Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
File:                     DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json)
Hash identifier:          qmKl1l6kyEnqdMInTbLWiRLkgSsl31nzfD35oEKEto0=
Subject key identifier:   0D:C2:4E:05:DA:24:29:63:D9:EE:49:E9:93:D3:D5:D6:C7:85:D6:F6
Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF
Certificate issuer:       /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
Certificate serial:       6B1539F189927BD8B3E34D281CFA7B9720699E53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
Manifest number:          014F
Signing time:             Tue 01 Jul 2025 07:37:04 +0000
Manifest this update:     Tue 01 Jul 2025 07:32:04 +0000
Manifest next update:     Wed 02 Jul 2025 10:24:04 +0000
Files and hashes:         1: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: O/jwDHlKXrBgWxaTrSi/jUgvxEXMkOQBMaMtYpwwY2U=)
                          2: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: 3amzwyg3JtmpHjLsGYT1Ylihai+j4QHw4Iv2HmnWt0k=)
                          3: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: Us/qMtaBQT31jKRuL2J9Elh5GZUUnTD2YjkN5CM1wrA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl
                          rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 10:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:15:39:f1:89:92:7b:d8:b3:e3:4d:28:1c:fa:7b:97:20:69:9e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
        Validity
            Not Before: Jul  1 07:32:04 2025 GMT
            Not After : Jul  2 10:24:04 2025 GMT
        Subject: CN=0DC24E05DA242963D9EE49E993D3D5D6C785D6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:d5:af:cc:19:a7:a1:05:73:96:57:ce:ac:
                    59:7d:9c:9f:ca:de:a2:87:ff:43:aa:43:d6:2f:e8:
                    85:6d:07:98:b3:fa:b4:bf:83:8d:fe:7f:15:2c:0b:
                    17:1f:36:98:79:ed:1f:18:75:e3:21:cd:91:75:88:
                    ac:c0:55:80:de:e6:ea:30:2e:11:d1:18:f7:80:0c:
                    fb:e6:a6:b1:5c:8a:c4:c5:7f:56:db:32:c6:bd:70:
                    b9:87:5f:23:f2:a2:4e:4b:00:67:2e:c9:ad:97:f9:
                    a4:4a:b1:1a:0b:84:3b:38:35:6c:b0:bf:3f:ad:dc:
                    93:a6:94:49:85:d7:5d:fa:82:fd:b6:a0:b9:7a:44:
                    99:fd:f1:05:da:cf:4a:b1:c2:94:1b:bb:3e:d1:11:
                    9b:79:9a:19:08:c5:9c:3e:cb:16:cc:d3:b3:89:c0:
                    ee:6b:a9:d5:65:4a:ce:2b:c9:1e:c7:8e:9b:a5:54:
                    35:97:2d:67:7c:19:99:42:a2:99:02:c8:b9:46:b1:
                    5f:7d:4e:21:51:06:ab:3b:aa:b6:7f:12:42:da:34:
                    2a:f4:23:f0:29:79:46:51:e9:f5:59:d5:d7:fc:8a:
                    b9:d1:71:54:62:60:2f:51:97:be:fd:7a:cf:9e:8f:
                    95:34:7c:c3:13:30:f7:ff:fe:b9:05:20:c6:ee:89:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:4E:05:DA:24:29:63:D9:EE:49:E9:93:D3:D5:D6:C7:85:D6:F6
            X509v3 Authority Key Identifier:
                keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:2a:a5:99:ae:9e:bc:6f:fc:ae:e9:05:f0:34:6f:6d:b6:
         0b:1e:40:3d:60:30:a1:56:e4:46:44:c8:0b:6a:9e:37:6f:d6:
         db:a8:55:42:4d:d5:15:88:ea:7a:32:68:06:57:95:be:58:f5:
         39:63:0c:0f:fb:12:37:6b:87:6c:de:c0:94:01:01:aa:36:a5:
         31:b2:1f:e6:89:2b:87:92:d1:e5:49:b9:a2:3c:89:18:cb:60:
         b4:3f:9d:f1:b1:5c:76:67:5d:e4:ec:51:60:c2:50:1a:0d:10:
         16:f6:97:41:77:6e:47:dd:3c:42:d0:99:e2:13:f5:90:8b:ec:
         d7:cb:67:19:da:a2:17:1d:4d:26:db:b2:c0:13:d4:11:74:49:
         e4:44:8b:79:d3:dc:74:a5:e4:cb:1f:d8:9d:32:e7:23:80:21:
         7b:17:af:83:4c:f0:cb:42:b6:d0:2c:14:98:83:c6:d2:6a:f7:
         0b:55:55:9f:c4:c8:27:66:5d:d6:9d:6d:8e:fd:b2:94:32:5c:
         b8:63:c1:b3:19:7e:a5:16:f8:86:5f:0f:dd:0a:28:45:38:ff:
         a8:31:ed:8b:c2:53:f4:d0:bb:b0:76:ec:da:71:7c:69:39:82:
         86:9e:ab:3f:e4:03:32:4e:1e:65:a1:5b:4a:b2:d2:c2:0c:23:
         30:1f:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:40:11 2025 by rpki-client