Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft
File:                     D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft (raw, json)
Hash identifier:          u+yNxvNVJDskbTMpHmk5pmLx1oBnNNaqXv/d2wCptqU=
Subject key identifier:   93:55:1F:26:F5:A9:49:41:82:BD:3A:F8:9F:59:B5:7E:9B:C2:69:31
Authority key identifier: D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1
Certificate issuer:       /CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
Certificate serial:       2A0301341F0FB4AF8F5B880BFD60D2477C176247
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft
Manifest number:          E7
Signing time:             Tue 29 Apr 2025 11:06:19 +0000
Manifest this update:     Tue 29 Apr 2025 11:01:19 +0000
Manifest next update:     Wed 30 Apr 2025 12:37:19 +0000
Files and hashes:         1: 323830343a393137383a3a2f33322d3438203d3e20323734363433.roa (hash: 8Z0mEGf8ry/iktZG/M8sacsKDiNwKk/AAVvls14ThQY=)
                          2: D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl (hash: /NAIWe3DbRyZn4wJJPybmdw3SIDTO/Q4vKrXFSXia4I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl
                          rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 12:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:03:01:34:1f:0f:b4:af:8f:5b:88:0b:fd:60:d2:47:7c:17:62:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
        Validity
            Not Before: Apr 29 11:01:19 2025 GMT
            Not After : Apr 30 12:37:19 2025 GMT
        Subject: CN=93551F26F5A9494182BD3AF89F59B57E9BC26931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:ba:15:cc:2c:30:d1:04:59:5b:02:e4:6e:
                    9a:b0:a7:6b:21:38:97:64:b7:e3:b7:3b:42:8d:0e:
                    51:fc:dc:86:31:e5:2d:26:a6:e8:c4:39:07:dd:d6:
                    c7:7e:dd:48:9b:e0:cb:35:34:1b:e2:a0:ea:d9:95:
                    be:4c:1b:f5:7c:b7:80:ab:a2:48:e6:e1:e8:45:45:
                    b7:60:64:db:01:6e:e7:82:e9:e5:9f:c7:51:b7:13:
                    2b:ee:0c:c0:f8:ba:ea:8f:13:9a:06:32:0f:b6:c9:
                    f0:cb:ee:42:8e:39:97:7b:2c:97:25:fd:ce:df:7d:
                    78:ec:82:db:34:45:83:a1:73:ed:b9:50:c1:50:44:
                    8d:df:41:0f:3b:ca:ed:30:72:42:61:68:e3:c8:5a:
                    59:a3:ba:64:71:32:29:84:00:e3:61:74:81:89:1f:
                    23:c6:ee:49:3c:9b:d6:8a:7b:c8:eb:c5:5a:45:9c:
                    c2:36:b1:dc:8e:da:aa:6b:a0:6d:95:cb:ca:ce:ca:
                    43:18:3f:1a:15:90:71:2d:18:bf:0f:73:fa:5a:25:
                    92:f4:e0:82:76:0c:36:e2:1e:92:3d:83:2b:cc:5d:
                    20:41:29:b5:c8:b5:bd:dd:f1:a0:e3:c3:37:09:4f:
                    35:a3:7e:95:15:af:a1:37:cf:04:86:cd:82:73:e8:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:55:1F:26:F5:A9:49:41:82:BD:3A:F8:9F:59:B5:7E:9B:C2:69:31
            X509v3 Authority Key Identifier:
                keyid:D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:29:3d:f9:43:f7:07:ec:c9:d5:4b:20:5d:bf:6b:56:f1:5b:
         f9:84:09:9a:d4:2b:5b:19:07:41:d3:2a:f2:d2:d5:f5:d8:c7:
         3b:bb:49:ac:4e:df:b7:d2:20:8e:99:b8:c6:46:c7:31:6c:df:
         12:fa:51:3e:c5:04:7b:a1:cb:ec:1f:ad:a4:55:69:db:21:6e:
         d9:bd:d3:8a:83:6a:e0:b6:50:a8:4b:e5:72:fe:de:c8:6f:12:
         34:bd:9c:b0:6a:c1:74:86:86:b9:0a:3b:bc:53:ad:80:0f:23:
         30:4d:bd:62:ac:d1:b5:51:f9:9b:33:59:68:ce:90:e5:f2:d7:
         9f:6e:8c:18:75:64:e5:34:e0:40:8c:0b:dd:4e:61:d0:71:10:
         ba:8c:63:76:87:95:50:06:c5:22:03:18:90:71:df:0d:55:91:
         07:86:25:cd:29:81:90:3c:8e:7c:b7:90:06:9d:38:8d:00:dc:
         ad:d2:b0:ec:80:53:c3:e2:c7:0c:41:4c:9a:bd:3d:1b:d6:ba:
         bb:fa:e8:de:e7:5a:dd:16:f3:22:0a:1d:2c:30:4e:95:45:99:
         a7:fe:a9:eb:81:db:64:0d:f8:d1:dc:ae:ee:1c:53:c1:9e:90:
         0d:d1:8b:16:1c:42:23:13:9a:19:de:7b:08:95:af:43:4e:4a:
         e8:62:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:40:17 2025 by rpki-client