Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft
File:                     CA70F9A507FA2985459107906414142C8199804F.mft (raw, json)
Hash identifier:          nbcyZy3uuLlKi95ZfKTdGJOzYKKRTUuwQbji64g2zBk=
Subject key identifier:   4C:C6:ED:E0:C1:65:59:99:93:ED:9F:1F:CD:FD:1B:C9:33:D0:29:57
Authority key identifier: CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F
Certificate issuer:       /CN=CA70F9A507FA2985459107906414142C8199804F
Certificate serial:       20E4FBAFF71CEB392817E86393D63AA8533C5177
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft
Manifest number:          43
Signing time:             Thu 03 Jul 2025 01:23:56 +0000
Manifest this update:     Thu 03 Jul 2025 01:18:56 +0000
Manifest next update:     Fri 04 Jul 2025 01:27:56 +0000
Files and hashes:         1: CA70F9A507FA2985459107906414142C8199804F.crl (hash: 6HB84O+ozuz3biD41lmoAkyy83M5rp8Tbgcofgyqz1M=)
                          2: 323830343a393363343a3a2f33322d3334203d3e20323734373939.roa (hash: t/gZ4cjylinH0ISO1oFP4SuwOPt3V4e2F5CZjsTQlcU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.crl
                          rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e4:fb:af:f7:1c:eb:39:28:17:e8:63:93:d6:3a:a8:53:3c:51:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA70F9A507FA2985459107906414142C8199804F
        Validity
            Not Before: Jul  3 01:18:56 2025 GMT
            Not After : Jul  4 01:27:56 2025 GMT
        Subject: CN=4CC6EDE0C165599993ED9F1FCDFD1BC933D02957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:d4:1f:48:1f:74:a9:de:9c:6a:bf:3f:35:
                    ed:52:36:06:d8:8d:41:b6:62:0a:a7:30:b1:9a:2b:
                    b3:95:a1:19:71:6f:80:d6:e6:56:11:8f:45:c2:2f:
                    f4:26:3a:ec:f5:3d:42:f8:52:15:58:54:a7:33:0b:
                    d6:fe:e2:ad:68:8f:09:f5:a4:2a:52:6e:ec:41:07:
                    b5:b0:ee:79:51:d9:cf:a7:f1:c5:16:64:de:bc:db:
                    24:da:ad:5b:e0:77:6c:14:97:3f:c9:c5:b6:84:a8:
                    d3:5b:a5:fb:f1:87:7a:06:1b:fb:ff:ad:74:b3:e2:
                    d5:25:38:ab:40:bb:35:7e:a4:93:83:c7:93:0f:8b:
                    9a:ef:96:73:40:38:b0:bf:cd:68:05:9b:48:24:9d:
                    8b:6f:89:2d:9f:1a:85:5c:3f:91:82:34:63:e1:a8:
                    11:3c:4a:8d:cd:27:94:ce:27:76:44:bb:b6:0c:aa:
                    da:bb:83:f3:48:02:14:ab:65:52:6a:0e:8f:c6:29:
                    d6:61:25:c6:42:8d:3b:d6:f1:07:04:42:c5:21:7a:
                    76:2d:fb:12:69:12:6e:2f:99:32:62:12:09:a9:d8:
                    83:7c:32:4f:9e:32:3f:a9:86:a9:5c:81:94:8f:b7:
                    1c:f8:82:e8:6b:da:15:f1:e5:d8:3c:91:ec:38:85:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:ED:E0:C1:65:59:99:93:ED:9F:1F:CD:FD:1B:C9:33:D0:29:57
