Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
File:                     524E9D1652F660663CB5548E20AE99DA463B2CFA.mft (raw, json)
Hash identifier:          V1MSJz7m5uJBuVjrwQjctGYYliA/Y7JWXLRwXjTuBBc=
Subject key identifier:   A8:AC:CC:83:C7:F9:BC:16:A5:20:59:07:E9:C7:98:9B:F3:81:8A:B3
Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA
Certificate issuer:       /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
Certificate serial:       5B3ADC3564DC8EC7885CFCF65EB9795C6DE1C222
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
Manifest number:          020D
Signing time:             Fri 02 May 2025 11:11:06 +0000
Manifest this update:     Fri 02 May 2025 11:06:06 +0000
Manifest next update:     Sat 03 May 2025 12:08:06 +0000
Files and hashes:         1: 3137372e33382e3133362e302f32312d3234203d3e203532393437.roa (hash: JijRPy8SmbfnFZXadwP7en6JPxdoQ821D8R+qekqhwQ=)
                          2: 323830343a316466343a3a2f33322d3332203d3e203532393437.roa (hash: UO8SzCxNOncH1EKpVftEgIdnjtAcaAKS1Rk8+iLSf6w=)
                          3: 3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (hash: MPHO4BWPGCLq71dUFZ81qcr0K606XlOebKG3tsXzu6M=)
                          4: 524E9D1652F660663CB5548E20AE99DA463B2CFA.crl (hash: fxdca+5fmBpBtHjDxhGV06JVb9tElrrLHF8ecdJXXus=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3a:dc:35:64:dc:8e:c7:88:5c:fc:f6:5e:b9:79:5c:6d:e1:c2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
        Validity
            Not Before: May  2 11:06:06 2025 GMT
            Not After : May  3 12:08:06 2025 GMT
        Subject: CN=A8ACCC83C7F9BC16A5205907E9C7989BF3818AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:e7:92:e1:4e:b8:86:f0:47:6d:40:48:2f:
                    7f:47:69:91:e0:cd:9e:0e:4e:e9:bd:2a:5c:9b:c1:
                    85:e4:dc:e1:f5:3a:97:27:70:67:f2:b7:fb:b0:c2:
                    b0:cb:e7:0b:84:13:cf:34:b1:c4:19:17:cf:b6:1a:
                    d6:3e:00:ca:01:16:71:d2:aa:45:42:d4:3f:09:4f:
                    a4:5d:8d:30:7b:a5:3a:97:7e:e8:e2:b4:dc:43:c8:
                    dc:3d:88:a2:b1:e3:95:3b:de:82:a6:78:62:d5:ae:
                    06:db:33:f8:d6:82:88:4b:01:0e:4b:27:0e:ae:a3:
                    b2:4e:f7:1c:63:11:0d:21:39:60:1b:40:12:25:08:
                    f2:58:b8:f7:4f:f7:ec:70:48:05:bc:12:7c:ae:1e:
                    72:c1:0e:e3:7f:70:b0:25:9e:0e:37:42:81:07:cc:
                    d3:d2:70:23:d2:a3:fd:88:41:37:3b:bf:46:3b:2a:
                    d8:7d:aa:7a:15:7c:79:8a:30:4c:56:08:be:03:9d:
                    2d:fd:1c:0a:7f:65:0c:f3:69:d0:ce:97:50:54:33:
                    21:38:9d:19:b4:30:99:28:df:fe:c5:7d:5a:b4:e0:
                    50:05:1c:39:a1:d5:b8:5c:cc:9a:4f:7b:cf:64:57:
                    3e:22:38:3c:cd:a9:ed:29:27:d8:79:56:8d:5a:ae:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AC:CC:83:C7:F9:BC:16:A5:20:59:07:E9:C7:98:9B:F3:81:8A:B3
            X509v3 Authority Key Identifier:
                keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:df:83:66:58:ec:b5:9c:d3:7b:52:25:b3:9a:73:61:50:cb:
         ce:d0:42:c0:66:f7:99:1d:47:83:58:04:57:0e:46:da:a8:ed:
         20:bb:78:e1:f3:62:55:8d:6d:77:88:55:45:50:ae:91:91:46:
         b8:28:ce:97:e5:ff:57:af:f9:14:34:b9:41:38:20:05:cd:f2:
         96:49:da:fd:61:3d:05:76:4d:14:0f:c8:92:b6:6e:2e:b5:ee:
         d0:ed:98:73:43:d7:d3:53:10:f2:1a:c5:28:14:10:d2:a1:26:
         bf:c6:62:a1:82:bc:44:3a:53:74:5d:c4:b5:03:8b:96:1f:e1:
         5c:43:8e:09:33:b5:14:d2:33:ba:e0:5f:c3:53:8d:b0:42:fa:
         63:64:bd:bf:8d:e8:f6:d8:9e:c4:54:3c:89:3c:be:72:bb:d8:
         56:34:a8:19:5d:40:f8:64:73:64:4c:dd:5e:0c:ae:c5:63:e5:
         d9:e8:65:04:d2:07:f6:86:cc:44:50:2c:8c:37:84:ab:7f:9e:
         3b:7d:e7:48:ba:f0:10:e1:40:d9:1b:a4:f2:c6:fa:9a:ad:e8:
         45:20:ec:d6:31:b2:bd:14:5d:8f:ec:57:7c:cc:ce:bf:16:b2:
         b5:74:1e:05:a5:4c:75:c6:bd:47:db:18:81:fa:6e:2c:20:d3:
         8a:33:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:19:34 2025 by rpki-client