Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
File:                     1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft (raw, json)
Hash identifier:          UI87shFjBf0liHjGauHDuypTDKhoMNc5Db/6mPz6Cp8=
Subject key identifier:   0D:F1:C8:D5:80:EA:6E:BB:8F:C8:DE:E2:15:5A:8D:8A:3A:04:80:34
Authority key identifier: 10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54
Certificate issuer:       /CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
Certificate serial:       4B2819300774695AE28F85CC959BDB8EEF1C2ACE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
Manifest number:          D3
Signing time:             Fri 02 May 2025 03:06:06 +0000
Manifest this update:     Fri 02 May 2025 03:01:06 +0000
Manifest next update:     Sat 03 May 2025 04:11:06 +0000
Files and hashes:         1: 323830343a366537633a3a2f33342d3334203d3e20323730363030.roa (hash: BGtXCISFZVhWUIYIt2ka3rJFHVMFADqTvX7YlxqLTdU=)
                          2: 323830343a366537633a3a2f33322d3332203d3e20323730363030.roa (hash: rk7yaiLzOCgpkFI4xCwgaAaS1f3PcJ6M3ui+VruST8Q=)
                          3: 323830343a366537633a383030303a3a2f33342d3334203d3e20323730363030.roa (hash: kKMca+xQFr7aGHsBuGtbBrAo3UV7TC9mxlzFp1WoYQE=)
                          4: 323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa (hash: RPEWD60k2ispA1+g5U9pD64lRJAlRqQ/qP942eLPoRY=)
                          5: 1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl (hash: F6ZWqmq8pC95Gi65G5fBemXz4qD7nrNreVtuWXPuUcY=)
                          6: 323830343a366537633a3a2f33332d3333203d3e20323730363030.roa (hash: vdT4YQjI40m3vbXPfkv3ZWNaAenqRdKgUziOQwJkgvc=)
                          7: 323830343a366537633a343030303a3a2f33342d3334203d3e20323730363030.roa (hash: zct78Fd9ZGiQUn2BmCjuhonQZlFbjbuubr/SGjRmWSI=)
                          8: 323830343a366537633a633030303a3a2f33342d3334203d3e20323730363030.roa (hash: 2uxt1gO3hsIE23ewMF3OrB5MhRO2/zM5LS9QJ7xdlwI=)
                          9: 3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa (hash: 6UI3TIz9VPzpAGr+Ag4PvshShHblNbC2569vpC9Ghso=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:28:19:30:07:74:69:5a:e2:8f:85:cc:95:9b:db:8e:ef:1c:2a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
        Validity
            Not Before: May  2 03:01:06 2025 GMT
            Not After : May  3 04:11:06 2025 GMT
        Subject: CN=0DF1C8D580EA6EBB8FC8DEE2155A8D8A3A048034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:72:68:4e:6c:e9:07:d6:3e:50:5d:2a:97:6c:
                    8b:18:de:85:13:bc:42:fc:44:b3:1d:d9:88:2e:d2:
                    74:4c:90:0e:82:c1:ca:dc:37:fb:d6:fd:be:4b:57:
                    08:7d:90:6c:7d:16:4b:ab:20:b0:54:81:88:71:a1:
                    28:b9:81:2d:aa:c0:cb:2b:ae:bf:11:11:9a:fa:34:
                    b1:ff:27:92:0a:57:15:a7:c7:6c:52:74:30:ad:e9:
                    54:e3:d1:df:0b:da:a0:06:52:38:5e:a6:f4:0d:1a:
                    73:79:c6:d4:5f:35:d4:06:7d:d1:2c:a2:f0:bf:84:
                    c1:f1:2c:74:af:30:5f:84:76:32:01:25:41:ae:d6:
                    c9:67:2b:71:80:5b:9b:38:63:4b:62:18:03:84:82:
                    80:73:b0:ca:55:3f:74:44:58:39:7e:6b:23:57:27:
                    9f:d0:57:99:07:05:9c:1c:a4:ba:82:13:dd:18:55:
                    2d:1c:00:51:c5:21:73:02:dd:4a:0b:1d:7d:c0:0e:
                    81:4a:94:02:83:d5:87:3e:f3:89:00:0e:88:9c:18:
                    fb:79:4e:01:73:3c:a8:38:e6:8d:b8:51:eb:11:a3:
                    bb:d5:69:1c:a1:aa:a8:9f:b0:a8:7b:81:ee:36:70:
                    93:d2:e9:70:36:9c:46:ae:0b:15:d0:fd:bb:b9:da:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F1:C8:D5:80:EA:6E:BB:8F:C8:DE:E2:15:5A:8D:8A:3A:04:80:34
            X509v3 Authority Key Identifier:
                keyid:10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:0b:78:cf:57:8f:c6:9c:7e:15:01:b8:63:c1:ed:69:2c:
         bc:cb:ef:1b:b5:1a:c1:b5:36:dc:f8:f5:49:3d:52:56:b4:20:
         62:0a:dc:8f:c7:f2:98:3e:e0:2d:eb:6c:96:33:91:20:60:b4:
         3f:02:b1:8b:f6:5e:e2:d1:dd:f7:df:af:db:f2:7f:6d:b8:a5:
         f4:2e:e1:7a:a5:6f:f8:15:4f:38:1b:b0:fe:0a:f5:2c:e1:31:
         1f:8f:b0:32:1e:bf:c1:19:a2:f0:d2:ff:99:2e:d1:81:66:14:
         e8:f8:4a:34:a0:71:56:1d:51:46:38:44:71:3f:4e:29:88:b4:
         e5:4b:61:35:77:68:e7:66:c5:29:56:3c:a5:98:b9:45:09:9e:
         da:ee:ae:78:21:48:0e:10:65:8d:03:e9:bf:e1:c0:fe:2a:5b:
         7b:79:d3:ad:1e:83:f5:3b:26:bc:68:76:75:cc:6b:de:aa:dd:
         46:3e:49:4a:db:5e:4e:be:10:bb:c0:30:0c:f5:32:39:4a:77:
         6f:b3:d5:90:09:67:4c:eb:84:e9:d0:47:8a:33:00:78:f6:bb:
         69:40:54:40:b6:8c:cb:da:ae:a1:b0:c3:2b:a3:1b:66:27:35:
         94:27:b4:a6:f9:75:81:05:da:ff:45:05:02:01:49:18:a2:26:
         63:aa:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:02:14 2025 by rpki-client