Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File:                     DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier:          q+4OEOcaZb3ibk8vS8+qMDUE0h9Jw+2PY4JVCBks48k=
Subject key identifier:   F4:9C:AD:6E:70:E1:9E:C7:59:A1:F5:4C:0F:20:C7:B3:06:D5:9E:A7
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer:       /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial:       394005EF314DB8545D15D15CD3ED73ADF91E8063
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number:          024A
Signing time:             Mon 28 Apr 2025 18:50:00 +0000
Manifest this update:     Mon 28 Apr 2025 18:45:00 +0000
Manifest next update:     Tue 29 Apr 2025 18:50:00 +0000
Files and hashes:         1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: BY3l2dkTzEdI+IKNADrf/ZUmMOLV8E4IX/fGcQm2M+I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
                          rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:40:05:ef:31:4d:b8:54:5d:15:d1:5c:d3:ed:73:ad:f9:1e:80:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
        Validity
            Not Before: Apr 28 18:45:00 2025 GMT
            Not After : May  5 18:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:9c:37:da:72:9e:c6:c2:b8:62:f3:fe:e2:
                    8f:48:40:25:84:a3:d5:b7:f0:af:f7:cf:59:d4:31:
                    6f:1e:47:11:a9:a9:82:9a:0d:af:c3:40:d0:76:52:
                    40:36:24:89:5c:01:8b:7d:da:31:7f:12:2d:ce:36:
                    51:ed:fc:52:8e:14:56:cf:73:5a:60:56:9c:2b:5a:
                    85:99:af:23:c4:dc:a7:99:e3:a4:0b:4f:d5:7e:15:
                    3d:31:cf:5a:b3:05:6d:66:34:d2:d3:5f:f9:67:02:
                    f2:02:28:81:8e:a8:f2:e6:c0:e2:f5:6b:8b:1b:3e:
                    b6:bd:11:0d:55:f3:1a:4d:bd:f6:7c:e5:8f:c4:7b:
                    23:ff:8d:72:40:95:51:a2:03:98:bb:59:f8:4c:af:
                    ea:40:47:3b:73:8e:01:46:55:ab:34:aa:28:a3:36:
                    28:d9:62:c8:d6:76:b3:c6:e5:a9:79:50:c8:00:92:
                    8d:1e:aa:4c:3b:f6:68:d8:8a:e1:c9:0e:5a:30:4d:
                    46:16:bb:61:3d:e6:2b:ce:44:93:a5:df:bb:40:fc:
                    26:f4:62:ff:57:3b:96:ce:55:c8:22:85:41:e1:a8:
                    a6:0d:ce:9c:76:3f:36:fd:2b:d9:8d:e3:2d:95:97:
                    17:51:66:b4:65:22:31:58:d7:33:08:bc:9d:4f:d5:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:AD:6E:70:E1:9E:C7:59:A1:F5:4C:0F:20:C7:B3:06:D5:9E:A7
            X509v3 Authority Key Identifier:
                keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:48:ca:95:61:ad:ff:ca:bf:6e:fa:66:7f:90:e2:14:2e:
         84:63:e3:35:87:28:87:3c:c3:99:b3:92:51:6e:d2:b0:83:41:
         c6:be:83:43:3d:f5:1c:f2:39:38:32:f6:eb:4f:99:0d:c5:e0:
         4c:a4:29:71:57:5f:08:36:4c:05:04:2c:96:f7:49:8b:3d:30:
         88:3a:f4:fb:7c:bd:64:d0:3d:94:f4:d2:6f:ac:a7:e7:e0:61:
         42:0e:db:69:78:e4:78:d2:2b:9e:4f:06:ee:e3:69:1d:3d:c7:
         5d:d5:e4:fe:ae:db:b6:f2:3a:08:8e:53:69:78:d3:d5:f2:91:
         20:e7:5d:5d:d9:c4:cb:d9:02:9d:36:0a:22:a5:d3:e7:8a:a9:
         e4:78:b3:82:a1:c3:91:e2:8f:e5:ee:53:90:20:30:06:d5:45:
         3f:d6:77:60:dd:ce:0c:45:71:c3:2c:89:78:bf:01:f2:8c:37:
         c4:11:cb:ff:64:53:f7:94:12:dc:2f:e3:bf:14:17:09:a8:a8:
         e8:5a:d3:53:ec:20:39:54:ef:95:89:7e:e6:15:fe:3a:a0:28:
         52:42:b8:ee:50:ef:1e:25:9a:0e:48:20:73:f0:d0:a4:67:ae:
         bb:6e:8c:19:f0:20:c0:cc:da:21:cc:ff:bd:ad:3b:e7:80:b4:
         c2:a8:63:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:42 2025 by rpki-client