Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
File:                     217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft (raw, json)
Hash identifier:          qda31XBTK4bPs6UYDj0ndeTkvT3WY423PAji8km+Pts=
Subject key identifier:   33:97:64:F9:CB:39:02:2E:D3:B5:04:B9:2A:FF:A3:05:91:87:38:7C
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       1928C61A2276F3BA817E0C4F71D2132D44586EC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
Manifest number:          025A
Signing time:             Mon 30 Jun 2025 00:28:57 +0000
Manifest this update:     Mon 30 Jun 2025 00:23:57 +0000
Manifest next update:     Tue 01 Jul 2025 04:00:57 +0000
Files and hashes:         1: 323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa (hash: IIjOfwScjYzuIW455scPteo+jXiGwymOxdWyMdesCxU=)
                          2: 217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl (hash: TE2gD4J0jLl1Kmv4fgTyNzS9dT0NafNYAg1DpAjbVgY=)
                          3: 3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa (hash: 6NwpFJ7gDANE46Jx5vikCbRoBEVySFH3yZyCVhsLd0o=)
                          4: 323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa (hash: jyBzkUb0ZAfBqFaeEplKCUGYFgzfbOL8bBel2PDL7uc=)
                          5: 323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa (hash: 1jilXaroZujU5oaBmP8IdMxhJvWVAv+XVsRwyo4U4Kk=)
                          6: 3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa (hash: C8A1tMc17XPO4sT/75doOEso28/RPHv8x0piivNpqnU=)
                          7: 323830343a3832383a663133303a3a2f34372d3437203d3e20323632333534.roa (hash: KopFg19EShN0UnNLuZcAOoGOfsA+Ip+eckPoai0jD2s=)
                          8: 3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa (hash: q41Kgx7H4qdLGf/v/7Tu8Hjp6Ur6X6B7jCcvMBE3QB0=)
                          9: 323830343a3832383a3a2f33322d3332203d3e20323632333534.roa (hash: g8VDWdnoTi89t4VpwlAnfB9n5awIOVyt5yucSqrEYXs=)
                          10: 3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa (hash: KepogA6EqBh4/Mm9ZRketiZxhibc5/sOuerwpLOTr8k=)
                          11: 3137372e3132352e3231322e302f32322d3234203d3e20323632333534.roa (hash: bn8Xe5WrdUt7ICGvKPftHd4DAKOH8yOEmghN62vqAdk=)
                          12: 323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa (hash: 3ATdnwKTcnjJc1thmle9rbBzJ54qo4F2Z6Zt7tF0mOQ=)
                          13: 323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa (hash: 73VxTmrHcDclfyzWD2NvLWhlyqOOmciv8mqD3YTP4Lo=)
                          14: 323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa (hash: MGiElqaL7xBEzpuZbkoNqfSxLtqkmTwWj52mKDYvjWk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:28:c6:1a:22:76:f3:ba:81:7e:0c:4f:71:d2:13:2d:44:58:6e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Jun 30 00:23:57 2025 GMT
            Not After : Jul  1 04:00:57 2025 GMT
        Subject: CN=339764F9CB39022ED3B504B92AFFA3059187387C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:3a:5d:55:8b:bc:27:8b:66:2e:67:bd:73:
                    5b:0d:f9:d8:25:3d:98:7b:f1:5c:40:74:bf:6b:dc:
                    a3:22:54:6b:95:0a:8f:6d:d3:52:f7:a2:f2:1b:18:
                    1e:6e:a6:f9:23:e5:b6:8a:1a:f7:50:6e:f0:1e:4d:
                    fa:66:cf:be:b6:bd:ec:57:5d:1b:ea:94:f0:e7:2d:
                    3f:2e:81:c6:0d:1e:fa:ff:9c:1e:86:07:87:69:94:
                    01:2a:8b:f0:65:11:b5:8a:3f:71:bf:e0:1e:78:37:
                    f5:0a:90:df:59:43:c7:31:ae:0a:06:26:fc:db:d3:
                    2d:3f:6e:3b:1a:08:e7:87:e2:46:3d:37:a7:47:e8:
                    8b:87:0a:30:df:39:31:df:f6:c3:92:10:8c:df:92:
                    b7:4e:37:9e:ee:fc:97:dc:db:f3:27:78:3d:32:30:
                    c4:60:74:10:c5:c3:74:11:6e:cc:27:b4:07:cb:d1:
                    fe:ab:5b:a3:50:e0:2c:55:96:2a:0d:d8:84:fe:34:
                    dd:25:06:ec:78:1e:a2:45:e4:25:c1:8b:2d:12:70:
                    6e:47:df:4c:a7:92:36:34:47:7a:af:8a:10:21:6d:
                    62:75:2e:43:59:3c:a2:00:ec:01:78:ae:18:38:7c:
                    a0:75:85:4a:ed:ec:9f:91:fe:79:d5:58:c9:0e:fa:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:97:64:F9:CB:39:02:2E:D3:B5:04:B9:2A:FF:A3:05:91:87:38:7C
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b3:47:7c:2c:de:72:67:b2:32:a6:aa:b1:d2:c0:f7:94:f6:
         04:ba:8c:e2:58:52:4f:5c:99:5b:12:0e:00:c4:a3:20:22:a6:
         1b:6c:c7:e7:7e:67:b4:b8:03:49:a2:93:6c:8b:39:42:00:f7:
         09:92:fa:37:2b:37:cc:92:6b:2f:f0:09:2a:d3:32:b9:a4:b4:
         74:f4:d2:66:79:c8:cd:36:6d:5b:3f:9f:e0:41:88:ca:55:48:
         b2:18:12:82:56:f4:4c:a8:cc:31:4a:7d:25:b7:de:1e:d3:06:
         80:46:7a:f3:32:56:3f:39:83:e8:89:78:38:31:4f:45:69:5f:
         a6:5b:da:44:50:fc:33:6a:de:30:a7:ec:57:e5:08:99:84:41:
         c7:4c:48:64:bf:35:61:a1:76:de:0b:17:01:1c:a9:23:d6:f0:
         12:5c:36:dc:ee:c6:29:97:74:9f:00:51:0f:dd:a4:0e:eb:07:
         9e:5a:c8:a3:0e:94:f4:7c:09:05:60:24:b7:9a:c5:5d:7b:37:
         9c:8d:84:8a:aa:a0:51:1e:94:d1:99:05:62:96:f5:3b:f2:d9:
         16:6a:c8:d4:89:5a:d7:42:15:ee:35:00:b3:9d:27:9a:8d:af:
         c4:3d:93:62:fc:24:8e:32:c7:56:30:5d:2d:95:4c:1c:ca:96:
         2c:75:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:33:57 2025 by rpki-client