Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
File:                     4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft (raw, json)
Hash identifier:          Qwok39mT25RQlvqn/CoOE+OMBNtagGwr4TTLSwPf5eU=
Subject key identifier:   45:87:50:64:CD:92:42:E2:13:80:D0:E9:DB:4B:7C:0B:A8:4F:05:D9
Authority key identifier: 4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49
Certificate issuer:       /CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
Certificate serial:       2789DF7077B8EEED7E56AD554C0447B04CC08DC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
Manifest number:          020C
Signing time:             Tue 29 Apr 2025 10:03:13 +0000
Manifest this update:     Tue 29 Apr 2025 09:58:13 +0000
Manifest next update:     Wed 30 Apr 2025 10:16:13 +0000
Files and hashes:         1: 34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (hash: qPJDf0ZzOHhjuG0zLopodnYM0KBTlwwMbPfxeuoZ2to=)
                          2: 4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl (hash: M6rUniTpg2q/Jkqq005YyUb0/aUXLXN0BQX6Lzu8WHo=)
                          3: 323830343a343338383a3a2f33322d3438203d3e20323637353736.roa (hash: cZd/ssKML83qdXJo2RFt0hxOAlYnrkcYP1rxyHfPV10=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl
                          rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 10:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:89:df:70:77:b8:ee:ed:7e:56:ad:55:4c:04:47:b0:4c:c0:8d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
        Validity
            Not Before: Apr 29 09:58:13 2025 GMT
            Not After : Apr 30 10:16:13 2025 GMT
        Subject: CN=45875064CD9242E21380D0E9DB4B7C0BA84F05D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:00:f7:ff:cd:5e:4b:78:a9:0e:17:e0:65:
                    fc:56:20:b3:42:ca:8c:7e:74:19:aa:0d:b7:72:fe:
                    b7:8d:4c:2f:26:1a:cf:e1:57:c0:d6:e5:51:9d:f9:
                    2c:2b:72:b6:50:6b:86:06:98:ce:f9:83:97:f9:b8:
                    40:f4:10:9a:89:f9:b8:23:62:8f:27:4d:58:af:a8:
                    37:0e:0e:f3:b5:47:4a:db:15:ef:70:eb:fd:1d:3f:
                    3f:cf:cc:a3:c6:eb:b2:2c:9f:a8:9e:ac:57:92:f7:
                    35:42:28:64:df:c8:cd:17:ab:50:d0:cd:a0:c1:b7:
                    4c:c2:3f:5b:41:10:c6:d8:e5:08:db:85:1f:1d:c8:
                    c4:39:42:ae:18:66:cc:ce:bb:59:b5:fe:52:aa:3f:
                    d6:f6:09:8e:ea:ef:80:f7:86:0d:22:0c:19:13:c7:
                    1a:48:bf:62:3e:53:a1:a4:02:cf:fe:98:55:9b:85:
                    4e:01:26:fb:b4:75:85:3f:a5:ed:db:fc:d4:c0:95:
                    3c:ea:90:73:17:49:d0:62:25:3d:89:a4:48:cf:16:
                    0b:0f:55:8b:c8:fd:a9:c9:10:52:84:57:21:f6:d0:
                    52:7d:da:42:b3:58:56:15:ad:06:cd:53:c5:dd:c7:
                    5e:39:c1:34:9d:4b:99:91:87:0a:df:29:4f:90:e4:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:87:50:64:CD:92:42:E2:13:80:D0:E9:DB:4B:7C:0B:A8:4F:05:D9
            X509v3 Authority Key Identifier:
                keyid:4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:50:bf:db:89:d3:f3:b3:e2:bb:ac:8a:a8:b7:fd:7e:08:5b:
         46:ca:44:4d:02:d6:a8:e7:f6:d3:86:80:4c:a3:45:9c:52:72:
         4a:28:66:e4:13:5c:37:df:f3:8a:b5:b1:92:32:c9:16:6f:93:
         f7:39:1f:cb:09:4f:68:a8:ad:d8:b3:02:f9:a9:12:59:1b:c2:
         b0:76:4d:70:0d:df:47:b0:5e:e0:9d:aa:3f:f0:90:f6:4b:53:
         64:46:44:f3:29:b8:6e:5b:24:0f:eb:e0:18:0d:ae:11:a5:a5:
         66:65:5e:6a:e8:8c:75:11:09:ec:b0:86:dc:8d:2a:1e:26:82:
         1a:5a:4b:84:ea:95:84:80:c4:48:6f:7b:35:f4:da:d1:d6:37:
         c7:98:9d:0a:42:34:0f:bf:96:99:62:63:0e:c6:8f:eb:47:7b:
         fe:73:a8:5a:bd:2e:20:c9:30:52:36:cd:3d:cf:c8:53:99:0c:
         c2:c6:7b:d9:e5:74:bd:54:63:6c:cf:32:9a:bd:53:23:79:d7:
         a1:7c:2e:af:6f:44:03:9c:71:98:59:96:06:e1:02:fe:19:6e:
         d6:2c:14:9a:c8:00:c3:89:28:4d:53:a7:a6:28:31:fc:a7:e8:
         b5:5e:9a:f3:eb:d0:df:3a:14:1f:54:e1:7e:81:f6:95:8c:3b:
         05:2b:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:24 2025 by rpki-client