            X509v3 Authority Key Identifier:
                keyid:CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:c7:7c:18:d1:33:66:aa:c2:1b:d2:fe:59:6c:89:5c:12:
         04:e1:64:ee:90:44:67:f3:cf:29:7d:9c:30:4f:ea:cb:ad:67:
         dd:dd:80:02:b5:23:0f:3f:7c:a4:4f:e2:5f:47:fb:87:68:9d:
         69:dd:d6:ce:bd:63:a8:14:43:45:ba:65:1a:12:b2:aa:b4:7a:
         06:ee:13:16:62:31:8b:41:17:8b:70:b7:16:81:88:5e:e1:6e:
         8d:4c:d5:ca:83:5e:94:dd:f5:d5:c3:5e:94:fb:d5:eb:f6:9a:
         e7:75:03:a7:29:fb:be:0a:47:42:60:54:3d:da:dc:01:5f:01:
         30:a4:68:16:43:5c:81:e0:24:b8:22:c9:8b:b1:b1:ae:42:9e:
         55:68:e1:90:bb:a9:db:14:2b:dd:b6:98:23:a2:69:38:80:87:
         61:b4:64:c0:bf:5f:bf:14:4b:ef:69:a3:1d:e6:68:b2:94:97:
         31:fc:45:59:41:3d:d8:b2:65:d8:0f:8d:91:76:ee:53:94:57:
         69:f0:a8:80:fb:24:50:cf:e3:77:d0:eb:6f:6e:cb:cc:3b:35:
         cf:17:2f:53:c6:25:99:39:63:2b:bc:03:34:c0:68:5b:87:24:
         9a:e0:66:44:5e:7f:25:f7:1f:7c:7d:29:19:5a:aa:f6:6e:e8:
         f2:7a:6e:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIOT7r/cc6zkoF+hjk9Y6qFM8UXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E3MEY5QTUwN0ZBMjk4NTQ1OTEwNzkwNjQxNDE0MkM4
MTk5ODA0RjAeFw0yNTA3MDMwMTE4NTZaFw0yNTA3MDQwMTI3NTZaMDMxMTAvBgNV
BAMTKDRDQzZFREUwQzE2NTU5OTk5M0VEOUYxRkNERkQxQkM5MzNEMDI5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGztQfSB90qd6car8/Ne1SNgbY
jUG2YgqnMLGaK7OVoRlxb4DW5lYRj0XCL/QmOuz1PUL4UhVYVKczC9b+4q1ojwn1
pCpSbuxBB7Ww7nlR2c+n8cUWZN682yTarVvgd2wUlz/JxbaEqNNbpfvxh3oGG/v/
rXSz4tUlOKtAuzV+pJODx5MPi5rvlnNAOLC/zWgFm0gknYtviS2fGoVcP5GCNGPh
qBE8So3NJ5TOJ3ZEu7YMqtq7g/NIAhSrZVJqDo/GKdZhJcZCjTvW8QcEQsUhenYt
+xJpEm4vmTJiEgmp2IN8Mk+eMj+phqlcgZSPtxz4guhr2hXx5dg8kew4hZB7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTMbt4MFlWZmT7Z8fzf0byTPQKVcwHwYDVR0j
BBgwFoAUynD5pQf6KYVFkQeQZBQULIGZgE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoy
c1kvMC9DQTcwRjlBNTA3RkEyOTg1NDU5MTA3OTA2NDE0MTQyQzgxOTk4MDRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNzBGOUE1MDdGQTI5ODU0
NTkxMDc5MDY0MTQxNDJDODE5OTgwNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoyc1kvMC9D
QTcwRjlBNTA3RkEyOTg1NDU5MTA3OTA2NDE0MTQyQzgxOTk4MDRGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARWrHfBjRM2aqwhvS/llsiVwSBOFk7pBEZ/PPKX2cME/qy61n3d2AArUjDz98
pE/iX0f7h2idad3Wzr1jqBRDRbplGhKyqrR6Bu4TFmIxi0EXi3C3FoGIXuFujUzV
yoNelN311cNelPvV6/aa53UDpyn7vgpHQmBUPdrcAV8BMKRoFkNcgeAkuCLJi7Gx
rkKeVWjhkLup2xQr3baYI6JpOICHYbRkwL9fvxRL72mjHeZospSXMfxFWUE92LJl
2A+NkXbuU5RXafCogPskUM/jd9Drb27LzDs1zxcvU8YlmTljK7wDNMBoW4ckmuBm
RF5/JfcffH0pGVqq9m7o8npu6g==
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:01:32 2025 by rpki-client