Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
File:                     640539F45452C2299C340AFF511D40CB7EEAA212.mft (raw, json)
Hash identifier:          VjJKBy5Gd6mlHAAa9m3uGGMe0My3xJvyiSZyS4N6cbk=
Subject key identifier:   72:FE:37:64:3D:A4:A5:4B:91:65:72:82:8A:12:78:80:15:E6:D2:4A
Authority key identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12
Certificate issuer:       /CN=640539F45452C2299C340AFF511D40CB7EEAA212
Certificate serial:       3BCD504BBDAFE5D50AA9DFE89F8F3C34023EAE93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
Manifest number:          015A
Signing time:             Tue 29 Apr 2025 01:15:31 +0000
Manifest this update:     Tue 29 Apr 2025 01:10:31 +0000
Manifest next update:     Wed 30 Apr 2025 03:09:31 +0000
Files and hashes:         1: 323830343a3230303a3a2f33322d3438203d3e203238313837.roa (hash: TB3g/RxruL2e08w8165cbGqgcYLG+bKOkoYUs5Owj04=)
                          2: 3138372e36302e3132382e302f32302d3234203d3e203238313837.roa (hash: fZrHJen/XMgbewLibsCX4tJTjqigcW4omTCt0YEDf5I=)
                          3: 3138392e38392e3230382e302f32302d3234203d3e203238313837.roa (hash: WgJ3SJzEueQ1tDadY8IjSlwQ3ZFcQiKFNAcJRAYr9zU=)
                          4: 640539F45452C2299C340AFF511D40CB7EEAA212.crl (hash: f20l+3uPC3GiNN7byZhN+yI3iBFyi7Clrn8oX08sAxM=)
                          5: 3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa (hash: Xa9HIA8Jv/2gORSVrETuSk/Zvgj9Cd/kyjOmtJRdjsY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl
                          rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 03:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:50:4b:bd:af:e5:d5:0a:a9:df:e8:9f:8f:3c:34:02:3e:ae:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640539F45452C2299C340AFF511D40CB7EEAA212
        Validity
            Not Before: Apr 29 01:10:31 2025 GMT
            Not After : Apr 30 03:09:31 2025 GMT
        Subject: CN=72FE37643DA4A54B916572828A12788015E6D24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:6c:60:6f:07:87:1d:cb:e7:66:b8:ce:81:
                    e8:4b:b1:00:b3:b5:b3:b3:1d:c1:1b:4c:0e:3d:8c:
                    49:b1:ef:cf:e9:48:cc:bd:a6:cb:d8:28:a1:aa:47:
                    e7:df:55:1e:16:8e:ae:36:78:43:50:51:da:67:d9:
                    48:af:91:32:6c:42:05:96:d3:73:a8:7d:a2:47:e1:
                    f0:e9:89:47:72:99:13:83:1d:4c:81:82:1d:d1:6b:
                    d2:4a:d4:68:99:42:56:f0:f5:5c:05:cf:88:73:ab:
                    21:02:fe:b4:30:a6:06:53:62:06:c9:45:27:b9:03:
                    70:68:8f:c1:dc:53:01:dd:65:52:c4:73:38:9a:72:
                    5b:7f:28:88:25:bb:da:eb:f8:1f:8e:6b:7a:34:6c:
                    92:fb:41:68:77:69:12:c1:27:d5:d7:c5:3d:b4:49:
                    03:2b:41:49:2e:32:e0:c3:ba:11:bf:8d:67:eb:f1:
                    67:50:07:e7:f0:d6:01:4a:01:54:e4:bf:01:b3:5d:
                    dc:1c:61:9a:ea:76:9e:4d:34:b5:a8:1c:61:be:46:
                    e9:8f:ed:a3:ef:c3:fd:17:26:3e:8d:03:a6:8d:8a:
                    a7:b5:71:09:91:16:1a:f2:47:6e:e7:18:9f:e4:4f:
                    e3:61:34:cb:96:f4:d4:74:9f:ea:25:57:82:a1:c7:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FE:37:64:3D:A4:A5:4B:91:65:72:82:8A:12:78:80:15:E6:D2:4A
            X509v3 Authority Key Identifier:
                keyid:64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:74:ff:db:2c:e7:a2:75:39:53:06:1d:f4:ee:eb:ea:f9:
         06:3f:7c:05:b3:cf:73:37:d0:54:5e:cb:83:06:d2:30:97:f3:
         78:cf:73:39:d2:46:6f:8c:8e:0a:b8:3a:d4:db:69:c0:9d:a0:
         b4:ec:28:71:53:9a:66:e1:c2:a3:69:f1:b1:d0:88:52:c4:8d:
         a1:d1:99:57:7e:31:2c:a9:23:70:f5:c1:ff:82:7a:7d:53:d4:
         d9:f0:92:76:57:c9:79:52:eb:0c:d9:1c:c7:53:41:8f:d4:6d:
         d2:8e:5f:ae:94:dd:8d:4d:3b:53:e1:e9:1e:7b:ff:3d:1c:39:
         78:02:a8:7a:26:80:e9:e1:a3:91:0b:17:82:a7:47:97:c5:e5:
         cc:9e:b8:46:c0:74:b2:ca:3d:e9:bd:fa:6a:14:c6:55:e4:fd:
         28:ea:a2:27:d2:31:f5:26:c1:11:76:52:65:79:fb:ca:9c:64:
         13:d4:2c:fa:86:f7:fa:93:cc:84:e3:38:b9:5c:b2:e4:4e:0d:
         41:04:4c:56:e7:f7:e3:92:20:7d:5d:15:05:20:8c:28:c3:ce:
         23:cf:a2:a5:f9:31:61:7e:47:f3:bb:b7:01:36:98:72:bf:f7:
         05:36:54:83:a6:1b:1d:f0:1a:14:2e:14:dc:33:d9:b0:cd:9b:
         d3:23:bc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:54:53 2025 by rpki-client