Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
File:                     47F932452F6354876C2CDBACA9AD34D90A502586.mft (raw, json)
Hash identifier:          PC5vH3R1+beNhYqCLfCCVnXumcWxCsmRR4BfrHof6Ao=
Subject key identifier:   4B:56:E9:69:3D:06:99:F4:D9:0F:72:6F:9B:57:DE:03:CC:A5:A2:32
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       39F8EB393FB98DDD910A3ECA93825078823453BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
Manifest number:          01D1
Signing time:             Mon 28 Apr 2025 00:56:11 +0000
Manifest this update:     Mon 28 Apr 2025 00:51:11 +0000
Manifest next update:     Tue 29 Apr 2025 00:59:11 +0000
Files and hashes:         1: 3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa (hash: mttYoz3DThPN4Y0Tx9h49Jwopxzn+e9I7aY49/+TZr8=)
                          2: 323830343a3832633a3a2f33322d3336203d3e20323632333535.roa (hash: rL94s/lIih8apzD5jSM4GoVdRZpvy5LqwQ0Wo9KyL2o=)
                          3: 3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa (hash: 6JMe7KDo8un7dKz+j7gx0Y7jJrBnCXdm9rkrC6rmfts=)
                          4: 47F932452F6354876C2CDBACA9AD34D90A502586.crl (hash: zrj3HdH4GOfo2hd0cRE11LWUdDY4qnQE5VB279v0LUs=)
                          5: 3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa (hash: NXwOW7NVGh3xshCp15HvoOs5lQreHUVWOyZNFZbFoPk=)
                          6: 3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (hash: qLqXLy0B76Jo01L+djXxQH/j9EOmUP1xCJozGccZfFQ=)
                          7: 3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa (hash: j5Wuh+CUJlrv2XRmx6zfB9fB/F4HPmSDT+5IuOJI2eY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 00:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:eb:39:3f:b9:8d:dd:91:0a:3e:ca:93:82:50:78:82:34:53:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: Apr 28 00:51:11 2025 GMT
            Not After : Apr 29 00:59:11 2025 GMT
        Subject: CN=4B56E9693D0699F4D90F726F9B57DE03CCA5A232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:1f:25:4b:62:78:59:0e:a7:a4:3b:3e:3d:
                    fe:4e:32:a8:dc:d2:71:ee:68:45:34:5d:c0:13:e7:
                    90:72:a3:33:bd:ab:95:82:91:57:04:81:77:b3:22:
                    0e:54:ac:ab:78:ef:3d:ab:f6:51:4a:12:8d:1d:bc:
                    e9:b0:35:a1:d0:76:32:88:a2:4f:35:2e:4a:9c:b3:
                    2f:7e:04:83:a7:94:d0:3d:58:16:a6:10:bd:dd:b5:
                    34:05:1e:19:55:65:d0:1f:84:e4:a0:15:ac:94:07:
                    fb:d4:dc:8d:74:86:48:d4:72:a4:04:42:10:a1:00:
                    b1:c7:50:5a:9d:a7:76:39:9d:78:26:fc:dd:c3:80:
                    be:cc:ca:6b:8c:64:53:4b:7e:ee:44:04:43:c9:52:
                    f8:a0:49:b5:1c:48:2b:27:14:7f:1d:54:ed:12:f5:
                    6e:8d:af:43:4c:6a:8d:b3:76:8f:eb:c3:e2:0f:48:
                    73:1d:19:6c:61:34:03:c7:c7:cc:52:77:79:06:72:
                    aa:b2:ad:d2:a9:7f:0a:a4:33:f5:78:3e:a4:38:59:
                    fd:32:f9:3b:70:6f:94:48:dc:4a:e8:2f:9f:97:53:
                    72:91:b2:56:67:a5:28:1c:a9:b1:7c:32:2c:87:6f:
                    62:ad:0d:bc:70:8f:4b:94:e3:95:f4:68:89:b6:a0:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:E9:69:3D:06:99:F4:D9:0F:72:6F:9B:57:DE:03:CC:A5:A2:32
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e3:e9:68:87:25:e2:e7:dc:7e:07:9a:fe:7a:46:c1:11:31:
         95:77:ca:31:fc:60:7e:62:e7:da:8e:d6:b3:62:b8:d9:d7:ab:
         0a:e8:ef:4d:63:ad:ef:6d:26:a9:48:f4:92:c4:95:2c:b7:e2:
         20:fa:39:ec:38:96:f1:45:38:9b:3f:ce:02:0c:1e:89:46:ca:
         c0:75:36:16:13:20:56:ca:8b:6d:d7:55:ce:76:92:af:b5:8b:
         58:ea:4c:0a:21:37:b9:09:1c:ef:18:43:b1:93:cf:aa:49:7c:
         2d:5d:34:5e:1e:70:a6:ec:65:bb:32:09:c2:7a:e8:10:5c:9d:
         ff:c2:fd:fd:24:00:eb:1d:d3:36:33:7d:88:33:b6:83:d9:b7:
         7e:0c:22:1a:60:78:ba:62:a9:d1:3f:25:36:ee:50:55:d9:f1:
         f6:2f:75:2a:77:37:cd:6b:dc:48:4f:a0:f7:0f:82:e1:7f:f4:
         9a:2a:6a:f5:2d:0d:b4:f0:ff:63:92:c1:b7:53:61:49:16:92:
         41:2c:6e:fe:6f:aa:0b:71:3a:bb:54:d5:1e:f1:02:28:97:5b:
         32:bb:9f:5b:9a:95:58:9e:cd:f6:c5:7a:b0:26:99:bf:80:5e:
         fe:6c:3c:a3:f9:c8:71:1a:b3:75:1b:cf:1e:24:26:f4:3d:22:
         8e:e6:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:19:58 2025 by rpki-client