Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          YV6VElOyEzpU3E6RwDTYm9xLnxU+JZ/VFo+iC/mp1Xg=
Subject key identifier:   A4:A2:B9:1B:63:A6:37:A5:B5:5A:03:5B:91:25:BF:42:86:F1:03:96
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       0F9C3A380D8BE64FA475B479AEB40CFCEFA58332
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          0249
Signing time:             Sun 27 Apr 2025 17:20:00 +0000
Manifest this update:     Sun 27 Apr 2025 17:15:00 +0000
Manifest next update:     Mon 28 Apr 2025 17:20:00 +0000
Files and hashes:         1: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: dz/MCtW3rBapS8hK8ly8rWcjuSXj/t5nbqVeg5+vj14=)
                          2: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: oNPkvC2kiJtI8SLZA1odsnzww2fBpAZM5EF0yWcQMvE=)
                          3: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: 8+JtJjhklA3uqaZjFHHnNo1M5VDbEIP6+icz5NqhxqQ=)
                          4: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: pbwYRIWi0MXfhviv8TcN1mc7IBh1CLuXnSFyKDkzuGc=)
                          5: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: xwGxu1U7oQhSlpF3DYRNNvw99/+UNE+456HE5VBl2z8=)
                          6: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: XejAMsa+nT7Lc9iBkq5hSaNpgpMwOIpH3ELnPM+ghko=)
                          7: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: glnr6FIyBGC6ziE36OlekUYHdj2v5dJGngrA4lX4UhI=)
                          8: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: 6BuPUgfKpHcFm1gU2ZoPZWo0BluF7+XrXWc0lJXQ8jc=)
                          9: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: FoQ/IO9SEFDuBieIahSxKXYWkaCfB6CISWkhjQjpsGI=)
                          10: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: +p11T1w1ZTqcXl8lcZRWptYkDbaLdKtMijNbnoE+vpw=)
                          11: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: kdpl89h/TABYCnhNOWbMWfCziyzd7IfJTHB/9SjMZS8=)
                          12: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: 1pvWnP2paHDAyKfHiKL9d1uveEQtBulIq0v7tfs7hCE=)
                          13: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: 7XDU4d5fB042lTecdMhV4TRNSgQR/5XsBNWZO9phz+U=)
                          14: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: w9uLMZ0BYMtoHGkbOxDSvOiUfnwjhfzkh8OM4G9DjPE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 17:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9c:3a:38:0d:8b:e6:4f:a4:75:b4:79:ae:b4:0c:fc:ef:a5:83:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Apr 27 17:15:00 2025 GMT
            Not After : May  4 17:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:76:0a:32:b6:b4:ad:8c:bf:92:78:2b:3c:
                    ba:5c:ea:9a:34:ed:ba:23:19:ae:a8:ef:3d:be:69:
                    48:f5:fc:d2:b8:15:8a:4e:bc:f0:94:2a:23:4e:41:
                    b9:49:43:1c:6e:d9:58:74:a3:f9:49:94:66:28:e2:
                    62:b9:f4:fd:90:5f:39:67:4c:8a:4c:e2:33:03:b9:
                    8c:47:80:26:2f:9a:ed:3e:4f:d2:fd:86:5a:4c:20:
                    c7:cb:a7:89:8e:44:34:00:c1:45:38:4f:86:65:50:
                    24:32:34:10:ae:06:60:fb:b0:68:a5:85:31:93:41:
                    d7:a1:5e:1d:90:33:57:05:38:6e:92:5b:9c:0c:5c:
                    b5:e5:3d:53:a3:13:a6:17:3b:22:98:bf:18:5c:34:
                    90:61:74:8a:6d:c5:93:18:f3:8e:ca:82:24:63:bf:
                    ac:69:3e:d8:de:d3:d2:ce:91:c4:53:6f:88:ba:77:
                    b3:e3:54:0f:c9:ff:00:f7:43:29:ac:1b:92:cf:06:
                    60:43:69:60:ee:8b:88:a8:f5:1e:84:48:ed:cc:17:
                    1b:ba:f5:d5:f4:c4:70:cc:bb:35:71:23:97:00:e5:
                    0c:e8:c3:b6:ea:ae:21:01:03:21:a4:b0:65:17:f7:
                    30:66:05:12:79:b5:2b:b5:da:9f:81:80:bc:4f:30:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A2:B9:1B:63:A6:37:A5:B5:5A:03:5B:91:25:BF:42:86:F1:03:96
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:52:2d:2f:2d:9d:61:df:84:4d:25:8a:9f:ba:8d:4e:38:
         1d:ca:a0:94:78:8a:2d:ec:6b:96:57:0d:e4:70:a9:31:e5:b7:
         c0:7e:56:89:6f:72:68:5d:b5:7f:1b:51:d4:17:1c:16:61:0c:
         37:be:6b:78:eb:16:b9:b8:6f:78:1f:42:4a:5b:cb:d2:fb:fa:
         0b:d5:f3:12:17:44:e0:e4:56:c1:7a:4e:88:18:00:b6:f2:41:
         00:ec:6c:01:94:dd:4f:86:b2:f9:99:9c:1b:f2:22:93:d2:eb:
         68:b6:70:41:11:34:e4:89:75:25:df:9d:7e:ae:4e:46:d9:18:
         b0:98:61:f3:a4:f5:43:a0:9d:ef:3f:46:4e:4c:cd:f8:fc:b7:
         9d:9e:80:be:c2:b3:f2:22:dd:55:fc:55:65:a7:0a:48:49:40:
         04:83:c4:cb:8f:93:fc:6e:4a:80:ba:12:56:73:d2:f2:b5:c7:
         82:e3:6e:9b:19:e0:32:27:b3:b0:73:5d:9e:b6:72:20:df:b1:
         17:78:cf:e5:86:a1:fb:20:ad:46:e9:23:b5:ff:4f:b8:d7:47:
         ae:93:27:50:77:9d:58:50:a2:8f:59:98:c4:46:4d:38:22:12:
         85:9b:0d:34:ba:9d:9d:1f:19:7e:eb:82:42:bc:a7:ce:49:7b:
         12:e0:ec:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:12:41 2025 by rpki-client