Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
File:                     272EE1B25800F489DD72CC554F5C22037BDA8291.mft (raw, json)
Hash identifier:          Sj1nA9/JXjhJky0tU3DohG+Ba90BHUwcVII2MJKhaSU=
Subject key identifier:   1C:14:35:17:EA:00:E9:E2:C0:AF:7A:2D:7C:C9:24:69:16:C2:7C:88
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       6CD19F9BF5A3FE2EFFBF8500874BB9F6A77717C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
Manifest number:          016C
Signing time:             Wed 30 Apr 2025 01:41:21 +0000
Manifest this update:     Wed 30 Apr 2025 01:36:21 +0000
Manifest next update:     Thu 01 May 2025 05:37:21 +0000
Files and hashes:         1: 34352e3233342e3233362e302f32342d3234203d3e20323637333836.roa (hash: fN4tZsVuCNTsTRMc2SKTILQBpvJxcnxDBOvWrr5GQc8=)
                          2: 34352e3233342e3233372e302f32342d3234203d3e20323637333836.roa (hash: gsV0GcneL4oac1hWJMLhi7HwTL6nsVz+pS6qagFW10s=)
                          3: 323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa (hash: 7y70b0YE8madDpOsFFU7kPmQvR1WC0nAgowGpA/NubE=)
                          4: 272EE1B25800F489DD72CC554F5C22037BDA8291.crl (hash: aVvYqi1ANeB702iihR6f5oIRWQYO/zx4kf54RYZk+J4=)
                          5: 323830343a346362343a3a2f33322d3332203d3e20323637333836.roa (hash: WkPX8mSj0o9VHsmkq/IwsHnDFUP1k2HyOfmGUpQaBcQ=)
                          6: 34352e3233342e3233382e302f32342d3234203d3e20323637333836.roa (hash: zSnsBEjyprut42gZ3YehZz81FYegXVW1Xq8uFSESf98=)
                          7: AS267386.asa (hash: 9SpCaXXVshzIEDM21JmV6k5IYgjvnOx5aZfMGLUoXls=)
                          8: 323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa (hash: 3MxpF61U6WCNAVAB1GfFcec4yQZeruuCFvxLdtBnzkU=)
                          9: 323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa (hash: 0RNqX6LC7erwGI9kQ+AQLO1CZgwrlvcV/krdgAP925g=)
                          10: 34352e3233342e3233362e302f32322d3232203d3e20323637333836.roa (hash: BEWcvTJyi89aDPBBj3f4oKzMTFwhQnpc9INPICVfFpM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 05:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d1:9f:9b:f5:a3:fe:2e:ff:bf:85:00:87:4b:b9:f6:a7:77:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Apr 30 01:36:21 2025 GMT
            Not After : May  1 05:37:21 2025 GMT
        Subject: CN=1C143517EA00E9E2C0AF7A2D7CC9246916C27C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:2b:ae:ea:13:a7:99:80:a1:de:a9:a5:5e:
                    4c:7c:f6:ec:7c:48:40:7e:35:90:ca:b4:de:e0:e3:
                    52:5d:1d:62:64:03:87:7f:e1:f8:c5:a7:c3:0a:04:
                    c1:cf:66:5b:fa:79:cf:34:f1:a4:79:21:64:36:27:
                    92:a6:91:93:a1:85:d0:31:76:f6:90:54:01:19:99:
                    16:cf:07:96:76:51:02:ff:89:3e:de:31:c9:63:53:
                    fc:aa:7d:7b:f3:51:47:52:d0:92:be:c9:9b:c5:87:
                    d2:51:71:83:ad:bd:12:62:19:3f:e3:0b:1a:35:56:
                    6a:ef:1e:e6:ee:a2:3b:12:46:a1:b5:00:4c:fe:00:
                    2c:3d:a9:dd:33:f4:1f:32:a1:47:5a:ab:14:cf:90:
                    27:5c:26:33:96:a8:5f:86:75:5e:cc:da:ba:c5:26:
                    4e:2f:2c:0c:4b:c2:fb:c3:2a:f1:18:ed:11:b0:2c:
                    89:0d:eb:5e:fa:05:f7:04:36:a0:0f:08:2c:cc:99:
                    de:79:8b:43:b4:ea:98:e3:39:07:1a:f4:2a:b7:a7:
                    c2:5a:11:73:b2:a6:00:92:ee:ad:19:0c:12:74:9c:
                    97:b3:86:7f:7a:67:69:5e:b6:12:12:ba:fb:bd:0d:
                    30:b5:55:a7:56:13:fc:f9:5f:c1:0a:22:c5:5a:47:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:14:35:17:EA:00:E9:E2:C0:AF:7A:2D:7C:C9:24:69:16:C2:7C:88
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:c4:a7:6c:85:59:b9:fa:1e:53:db:0e:ae:5f:e5:d3:fb:
         d1:51:23:62:87:0d:c6:15:c1:f3:4c:ba:24:c6:a3:b2:ec:72:
         49:c6:6f:38:36:80:36:44:a7:e6:bb:d0:c2:3a:88:a7:b3:f3:
         a1:73:a3:9a:e7:70:73:98:7b:00:57:c2:33:ac:16:d4:a1:a3:
         c6:6f:7e:da:e9:f0:a5:b0:9e:ea:31:d5:70:91:05:4a:d1:43:
         98:9e:38:17:a1:dc:8f:29:ec:e0:09:3a:40:ed:9b:5c:69:29:
         1d:99:39:db:06:06:f4:75:e5:dd:b8:07:a9:82:6d:8c:5c:66:
         a3:b1:f6:6a:07:61:61:9e:fa:1d:b2:19:dd:3b:9b:bf:15:f2:
         c9:e5:11:e3:00:de:a1:e6:60:89:4f:11:94:ce:d2:52:bb:5d:
         68:ca:ef:17:9a:50:3b:0b:34:75:0b:89:1c:7d:82:cb:46:1e:
         00:39:3c:b1:2a:99:a6:6e:06:44:90:2e:a1:d8:2e:58:0e:fa:
         0e:07:b3:c5:ed:f7:7f:43:2e:9b:2a:34:18:d3:0a:94:99:58:
         82:90:80:b4:a0:1d:7c:f6:81:2e:1c:68:18:24:24:94:86:de:
         72:fe:ed:d2:7e:9e:87:e0:28:53:5d:d7:09:a4:f4:43:82:63:
         ae:0e:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:01:21 2025 by rpki-client