Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
File:                     4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json)
Hash identifier:          U60MvK5oL3U4o/sKcnq5c5R7v+KdTdBIzh4br5fu2JY=
Subject key identifier:   3D:CF:DD:F6:D4:B4:12:B9:46:28:15:A6:96:BB:A0:92:CC:EE:43:84
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       6881E05CC3C4E870AD53AE7D9482CE93B7BDA4FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
Manifest number:          1B
Signing time:             Fri 02 May 2025 20:18:31 +0000
Manifest this update:     Fri 02 May 2025 20:13:31 +0000
Manifest next update:     Sat 03 May 2025 23:49:31 +0000
Files and hashes:         1: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: 5MnHP1gwm6VSUR7iHYTvcw72QzSqthXM1z6v3zFxW5g=)
                          2: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: +9UMKRQb62nfWVbJjUXoIbzJnVbSCkv3ezAEzrPr2mM=)
                          3: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 2YCS6Yb/9D0/n8xix6Bzd5N6XCOxnBclmTpI31jfQuw=)
                          4: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: KlULxHMxyBYgHOWDvr82ep/Pt0PmGQBYgR+pKvkMFlE=)
                          5: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: gplvuyLjGUhF+i6ssDirDxIMyE9T2g6roXbZ9yzSMSc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 23:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:81:e0:5c:c3:c4:e8:70:ad:53:ae:7d:94:82:ce:93:b7:bd:a4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: May  2 20:13:31 2025 GMT
            Not After : May  3 23:49:31 2025 GMT
        Subject: CN=3DCFDDF6D4B412B9462815A696BBA092CCEE4384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:b4:f6:fe:83:10:2b:03:6e:6f:64:1d:89:
                    dc:e0:25:e2:53:13:85:08:bc:fb:ec:73:5d:bf:f8:
                    4b:57:2c:f1:2e:ca:3a:81:61:d1:26:a6:3f:4f:aa:
                    f3:2d:a4:65:7c:72:b6:af:54:84:9a:68:13:83:ff:
                    81:39:b3:69:97:01:c6:19:04:db:23:2f:83:48:57:
                    d0:c6:5c:47:62:c8:df:7d:87:9d:82:56:ce:15:f4:
                    bc:60:82:0a:7d:6c:c6:fd:b9:93:14:10:c9:97:2e:
                    ef:78:b9:7f:dc:1f:6c:e8:f0:af:c0:f7:a0:08:55:
                    8c:f3:07:53:83:8d:b9:19:12:1f:a8:78:05:09:ae:
                    c4:7d:ff:46:cf:a7:3c:15:63:86:e0:ad:c9:be:9b:
                    2c:af:63:21:f1:dc:b4:b8:9d:95:78:9b:d5:67:c4:
                    2d:8c:f9:f6:f7:85:0b:53:43:72:df:05:cd:d8:3a:
                    7b:fa:45:4e:0e:52:26:a1:fc:7b:b4:81:03:12:38:
                    37:ee:8b:f0:ab:5f:bb:5c:bd:1b:da:6b:a9:d3:aa:
                    76:d0:83:3c:9b:09:d5:6a:dd:f0:bd:55:3b:48:ca:
                    1e:a3:46:29:af:bf:4d:3e:5a:51:f4:a4:2d:33:9d:
                    1d:c1:d3:73:66:70:38:b7:21:b5:fc:2f:35:ab:3b:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CF:DD:F6:D4:B4:12:B9:46:28:15:A6:96:BB:A0:92:CC:EE:43:84
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:60:ad:3d:e2:e8:c4:df:28:08:f0:d7:b6:65:50:b4:e5:68:
         ec:83:42:40:55:7a:89:dd:41:e8:8b:a9:95:8e:22:e2:4a:26:
         91:49:0c:5a:88:af:3d:47:f6:e9:71:7e:a1:8a:ae:2f:b8:4e:
         42:6b:76:66:a8:2f:df:64:3e:dd:7c:63:f6:88:c4:2a:9c:2e:
         7c:db:92:35:0c:7c:67:4d:d6:1d:4c:92:84:c4:82:a8:bf:76:
         3a:83:e7:ed:74:b3:87:dc:43:15:50:a2:e1:16:30:59:bb:17:
         ce:a0:c3:26:86:c5:cf:3f:c6:fc:de:da:7b:f4:e8:0d:6c:0d:
         aa:f0:e5:c0:b8:39:52:b1:c9:2b:eb:51:cb:3c:e9:bd:e6:ac:
         04:37:cf:46:78:34:46:e4:4c:3f:fe:ba:45:9e:5b:bf:04:51:
         29:87:06:56:29:e9:e5:41:72:6d:bc:98:2a:2e:08:89:f3:fd:
         78:2a:fd:f0:3e:f3:43:69:c8:a0:79:9d:a5:6e:6a:f5:57:47:
         b9:da:c4:93:3b:39:93:f5:4c:4d:88:c7:47:3e:e1:2a:67:1e:
         73:a3:5f:d6:3d:f8:49:26:a0:a9:de:1d:a4:95:42:b5:06:f0:
         77:63:89:23:ac:37:ec:cb:2d:f1:a3:7b:56:2a:28:55:7d:49:
         91:42:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:11:53 2025 by rpki-client