Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json)
Hash identifier:          XhmmTYLtM1NXxBQk89PmHP4gQ6oORFRdpkNqxGpcxtA=
Subject key identifier:   FB:7D:96:EA:26:A7:6A:94:C2:0A:43:27:93:BE:D9:B2:58:83:4D:52
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       35912884C918D4A5061098D07E76F9E17511EAF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
Manifest number:          0186
Signing time:             Fri 02 May 2025 20:36:32 +0000
Manifest this update:     Fri 02 May 2025 20:31:32 +0000
Manifest next update:     Sat 03 May 2025 23:58:32 +0000
Files and hashes:         1: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: bBA4YJnUAawjGiuamZaJBjW4CIb/F/ARVaXg+y15IiE=)
                          2: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: 3T38WmaPigjTs7HUnDKKZcXq7Ta/SJaivIO1RwpB0aI=)
                          3: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: ikb/eeov6bRBVVWN56xhzBR63CMjpkK522BDfSEzQU4=)
                          4: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 4ExtZvI8MqUvFVTsDf2h2l9l2Z/3J8appcSPENQekV4=)
                          5: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: ESPKyBn9k2Tj8mx8/vctfD0aZVU4OT6BupSSD8qOqhg=)
                          6: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: znoCnr6e93GYcQiATLXvvDwtHsiWt69jotK53/EWZEc=)
                          7: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: NyhFyeCKsyzw9N/AuH1BDhS76oUWXd9+od5LyOG1qmk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 23:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:91:28:84:c9:18:d4:a5:06:10:98:d0:7e:76:f9:e1:75:11:ea:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: May  2 20:31:32 2025 GMT
            Not After : May  3 23:58:32 2025 GMT
        Subject: CN=FB7D96EA26A76A94C20A432793BED9B258834D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:31:0d:36:8f:29:11:d2:19:3f:42:c6:48:
                    64:88:29:e3:fb:b6:9d:d4:0a:eb:ce:53:7a:71:60:
                    9e:32:81:ac:39:67:8e:66:79:8a:3a:a2:9d:c5:8f:
                    2d:d4:42:77:0c:39:39:fb:82:c1:d0:dc:d1:cb:22:
                    16:ae:d4:51:15:4e:80:00:a0:10:63:ee:8b:e8:6b:
                    df:48:ca:3c:b9:12:d3:50:a5:52:84:04:0c:69:6c:
                    8d:3a:77:eb:6e:53:2d:fa:3b:cc:a7:97:58:e8:63:
                    cf:d4:c0:16:25:b4:a6:19:2c:9b:65:e0:57:b9:ba:
                    4f:20:6e:5c:42:22:dc:19:20:39:b1:35:75:e9:56:
                    ca:f3:e9:ab:5b:e6:b8:d6:30:f4:16:56:06:af:fd:
                    ae:82:ed:fa:3e:80:d3:40:9a:bb:09:6b:84:75:a8:
                    ed:9a:10:9a:24:ca:84:b6:de:9b:96:c1:08:ac:ed:
                    d2:bf:3c:e8:e8:33:73:f2:e2:da:89:ca:40:dc:9b:
                    42:e2:49:d0:69:ed:e8:17:d1:a5:f8:26:09:ae:42:
                    0a:75:6d:3f:fb:67:99:c0:4b:cc:61:fd:02:42:0a:
                    86:28:3b:3b:b7:9c:38:68:8a:80:a5:3e:cc:ba:ee:
                    72:d7:19:70:f4:b6:55:5c:04:48:e4:44:52:e1:3d:
                    9c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:96:EA:26:A7:6A:94:C2:0A:43:27:93:BE:D9:B2:58:83:4D:52
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:64:8c:a3:03:d7:dd:27:57:8f:9e:58:2b:61:fe:7e:88:
         04:f2:76:a7:e1:b8:eb:06:a0:d7:2b:06:86:78:e0:c7:6a:11:
         25:d5:aa:bc:ed:7f:dd:b6:63:d0:0d:b2:6f:22:5a:29:fe:0d:
         c3:49:eb:4e:8e:ae:40:47:33:20:80:8d:eb:67:13:12:2f:48:
         04:e2:69:04:bd:9e:ee:a4:7d:2a:74:18:26:fd:5a:1d:0d:bb:
         9f:1d:68:ec:99:52:a2:d7:6f:fc:8e:0a:dc:5c:63:2d:52:49:
         0c:fe:54:42:9e:da:8c:1c:a5:59:62:b7:68:62:0e:7a:e5:f5:
         40:c9:c9:20:d8:50:61:45:71:8f:ad:70:01:ee:b5:3f:2d:e3:
         2f:5f:66:30:c2:fd:66:54:a3:d6:3e:f5:9f:b0:32:83:79:44:
         d9:d8:d4:b0:e0:ca:69:3f:4e:20:39:43:07:c8:d5:02:5d:ae:
         38:31:51:ba:2f:d3:ec:0f:6c:7a:39:d2:d0:93:b1:9e:dd:0f:
         01:9d:0a:3f:05:32:10:5b:02:9a:56:42:39:52:32:53:91:8a:
         2a:ee:01:0a:80:93:21:b6:1b:b2:8d:9c:da:eb:69:55:b8:8a:
         29:ab:af:70:b7:3e:a2:f3:d1:22:42:23:c7:76:2b:07:b0:6a:
         c1:65:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:28:09 2025 by rpki-client