Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.mft
File:                     D47E48647B940216D8BE8BE824CDD566DE29F188.mft (raw, json)
Hash identifier:          TySLQ7Jr1NxuVR0s9p31B63UmTL1UDefYCe57qPLvpA=
Subject key identifier:   41:C5:45:61:83:C0:9A:FE:A7:2E:9C:75:6F:C2:7D:5A:C3:26:25:5F
Authority key identifier: D4:7E:48:64:7B:94:02:16:D8:BE:8B:E8:24:CD:D5:66:DE:29:F1:88
Certificate issuer:       /CN=D47E48647B940216D8BE8BE824CDD566DE29F188
Certificate serial:       062448DC52CFD4ECD506D5FC5B240CFA12EE3EE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.mft
Manifest number:          021A
Signing time:             Fri 02 May 2025 10:58:09 +0000
Manifest this update:     Fri 02 May 2025 10:53:09 +0000
Manifest next update:     Sat 03 May 2025 12:10:09 +0000
Files and hashes:         1: D47E48647B940216D8BE8BE824CDD566DE29F188.crl (hash: 0Q51OT75aE8QWGkJuLrJc6qvwe0XrEeLToC267vUa08=)
                          2: 323830343a326236383a3a2f33322d3335203d3e20323635313532.roa (hash: kPdSyaymuWpwbmGOg8iIOXgUUdMwcHpStoKME9Q4WB4=)
                          3: 3134332e3235352e3133322e302f32322d3332203d3e20323635313532.roa (hash: aPkD3g8+be+BOT69ewmJ2US6K0FcQkuyElWyD1xIlC8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.crl
                          rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 12:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:48:dc:52:cf:d4:ec:d5:06:d5:fc:5b:24:0c:fa:12:ee:3e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D47E48647B940216D8BE8BE824CDD566DE29F188
        Validity
            Not Before: May  2 10:53:09 2025 GMT
            Not After : May  3 12:10:09 2025 GMT
        Subject: CN=41C5456183C09AFEA72E9C756FC27D5AC326255F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:eb:cc:6c:c4:ce:67:a6:f5:37:ca:53:7b:
                    b3:de:e7:ec:e5:24:fc:2a:6c:65:b7:e8:68:1d:5f:
                    80:4c:ac:bb:c0:8b:ee:80:47:48:5d:ec:7e:59:71:
                    38:d5:c4:a4:b7:a1:3d:d3:fb:7e:1b:39:87:7b:4c:
                    75:ec:d4:97:15:7a:da:8c:66:50:e9:20:2a:44:ec:
                    25:64:5a:7f:40:b9:d3:da:9e:1f:82:d6:e3:1b:ed:
                    7a:6e:f6:4a:2e:8f:35:a7:9c:7d:6e:6f:d6:3c:81:
                    24:ff:1d:df:cc:db:d6:70:19:75:03:42:e6:2f:8f:
                    81:f9:bd:39:a0:74:2a:60:de:e2:a4:7e:fc:e7:70:
                    62:8d:c5:c4:94:b9:da:06:23:f3:13:f3:72:70:84:
                    dd:a7:73:ba:a4:51:c3:c0:ab:d1:06:06:8b:34:f7:
                    f3:b0:12:6d:0d:54:21:44:41:e8:b6:73:3f:3e:89:
                    f6:b1:6d:6a:4b:92:ac:fc:44:49:14:e0:1d:c0:58:
                    b9:7f:a2:27:d6:91:3d:ef:f6:59:fa:ba:ff:9e:e6:
                    d5:3d:8b:fa:0d:bb:7c:96:bf:a0:5a:46:25:76:de:
                    31:23:85:b4:dd:0f:15:7d:f4:b7:36:09:28:d5:99:
                    66:ae:de:9c:d6:c6:f6:e9:04:23:40:87:0b:35:44:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:45:61:83:C0:9A:FE:A7:2E:9C:75:6F:C2:7D:5A:C3:26:25:5F
