Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
File:                     120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft (raw, json)
Hash identifier:          uSfYhWtpA5h2l6MSmieRbfGLhoI1aNBt1v9O+tY9/Kk=
Subject key identifier:   8B:AB:2A:98:0C:5C:4E:CC:40:46:0A:91:FD:0C:C0:CC:B1:68:06:A0
Authority key identifier: 12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Certificate issuer:       /CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
Certificate serial:       30A04B9DA891FE412DCAC4A6662969F3AC09BA98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
Manifest number:          C3
Signing time:             Tue 06 May 2025 18:16:55 +0000
Manifest this update:     Tue 06 May 2025 18:11:55 +0000
Manifest next update:     Wed 07 May 2025 20:24:55 +0000
Files and hashes:         1: 323830343a383832343a3a2f33322d3332203d3e20323732373533.roa (hash: Z1e00J+pj3xgDu7l+bTC4iqXuYLvr6iGTUsPSS+TEdc=)
                          2: 120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl (hash: /DAySAGPd3eXal6oTOl2pYR7HYnHNvtdJRuhbDooxhk=)
                          3: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: w0qqFPXS1q1NP5A7+SdrqOfHPoWk++ZYHhgDw9+ls14=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:4b:9d:a8:91:fe:41:2d:ca:c4:a6:66:29:69:f3:ac:09:ba:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Validity
            Not Before: May  6 18:11:55 2025 GMT
            Not After : May  7 20:24:55 2025 GMT
        Subject: CN=8BAB2A980C5C4ECC40460A91FD0CC0CCB16806A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:06:ff:29:64:ba:2b:4b:d3:0f:2a:ec:80:
                    70:2e:0c:3e:83:d7:a1:a3:75:8b:52:1f:95:77:c9:
                    f3:3f:52:52:bd:67:07:c2:24:a8:25:23:26:9e:1d:
                    54:95:b6:78:e9:86:3b:c4:bd:77:8a:5c:44:c3:6a:
                    a3:f6:67:d0:3c:2b:9e:6b:5a:08:3c:27:50:eb:c1:
                    c1:9f:6e:a5:0a:ca:f6:bd:35:20:6c:cd:f2:31:e5:
                    71:1e:8c:fa:68:b4:1a:0e:1e:cd:45:ef:2f:d2:18:
                    e9:07:29:94:5e:42:9a:e9:76:ed:fb:8e:b2:70:10:
                    57:99:10:d5:81:a5:f3:44:34:2f:c0:98:c3:c4:97:
                    83:3f:0a:44:43:08:8b:ed:99:08:b1:fe:63:a5:e3:
                    d2:d8:17:4e:a0:56:28:ca:3e:87:84:3d:83:97:0f:
                    7e:d5:6f:c5:b3:3b:1e:67:02:7c:9f:54:e2:83:8a:
                    e4:e3:37:96:58:2b:0a:0c:3d:2a:b9:e3:4a:c3:73:
                    f3:79:8a:28:58:57:d6:33:2a:9b:e1:16:f6:59:1e:
                    6a:0f:99:c7:07:65:e4:54:ec:30:e2:23:95:d8:8f:
                    06:37:cc:74:15:36:e0:29:43:aa:08:09:87:e9:63:
                    a9:47:53:7e:9d:ef:3a:94:8c:0f:72:8d:8d:1e:0a:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AB:2A:98:0C:5C:4E:CC:40:46:0A:91:FD:0C:C0:CC:B1:68:06:A0
            X509v3 Authority Key Identifier:
                keyid:12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:28:93:24:15:ec:2d:1a:89:6a:31:c2:71:93:68:7b:30:6a:
         7d:79:1c:07:bf:90:b8:60:67:81:3a:7f:0b:30:31:90:20:cd:
         af:9d:34:95:cb:fe:b5:6a:06:e2:a7:0a:b7:99:d1:57:67:a4:
         ce:22:fe:90:7f:c7:01:04:63:69:34:cc:f6:16:35:4a:44:11:
         e3:91:29:f0:cd:73:5c:be:23:71:e1:6f:5c:69:79:1b:a0:34:
         12:0c:10:b7:fb:04:2e:34:a4:50:58:58:9a:c1:39:ed:f6:ef:
         de:b8:fb:24:6a:80:28:5a:9c:b9:23:a6:38:34:63:98:b0:c3:
         4e:39:46:af:51:8e:b1:6e:8c:71:5f:9b:64:fb:4a:ee:d5:48:
         83:cf:9e:d0:8e:4d:74:4a:bf:05:8e:01:ff:8c:cc:43:a3:d6:
         80:27:e7:d2:a7:f7:82:55:c6:23:0d:6b:d2:ca:6c:06:f3:c4:
         69:3a:2f:0b:58:6a:32:d5:64:6c:ee:f1:c2:63:6e:1e:4a:35:
         21:fc:df:6f:61:30:db:c7:3b:64:6e:10:54:55:ba:e6:b4:05:
         02:b1:93:4d:9c:a8:d5:bc:23:33:9b:66:8b:47:5a:8b:79:ed:
         36:b7:5c:2f:bc:43:eb:58:08:fb:4d:17:1c:e8:18:9b:a6:ca:
         76:c2:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:05:11 2025 by rpki-client