9:0F:FF:27:AD:24:2F:15:7D:E9:E8:C7:43:4A:34:00
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:14:3c:18:6e:d8:12:3d:7b:ac:05:92:01:d8:1f:90:d9:
         8a:d5:19:33:f1:99:23:ba:d5:70:bc:b0:4c:30:e7:15:cf:ab:
         b4:37:81:8e:31:3e:6f:27:56:7e:81:e5:d2:2f:66:9b:c6:a6:
         27:52:f5:31:c7:b3:af:19:67:97:6c:60:69:4f:f1:89:73:0b:
         72:bc:bc:54:1d:77:52:59:c4:03:ed:9c:b5:ac:e8:8c:a6:7a:
         80:e8:0d:cf:35:73:a3:3f:3f:6a:a2:83:52:50:4f:b8:c6:37:
         b9:b4:96:03:b0:a3:23:6a:ae:21:2a:56:7d:bf:b7:2f:fe:6b:
         65:75:f2:15:3b:36:bc:a6:09:23:7c:d3:b0:14:8e:c1:0a:82:
         f0:98:67:3a:94:d1:1b:cb:33:26:4b:cb:2f:7b:86:cb:c7:f5:
         4f:0a:be:ff:70:55:f3:dd:3c:c7:f3:08:e5:55:4f:2a:aa:b4:
         51:16:85:ac:35:c8:8f:58:41:fe:94:97:b5:ec:cc:2f:50:14:
         45:79:0e:a2:f1:69:96:f0:a7:c7:80:21:29:a7:50:fe:91:52:
         80:37:db:54:51:96:55:44:a2:1f:c2:d8:4b:ae:55:f9:fa:92:
         82:b2:c3:4d:b2:3e:d0:de:41:67:a6:7b:40:58:2d:ae:eb:c7:
         f2:7d:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:11 2025 by rpki-client