Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.mft
File:                     7CEDCD9593A5E7CA526559FAF067452EEAC12B83.mft (raw, json)
Hash identifier:          RBP6kt7AAcj99ak53Osi+SQeUSOlwzpss3H14WVhrwA=
Subject key identifier:   B3:3C:10:42:5D:9B:08:3A:1F:B4:C0:8D:82:29:AC:72:D9:DC:BB:DA
Authority key identifier: 7C:ED:CD:95:93:A5:E7:CA:52:65:59:FA:F0:67:45:2E:EA:C1:2B:83
Certificate issuer:       /CN=7CEDCD9593A5E7CA526559FAF067452EEAC12B83
Certificate serial:       6203FBE8231A515CE0EDA48F01BF68BA0A208AE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.mft
Manifest number:          0200
Signing time:             Sun 27 Apr 2025 10:26:42 +0000
Manifest this update:     Sun 27 Apr 2025 10:21:42 +0000
Manifest next update:     Mon 28 Apr 2025 13:57:42 +0000
Files and hashes:         1: 323830343a386365343a3a2f33322d313238203d3e20323733333231.roa (hash: /qVNO9UTdbYPZP9P+sqzFbEslyU6c9Z7pk9eMxHXdbg=)
                          2: 7CEDCD9593A5E7CA526559FAF067452EEAC12B83.crl (hash: Y1f8bBk43Vctv2L2sOiiii0vm8D9jbJykVF+UrJb23c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.crl
                          rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:fb:e8:23:1a:51:5c:e0:ed:a4:8f:01:bf:68:ba:0a:20:8a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CEDCD9593A5E7CA526559FAF067452EEAC12B83
        Validity
            Not Before: Apr 27 10:21:42 2025 GMT
            Not After : Apr 28 13:57:42 2025 GMT
        Subject: CN=B33C10425D9B083A1FB4C08D8229AC72D9DCBBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:8f:19:a3:69:e0:8e:2b:a5:9d:2c:1c:b7:
                    d1:64:b6:a9:49:54:d3:76:18:71:bf:87:5e:bf:bd:
                    44:83:e4:0f:d5:6f:02:67:60:17:4d:c3:f1:ca:da:
                    73:f7:d8:18:4a:4b:b0:5b:c2:37:81:5c:2c:dd:56:
                    f7:65:4c:e7:59:bd:51:c4:0a:1d:47:43:f6:6c:49:
                    eb:04:8b:a4:f9:3f:86:6b:06:e7:c6:4c:6b:85:c1:
                    b0:98:55:28:7e:34:eb:ce:af:3d:ac:60:a5:0c:eb:
                    92:c2:3f:f1:ff:e7:33:7c:53:e8:73:16:ba:d2:f2:
                    33:ac:a7:aa:59:9d:85:a9:f8:74:43:df:09:26:d0:
                    f3:d3:c0:9f:19:f4:a2:1d:2e:0b:96:bd:31:4f:da:
                    92:d8:0a:68:64:17:54:a3:80:bb:8b:1d:a5:a7:ea:
                    2c:d8:52:45:67:4c:4f:8f:cd:f3:4f:7b:33:a8:ba:
                    4f:96:c6:71:2a:42:82:57:e6:89:a5:42:bf:35:b1:
                    60:49:ce:dc:51:02:4b:d5:01:13:11:48:d7:24:4c:
                    c8:37:3d:73:e4:5a:0d:e6:c7:40:14:db:24:bf:0b:
                    50:d6:7c:b8:37:7c:dc:46:08:a6:bc:ab:1c:b9:11:
                    a9:8d:6c:4b:19:f8:b5:66:95:41:d8:4e:f8:5f:d3:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3C:10:42:5D:9B:08:3A:1F:B4:C0:8D:82:29:AC:72:D9:DC:BB:DA
            X509v3 Authority Key Identifier:
                keyid:7C:ED:CD:95:93:A5:E7:CA:52:65:59:FA:F0:67:45:2E:EA:C1:2B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:3c:2d:43:9f:2d:d5:1e:c0:fe:1a:20:c1:e9:d7:ae:ef:
         e3:7f:fd:9e:88:40:3c:73:cd:70:a2:10:2e:89:2f:99:ee:f4:
         88:d8:bf:dc:48:a7:70:22:71:6e:89:74:27:77:0b:fe:0a:d5:
         f5:d2:d2:27:45:7f:5a:85:f4:59:f7:e7:3d:41:49:b2:84:7c:
         a6:aa:82:77:c8:67:4d:f4:c0:8b:d7:4b:ab:4b:4f:5d:0f:ff:
         61:04:95:0e:1d:61:f9:8f:b9:a1:50:df:e6:11:87:92:2e:73:
         2c:7a:8c:d9:09:41:dc:aa:70:d9:d5:e0:1a:b7:a7:0a:a3:a3:
         06:4f:40:c1:82:45:49:b9:f9:cb:cb:b2:77:d8:0e:4a:f6:f9:
         0c:47:d7:d9:fd:7d:5b:0a:58:44:15:22:45:f9:3f:58:21:1d:
         78:4e:96:0b:be:c5:85:81:3c:c3:78:e6:49:43:18:6d:cb:b0:
         fd:cf:6d:43:3f:6a:53:88:2f:5c:f0:05:9f:16:64:d7:25:f7:
         14:5e:2e:34:03:34:36:36:26:28:82:b0:b4:90:50:27:c5:46:
         12:6f:cc:f6:4f:ed:78:5d:37:7e:ed:57:66:4a:94:c3:0e:13:
         74:a8:2f:e2:d4:dd:86:0f:23:80:06:30:11:7f:4b:08:5a:e6:
         0c:ed:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:25:03 2025 by rpki-client