Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
File:                     3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json)
Hash identifier:          6jUxrl5iRlAyjZJfjhxHJWXfLJi4pWl+70O89RpbXJo=
Subject key identifier:   94:08:A1:A9:ED:1E:7E:FA:8E:35:3F:DF:41:4A:4B:AA:1F:27:50:46
Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Certificate issuer:       /CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Certificate serial:       5B8C8FFF3ACBCA67617DE1DF2BD243D5FF5EA080
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
Manifest number:          0249
Signing time:             Mon 28 Apr 2025 13:22:00 +0000
Manifest this update:     Mon 28 Apr 2025 13:17:00 +0000
Manifest next update:     Tue 29 Apr 2025 13:22:00 +0000
Files and hashes:         1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: dqK9xyQtqG2+ryWsTYusHGnWXGDdicet3bTBla+kq28=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl
                          rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8c:8f:ff:3a:cb:ca:67:61:7d:e1:df:2b:d2:43:d5:ff:5e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
        Validity
            Not Before: Apr 28 13:17:00 2025 GMT
            Not After : May  5 13:22:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6c:14:ec:53:ed:06:66:af:99:f2:f4:12:e6:
                    10:b1:23:57:ee:e8:55:4e:5f:5e:bf:81:ec:5c:90:
                    2f:b1:74:e3:cd:81:bd:12:84:e4:d5:90:e3:53:2e:
                    62:22:0e:a2:e7:ee:18:4f:98:b2:ff:2c:cf:35:df:
                    c8:c3:a1:26:cf:ed:df:18:29:a1:b0:78:b1:93:a3:
                    12:88:46:bf:bf:39:57:1e:ca:38:51:24:0a:5b:15:
                    48:14:c2:8b:76:a2:c5:ee:71:74:26:85:1f:97:5f:
                    fa:46:11:7a:6d:61:d3:8b:75:92:3f:7a:fd:f6:e1:
                    24:ca:7a:fb:58:f8:73:ef:79:e8:a4:d9:fe:64:d4:
                    7b:91:9c:bf:9e:6a:ce:5c:bd:56:bd:2f:b7:94:c9:
                    1f:29:56:36:f3:10:7a:cb:63:37:8b:cf:44:10:c2:
                    1f:11:8a:ad:fd:13:9a:ee:fd:96:ca:4d:f4:46:04:
                    48:52:35:ba:38:15:e6:f6:2b:5b:20:3b:b3:c4:ea:
                    57:2b:81:e1:9c:82:19:1b:1e:3d:1b:f9:84:b2:20:
                    52:e2:e0:59:c3:8d:d7:ef:b2:cd:06:ff:21:16:0e:
                    88:ee:71:e2:73:70:6d:bc:67:2f:a0:0f:0e:97:e2:
                    a6:30:4e:ba:35:9b:ad:08:2d:4e:f4:27:59:fd:ab:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:08:A1:A9:ED:1E:7E:FA:8E:35:3F:DF:41:4A:4B:AA:1F:27:50:46
            X509v3 Authority Key Identifier:
                keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cc:2d:a2:6b:ba:7a:f2:76:a9:48:f4:dd:0e:76:23:f9:df:
         76:fa:8b:ba:d6:dc:cb:a1:8e:1c:a6:ec:07:9a:c7:44:75:9d:
         99:22:55:82:f6:40:88:15:8c:06:27:b5:12:f1:d7:e5:f0:1e:
         34:e3:56:5f:49:e5:bd:7b:39:7e:b1:99:94:43:2c:08:fa:92:
         30:2e:12:53:eb:da:e9:93:43:ec:c1:7e:b3:b8:9b:5e:01:22:
         1b:03:ed:a5:7a:1a:83:0e:55:9b:45:79:a7:00:c6:e8:0d:c1:
         dd:5a:8e:75:4c:81:c5:a4:5f:33:c6:21:b8:c4:d6:e1:2b:fc:
         f0:1d:6d:49:05:84:94:64:dd:87:56:8d:58:ef:fe:5d:37:4b:
         f2:06:e5:e4:39:37:71:d7:03:ae:06:05:b1:17:b8:f3:24:e2:
         4c:7c:04:af:dc:da:69:a2:5e:77:1b:4e:3b:48:bd:fc:97:f6:
         81:1b:ad:a5:e3:1c:05:b5:ea:b4:3d:1e:fb:b5:ec:a8:82:8b:
         6a:19:8b:60:3b:91:13:52:64:f1:1d:75:a6:06:84:51:34:43:
         cf:46:80:db:85:bb:39:3a:bf:c4:1f:5e:20:be:05:7f:40:1a:
         22:f2:de:95:71:d6:9a:8c:0a:c9:28:36:52:66:96:42:d6:97:
         d8:d9:ed:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:08:55 2025 by rpki-client