Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
File:                     D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json)
Hash identifier:          xFpjKCcJMfHK1ClAiGyK5Un07GPeOXifAmphSezz2UA=
Subject key identifier:   97:CA:A9:5C:28:2C:10:C7:D9:6E:FA:FD:3B:C5:38:1E:B5:E9:D8:E7
Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA
Certificate issuer:       /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
Certificate serial:       4C1C89FC7F925A4F82448F1608437399F581E05E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
Manifest number:          01FD
Signing time:             Thu 01 May 2025 08:28:11 +0000
Manifest this update:     Thu 01 May 2025 08:23:09 +0000
Manifest next update:     Fri 02 May 2025 09:02:09 +0000
Files and hashes:         1: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=)
                          2: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: VzpQkXp/qhzApIPBUst9M+mVh5cSJTZNx38TBemlQxM=)
                          3: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=)
                          4: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl
                          rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 09:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1c:89:fc:7f:92:5a:4f:82:44:8f:16:08:43:73:99:f5:81:e0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
        Validity
            Not Before: May  1 08:23:09 2025 GMT
            Not After : May  2 09:02:09 2025 GMT
        Subject: CN=97CAA95C282C10C7D96EFAFD3BC5381EB5E9D8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:93:e2:d7:b3:cf:4a:4d:1c:d7:d2:80:22:
                    40:ca:ae:e8:9e:f2:92:59:5a:5e:70:07:9b:32:b1:
                    68:07:36:66:ce:eb:c1:05:01:6e:eb:75:82:35:50:
                    e5:6e:73:19:52:88:50:1f:48:1b:ba:55:2c:56:79:
                    cb:ae:45:08:cd:99:ab:01:19:56:f8:c6:a1:16:f9:
                    fd:60:f1:e1:e3:33:cb:41:a9:fb:68:4b:33:a5:f2:
                    22:d0:bf:93:2a:b5:b8:74:68:fd:b4:70:0d:d4:e4:
                    72:21:1a:51:59:70:35:2a:45:2f:09:02:80:fa:e8:
                    75:4f:a1:48:1b:3c:88:b6:71:c4:29:93:95:7a:06:
                    3e:c6:8f:5f:d1:de:dc:92:e0:51:ad:3f:69:35:9d:
                    1c:76:17:17:6e:e5:1e:66:b3:88:fb:98:07:b0:71:
                    78:26:84:d1:87:2c:8b:3f:b3:78:1b:80:89:a9:28:
                    b1:8a:48:9f:51:db:02:69:8a:9a:1e:a6:61:21:f1:
                    8b:f5:39:91:34:df:fb:bd:d1:4a:12:82:fd:3b:02:
                    88:c8:f5:42:59:3c:35:cd:2e:25:61:a1:bd:14:df:
                    aa:38:fb:3a:b0:51:0e:74:68:81:26:a8:aa:1b:57:
                    75:8f:5b:35:79:0f:cd:76:ae:0f:a3:13:37:07:df:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CA:A9:5C:28:2C:10:C7:D9:6E:FA:FD:3B:C5:38:1E:B5:E9:D8:E7
            X509v3 Authority Key Identifier:
                keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6f:32:13:4c:9a:37:14:ee:5b:77:32:7f:02:9a:58:05:4a:
         c2:b0:65:f7:92:e9:ff:61:6f:8e:50:71:0a:bc:d8:c3:81:d2:
         2f:5c:93:52:f8:3e:a5:54:0b:ea:77:06:d9:61:96:43:58:e0:
         e0:b0:1e:90:15:cb:66:09:7c:7e:04:65:d4:0e:62:fe:d3:aa:
         d1:c7:2c:b6:c9:16:f8:87:6f:cb:a0:2d:04:fc:a2:c5:47:ec:
         e6:cc:f2:fa:3e:1f:ac:64:7a:8a:e3:2c:f2:90:54:ff:92:39:
         1b:8a:c4:d2:bd:dc:c4:c7:66:25:41:e2:cf:39:24:90:bb:9d:
         f4:83:11:71:ed:36:89:81:90:93:02:22:1d:46:9d:2c:6c:09:
         a0:63:6d:44:94:e1:ca:9c:bc:61:92:ac:1a:09:83:43:55:e1:
         91:15:af:ea:63:43:b7:ce:42:4e:59:27:40:89:76:cd:fd:ff:
         bd:ac:37:27:5e:37:87:84:98:85:1b:ec:90:9e:c2:8d:53:58:
         5c:22:d2:6e:97:3f:ee:0a:d8:65:dd:da:97:2c:38:2b:0f:d2:
         b8:90:10:6f:a1:cd:da:4a:26:2a:be:5a:ad:7e:1a:3a:49:a2:
         1a:0b:ac:74:72:1b:a5:3d:5a:24:d2:54:65:8a:88:83:bc:8b:
         a6:43:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:39:53 2025 by rpki-client