Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
File:                     DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft (raw, json)
Hash identifier:          cvve/J3U/XDLJR+jZyRmrR8WkV7mMgCyMO53bcCdFhc=
Subject key identifier:   CB:CB:82:B1:AA:C9:BB:29:08:E7:35:7A:9D:0B:E7:05:ED:2B:9F:CE
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       0DA5840E499AD227C5C57024CAC0E1674ED76F6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
Manifest number:          0B
Signing time:             Sun 29 Jun 2025 15:37:29 +0000
Manifest this update:     Sun 29 Jun 2025 15:32:29 +0000
Manifest next update:     Mon 30 Jun 2025 16:06:29 +0000
Files and hashes:         1: 3137372e33372e302e302f32302d3234203d3e20323632343632.roa (hash: gO71Pq7h7pXPcjaatV9lOXOjFJe/afb85FbEbIViapQ=)
                          2: DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl (hash: N+Gi3jSNJYf3uAT73VdRJni7rtLU1+aBqtZXc91wDAU=)
                          3: 3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa (hash: lCn9g+gHs8ERTTALlp2Bz3pGB0mGei0MgjIzRnNPGjA=)
                          4: 3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa (hash: PTlEFtexBDi/f7D/oVcn6svzP6rcJenk2E0AESTR9NQ=)
                          5: 323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (hash: wEQo4VKDaFukRLfZfYRF78pm5p5kHcF2IY8IWe2XBPc=)
                          6: 3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (hash: X/dMtnCq7hHy5mLHCd4+hYvO9B6J1kT71A40w13OW64=)
                          7: 3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (hash: zKyV3/JzgbdojZy4O2J483O9H+dIt7u9e0m9IdWOl48=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 16:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:84:0e:49:9a:d2:27:c5:c5:70:24:ca:c0:e1:67:4e:d7:6f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Jun 29 15:32:29 2025 GMT
            Not After : Jun 30 16:06:29 2025 GMT
        Subject: CN=CBCB82B1AAC9BB2908E7357A9D0BE705ED2B9FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:6d:6f:0e:0e:b4:ee:53:07:f5:67:19:90:
                    38:12:b5:a8:b5:73:ba:2f:30:10:96:fc:e9:35:05:
                    df:3e:44:0d:a3:08:38:13:a9:4a:9b:b0:31:be:dd:
                    95:d2:98:22:db:71:4c:ad:70:0a:00:eb:99:84:61:
                    9f:38:bc:f5:e1:ed:d4:13:5b:87:48:0d:a7:b8:62:
                    d7:5e:bc:d1:43:a9:fb:f8:6b:7e:bb:09:88:f6:e6:
                    34:b4:42:cc:ca:cc:e6:52:c6:68:c7:cd:8a:79:d9:
                    a1:23:96:7f:d7:46:b0:d6:0f:0b:c1:2d:9e:82:80:
                    7a:bc:e2:0a:16:00:35:10:6b:62:1e:c4:62:e8:61:
                    a7:5e:d4:91:aa:43:4d:a4:76:55:59:9a:08:78:75:
                    dc:75:a3:45:1d:af:72:44:91:0f:fa:8c:7f:3f:9e:
                    03:81:d1:e3:7a:dc:18:db:fc:fa:57:07:1d:93:17:
                    a4:79:c2:02:79:e5:a9:bb:77:ab:e5:fd:6e:6c:27:
                    8a:e4:7c:5d:d2:24:e2:6d:9e:73:8a:c9:02:06:f4:
                    ed:5b:ec:74:45:b9:32:23:48:13:cc:57:dd:94:6a:
                    1c:fd:cb:fa:f6:1c:db:2a:e8:37:b9:fb:38:fe:8f:
                    ec:1c:db:20:6f:18:9a:7e:b9:63:38:0e:95:8a:14:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CB:82:B1:AA:C9:BB:29:08:E7:35:7A:9D:0B:E7:05:ED:2B:9F:CE
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:61:0e:27:26:03:7e:76:eb:42:2f:43:49:32:32:a4:73:
         42:d3:c8:ab:71:3d:35:01:d4:bd:86:0b:b9:ff:28:78:04:a9:
         8c:e4:43:19:34:b6:b8:de:d8:f2:24:79:38:50:f8:7f:f1:07:
         8e:61:d2:bf:f8:b3:ab:b7:8f:c0:ac:68:c9:cb:57:a0:f5:9d:
         82:6e:69:a6:3d:14:9f:bc:90:4d:39:de:54:c9:03:3a:bb:1a:
         ea:10:0b:9c:99:c9:a4:de:b0:f9:2d:ae:2d:cd:a2:4d:0c:fa:
         74:f2:93:e4:b8:47:86:40:81:d2:76:1f:b4:f2:cc:17:ad:92:
         cb:fd:97:4d:f7:b5:64:22:a0:24:34:ba:fa:74:3f:f5:c2:e0:
         89:f2:5e:de:8f:af:b1:37:c8:33:fb:59:ea:50:af:d6:52:f5:
         a9:04:d9:4c:5c:b4:71:d0:a9:77:64:e9:70:ed:12:19:11:da:
         15:35:bc:00:0f:74:0f:36:f6:a7:cd:74:cf:8c:e8:1f:f7:04:
         9d:2a:82:d2:c7:93:f7:b4:ad:27:d6:2d:93:37:30:38:0d:fc:
         f4:00:d1:b4:98:36:3f:f1:5e:d9:9f:82:fd:8d:0a:50:b4:eb:
         f5:ea:76:54:9c:51:e7:0b:9f:5f:66:2a:4c:0e:30:fd:88:11:
         99:98:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:21:02 2025 by rpki-client