Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
File:                     2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft (raw, json)
Hash identifier:          R2bu8a2ePqxcjhfQrutICVjpA0/PuE5J+RukWv9cQGw=
Subject key identifier:   95:AF:1E:F7:F2:30:17:44:8C:57:02:9F:01:67:EF:EC:DD:9C:C3:5B
Authority key identifier: 2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21
Certificate issuer:       /CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
Certificate serial:       1442DE20C77C57F42A813D72952FC7AA699A1D8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
Manifest number:          0148
Signing time:             Tue 06 May 2025 08:32:49 +0000
Manifest this update:     Tue 06 May 2025 08:27:49 +0000
Manifest next update:     Wed 07 May 2025 10:27:49 +0000
Files and hashes:         1: 3230312e372e3138382e302f32342d3234203d3e20333936393832.roa (hash: Tc8QLDQsgO1CP10+kASAa5YIOxZu509sOagjTspLmx8=)
                          2: 2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl (hash: bFZXSRz/Z23bz3E9j1pETAqpwqoWBEAicesh+PkrHfQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl
                          rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 10:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:42:de:20:c7:7c:57:f4:2a:81:3d:72:95:2f:c7:aa:69:9a:1d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
        Validity
            Not Before: May  6 08:27:49 2025 GMT
            Not After : May  7 10:27:49 2025 GMT
        Subject: CN=95AF1EF7F23017448C57029F0167EFECDD9CC35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:74:d0:0e:49:0c:ba:39:21:48:ad:24:97:
                    19:a0:3e:51:ca:09:e0:5f:7a:0c:9d:77:ef:c0:4c:
                    66:60:27:25:ed:33:95:aa:96:42:db:b4:24:ee:44:
                    30:00:44:b0:44:92:a9:8f:18:1c:81:d4:c9:78:e1:
                    f7:78:3b:b3:dc:d5:c1:8f:36:2c:57:d7:9f:bb:21:
                    df:ee:bb:49:80:bd:99:98:a5:9f:10:e5:ac:0f:7e:
                    e9:0b:21:74:47:b4:e2:e5:ea:4f:5f:00:e5:0d:1e:
                    00:97:8f:c3:90:6e:89:89:6b:fb:06:eb:4b:a0:e9:
                    81:97:ab:44:b5:92:80:0d:ad:e3:16:8c:a1:05:e8:
                    e8:b5:f7:af:f6:40:9d:03:38:a8:ef:d0:1a:a6:0a:
                    e1:05:50:cc:8c:79:b3:8b:16:63:4d:f6:8f:ac:64:
                    40:64:e6:4c:8b:38:e5:86:16:19:dc:bb:3c:17:f5:
                    d9:52:0e:45:5d:2e:41:22:09:74:d8:96:5a:37:32:
                    5b:94:a5:e1:d4:7d:5c:0e:e5:7d:18:be:1a:ba:9b:
                    24:53:c4:b1:3a:57:12:33:be:77:ba:e1:9f:e3:d1:
                    1d:66:a5:44:e3:5c:89:bb:d2:28:e3:e3:2e:93:b6:
                    c3:73:5f:f7:fa:c7:d5:b2:b1:c9:15:c4:52:bf:ae:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AF:1E:F7:F2:30:17:44:8C:57:02:9F:01:67:EF:EC:DD:9C:C3:5B
            X509v3 Authority Key Identifier:
                keyid:2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:41:60:f3:b3:66:f5:e4:dc:0a:00:49:4e:82:75:d0:71:
         92:c1:4d:e5:7e:fb:40:fd:94:5b:fc:0f:87:b2:95:73:65:c8:
         f0:7d:7d:af:0a:73:66:c2:c4:ca:8d:07:45:d5:35:9b:5d:e7:
         56:c0:44:11:9b:7c:8c:1d:a7:b1:9b:22:b5:98:da:cd:6f:98:
         41:95:f9:1d:9f:e6:c9:52:f7:68:19:3b:88:55:20:ed:8c:cc:
         af:ae:82:50:0b:aa:36:cb:f1:b0:25:4e:ce:22:2e:8a:ad:fb:
         da:ca:c6:21:40:c0:2d:28:74:34:ea:78:cf:24:06:29:0d:23:
         7d:7c:84:35:3e:e7:27:17:23:e0:da:be:01:64:ae:36:6c:31:
         c3:84:37:38:23:b9:8f:fc:37:c0:c3:e5:5e:4f:ac:60:93:74:
         fb:ce:93:c9:bd:3f:3b:2d:a7:66:55:7d:39:9f:8c:57:a3:36:
         32:5b:2d:8f:21:d8:7b:16:63:f2:c7:15:8e:f6:43:83:26:07:
         ef:22:dc:3b:d2:d9:80:d5:34:da:7d:39:e8:4b:73:d2:ae:d1:
         37:ce:0b:1d:2c:17:47:c2:5f:3b:36:a2:05:77:c4:0d:52:7d:
         d6:6d:72:b4:36:b3:72:0c:c8:24:ed:63:bb:07:dd:8e:b4:56:
         c0:b5:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:45:10 2025 by rpki-client