            X509v3 Authority Key Identifier:
                keyid:D4:7E:48:64:7B:94:02:16:D8:BE:8B:E8:24:CD:D5:66:DE:29:F1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:f8:66:d4:b8:f0:bb:94:db:02:54:e8:59:c6:30:1e:0c:
         04:50:ae:84:71:92:6b:f6:22:ba:60:31:2c:3c:cc:a3:69:b1:
         b9:85:87:8a:b2:20:12:24:7f:ce:81:70:d4:fe:69:1e:0e:20:
         e0:50:25:1c:1c:c1:f5:c2:4c:eb:25:75:ae:96:27:9d:52:db:
         5c:18:b2:3e:6c:86:10:09:0d:58:d9:30:62:9d:92:55:0b:b0:
         08:6d:f1:b8:87:64:16:46:10:fe:f5:0a:d4:b6:94:19:37:c6:
         d0:9b:4f:43:27:01:77:a6:d1:7c:87:71:34:c6:12:77:1a:e8:
         fc:1a:ae:61:d1:e6:21:c9:90:fd:6b:b5:8c:e8:94:fa:70:86:
         44:24:ca:80:f0:98:b2:0b:19:a6:08:45:93:4f:ff:7f:05:05:
         88:13:04:4e:7e:07:5e:80:b8:29:be:17:74:12:7e:6f:b8:80:
         d4:20:27:2a:61:75:35:41:3e:d2:46:19:e7:9d:42:30:b8:4a:
         a3:8e:80:e8:08:ee:9f:0a:ea:f5:e2:aa:72:e7:1c:c8:2b:da:
         a6:29:f0:a7:d5:29:97:af:4d:09:6b:ed:4a:e0:4c:c5:4b:ea:
         f7:af:c8:69:52:3d:5e:a6:f9:48:9c:c3:c2:05:0a:97:f1:78:
         93:cd:76:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBiRI3FLP1OzVBtX8WyQM+hLuPuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ3RTQ4NjQ3Qjk0MDIxNkQ4QkU4QkU4MjRDREQ1NjZE
RTI5RjE4ODAeFw0yNTA1MDIxMDUzMDlaFw0yNTA1MDMxMjEwMDlaMDMxMTAvBgNV
BAMTKDQxQzU0NTYxODNDMDlBRkVBNzJFOUM3NTZGQzI3RDVBQzMyNjI1NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcevMbMTOZ6b1N8pTe7Pe5+zl
JPwqbGW36GgdX4BMrLvAi+6AR0hd7H5ZcTjVxKS3oT3T+34bOYd7THXs1JcVetqM
ZlDpICpE7CVkWn9AudPanh+C1uMb7Xpu9koujzWnnH1ub9Y8gST/Hd/M29ZwGXUD
QuYvj4H5vTmgdCpg3uKkfvzncGKNxcSUudoGI/MT83JwhN2nc7qkUcPAq9EGBos0
9/OwEm0NVCFEQei2cz8+ifaxbWpLkqz8REkU4B3AWLl/oifWkT3v9ln6uv+e5tU9
i/oNu3yWv6BaRiV23jEjhbTdDxV99Lc2CSjVmWau3pzWxvbpBCNAhws1RM2FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQcVFYYPAmv6nLpx1b8J9WsMmJV8wHwYDVR0j
BBgwFoAU1H5IZHuUAhbYvovoJM3VZt4p8YgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0h5YmtpOG1BbkZVUHpZQ01xZXRIcmVYTTJZZnFleW81OHFQc1lRQ1VQ
dEIvMS9ENDdFNDg2NDdCOTQwMjE2RDhCRThCRTgyNENERDU2NkRFMjlGMTg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0N0U0ODY0N0I5NDAyMTZE
OEJFOEJFODI0Q0RENTY2REUyOUYxODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0h5YmtpOG1BbkZVUHpZQ01xZXRIcmVYTTJZZnFleW81OHFQc1lRQ1VQdEIvMS9E
NDdFNDg2NDdCOTQwMjE2RDhCRThCRTgyNENERDU2NkRFMjlGMTg4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV534ZtS48LuU2wJU6FnGMB4MBFCuhHGSa/YiumAxLDzMo2mxuYWHirIgEiR/
zoFw1P5pHg4g4FAlHBzB9cJM6yV1rpYnnVLbXBiyPmyGEAkNWNkwYp2SVQuwCG3x
uIdkFkYQ/vUK1LaUGTfG0JtPQycBd6bRfIdxNMYSdxro/BquYdHmIcmQ/Wu1jOiU
+nCGRCTKgPCYsgsZpghFk0//fwUFiBMETn4HXoC4Kb4XdBJ+b7iA1CAnKmF1NUE+
0kYZ551CMLhKo46A6Ajunwrq9eKqcuccyCvapinwp9Upl69NCWvtSuBMxUvq96/I
aVI9Xqb5SJzDwgUKl/F4k8125w==
-----END CERTIFICATE-----
Generated at Fri May 2 14:53:46 2025 by rpki-client