Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
File:                     D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft (raw, json)
Hash identifier:          SSBSOZAboVBwFZeZRL1zLV3m7TswYSyIrtmq4nmvrmA=
Subject key identifier:   EA:58:B2:6D:CF:F2:EA:EF:78:CF:B1:F2:80:73:AA:66:DC:F1:4D:1B
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       2D4A1955979192C64496DDC95ED4A28A7D9F5B64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
Manifest number:          021A
Signing time:             Sat 03 May 2025 14:34:35 +0000
Manifest this update:     Sat 03 May 2025 14:29:35 +0000
Manifest next update:     Sun 04 May 2025 16:46:35 +0000
Files and hashes:         1: 323830343a326439343a3a2f33322d3334203d3e20323635323930.roa (hash: kWy+KFGUaAZrPS5L1uMSNk7nabZrJmPBwwbdk2M3D+k=)
                          2: D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl (hash: 7VkSsY59S1GCT8tgMxkX3lGuEFOHbRjXrvF+4xz6P5g=)
                          3: 3136382e39302e3230362e302f32332d3234203d3e20323635323930.roa (hash: 5Kz92E7dmaGiDvn5OQF7P48AohtTTO3u/CgOdAlXJOk=)
                          4: 3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa (hash: sOqje+t86gHWEq91Nahf6waLG/Bt67tz7Ty3X7VmiO4=)
                          5: 323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa (hash: pVjdYkbfOeXKElM1eDSGlFmdTQYSiNTkXdOOeJ1wb3o=)
                          6: 3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (hash: ZU9KvqVGm8P3mgQ79bZVqEr6CzwEvUL9dvZSWmDkOZI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 16:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4a:19:55:97:91:92:c6:44:96:dd:c9:5e:d4:a2:8a:7d:9f:5b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: May  3 14:29:35 2025 GMT
            Not After : May  4 16:46:35 2025 GMT
        Subject: CN=EA58B26DCFF2EAEF78CFB1F28073AA66DCF14D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:e6:49:7b:49:9e:d7:7c:b1:56:11:1c:1f:
                    3f:60:1b:14:b0:02:b5:3b:94:6c:df:4a:4a:be:08:
                    47:b9:7f:ed:44:72:4e:0d:ae:e3:79:9f:09:ed:1d:
                    f1:50:48:e3:bb:42:83:08:de:d9:51:b1:bd:49:f1:
                    20:7a:ad:73:c7:7c:38:ed:75:9a:8f:a4:4b:80:56:
                    c1:0b:21:e3:43:32:69:f7:b4:9f:8a:fa:10:50:fe:
                    89:a0:90:9c:78:da:f2:82:03:82:74:a4:93:ed:08:
                    f2:3f:7c:d1:13:99:48:9b:66:b2:11:a8:f6:48:aa:
                    52:a1:da:02:e8:59:6f:0c:b7:5f:23:18:40:5e:6d:
                    6e:28:6f:e9:9d:9d:1f:36:ff:5c:5f:d7:1e:52:60:
                    25:e5:d1:ee:94:01:97:ff:b1:5f:f0:89:20:92:f2:
                    9c:87:f0:ef:61:c7:6a:a7:07:d1:83:92:68:dc:ac:
                    bc:d6:29:eb:c0:c7:1c:c7:8c:69:e4:66:6e:e6:a6:
                    e8:5c:d5:1b:0a:e2:4d:33:bb:a6:ca:35:ec:e5:1c:
                    32:90:eb:2b:62:f4:e9:a3:ee:38:9b:a5:fb:03:c7:
                    38:54:41:ec:74:ca:56:b5:56:c6:98:55:a2:d1:8c:
                    fd:62:2a:a7:9c:10:55:80:18:92:e7:17:4a:59:34:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:58:B2:6D:CF:F2:EA:EF:78:CF:B1:F2:80:73:AA:66:DC:F1:4D:1B
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6b:05:9e:4a:a9:b2:6c:8d:98:8c:bd:6f:6a:53:7e:06:dc:
         18:81:a9:23:a9:20:19:ae:c2:b7:d7:9e:0c:0f:d3:56:4e:fb:
         97:ad:9e:1a:2e:d4:50:0c:98:b2:e7:ad:c8:63:6e:ab:25:64:
         b4:f0:da:2e:51:1f:70:cc:84:9b:e6:44:ee:97:e8:ef:91:6f:
         c5:82:59:ac:3c:31:6b:6b:96:21:8f:5b:cc:a2:3b:d2:1f:a0:
         cc:96:45:ec:c3:28:20:fb:14:45:2a:8e:8b:7c:2e:d1:73:bb:
         86:1f:36:51:a7:e2:86:66:dd:a8:20:b6:c8:a8:0b:91:66:ab:
         00:83:61:3e:8d:99:75:eb:ee:ca:fb:db:7f:55:10:ce:85:a4:
         c3:fc:c6:fc:76:21:b8:6f:b1:bb:eb:d6:a9:ab:fb:90:58:96:
         f0:a7:85:fc:6b:ba:6c:6b:8e:ef:17:cf:c9:66:fc:df:47:8f:
         2d:40:b6:28:5d:80:35:eb:35:61:10:f8:a2:e5:b5:1a:4c:2e:
         5b:46:d1:d6:56:64:38:42:a5:66:43:8f:60:ff:f9:3d:7e:b0:
         08:c5:32:03:0b:f3:ca:36:e3:05:c1:d6:30:1d:b9:74:ee:d6:
         9e:78:7c:65:5a:c1:32:4d:73:01:b8:d9:7b:da:75:aa:cf:d2:
         eb:ad:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:18:32 2025 by rpki-client