Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
File:                     D23AEA3BF9686D794967BECAC226FA9648876870.mft (raw, json)
Hash identifier:          vgcUodSDIVWTAacMq5QLFqiiNObCYjbhqkknkMRYB3s=
Subject key identifier:   E1:41:72:B2:04:1B:BC:DC:FD:E8:FB:6B:BE:12:E5:0A:3D:68:6D:C1
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       6EB24BF0A41E4ECE2C3B60B19D46DACF3FEAE498
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
Manifest number:          021F
Signing time:             Fri 16 May 2025 21:25:04 +0000
Manifest this update:     Fri 16 May 2025 21:20:04 +0000
Manifest next update:     Sat 17 May 2025 21:39:04 +0000
Files and hashes:         1: 3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa (hash: txjM31afppCmHo0SCDmaG63Ukdjv41N7lGDrF1rfe0Y=)
                          2: 3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa (hash: qEv9QRFbUud8wjmrI7Mg7gB/+7PH00kn4BfGK/NSz1Y=)
                          3: 323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (hash: N21bgywY1x4r1vLZaPh96X/eWqYiw39UYsCfaNuehUU=)
                          4: D23AEA3BF9686D794967BECAC226FA9648876870.crl (hash: tr7qhRkxNAo7tuK/eMplUYg1O2iOH8JQM7kpBaPeXYc=)
                          5: 323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (hash: kDbGCqNSUdmZakDCg1TiRYt/RRqjxxGDsDnwDF9XOCM=)
                          6: 323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (hash: /CBOzGSo3loJCL4J+JUGeubAJr+11A+LVtEkvNlfqGw=)
                          7: 3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (hash: mylTXmhuTTm2hr4D6b5vfiKs8MjHwQHS8CbX1aJ8+DQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 21:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b2:4b:f0:a4:1e:4e:ce:2c:3b:60:b1:9d:46:da:cf:3f:ea:e4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: May 16 21:20:04 2025 GMT
            Not After : May 17 21:39:04 2025 GMT
        Subject: CN=E14172B2041BBCDCFDE8FB6BBE12E50A3D686DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:11:2c:b8:8a:d9:c1:cc:f5:c8:ed:9b:46:
                    55:32:97:38:09:63:20:f4:68:a5:a4:58:70:d4:8f:
                    f3:8c:0d:3c:77:53:71:93:6a:94:ae:10:47:73:08:
                    55:e2:d9:fd:5e:c7:e8:e7:27:e8:45:07:99:c3:18:
                    24:f2:b9:c5:47:54:f2:f9:bd:95:78:b3:36:9b:1a:
                    28:67:c4:ce:b7:6c:99:2f:ba:54:0e:38:b3:eb:e7:
                    53:2c:0f:83:df:1b:05:57:1a:bd:41:cf:6b:7b:e8:
                    84:42:37:0c:c1:c5:04:d8:c0:ac:a0:98:60:4d:81:
                    9e:8f:9a:36:b7:1a:1e:37:c0:74:04:0d:d0:94:53:
                    9f:ab:f6:24:fa:c6:96:c2:a9:51:22:03:af:dd:62:
                    5f:21:b5:b4:6b:52:c8:c4:7b:da:b2:64:56:34:5f:
                    fa:85:84:87:7f:68:9f:a2:89:5d:10:67:8e:cf:27:
                    5f:44:e7:fa:8b:d3:ff:8c:90:a4:d0:b1:3d:17:de:
                    c1:b3:1a:4b:73:61:59:6f:3f:ef:47:bd:5e:c7:45:
                    71:0a:42:8b:71:51:fd:f9:4e:09:79:c4:34:6b:79:
                    55:50:74:13:04:e7:66:36:f7:41:1b:50:6c:67:91:
                    8e:dc:af:6c:86:99:45:0e:ea:a8:34:9a:12:68:79:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:41:72:B2:04:1B:BC:DC:FD:E8:FB:6B:BE:12:E5:0A:3D:68:6D:C1
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1b:7e:13:83:13:c7:bd:f2:eb:3c:59:f9:26:16:96:6a:af:
         dc:ec:c7:5a:f9:7c:c9:fc:6c:50:99:dd:a9:60:38:fa:b6:0a:
         ca:ee:af:c7:37:56:09:88:5e:d3:91:36:97:89:e5:19:17:7e:
         f0:f4:c7:c1:f1:3f:5c:c8:46:e2:1c:19:2c:39:e1:16:6d:ce:
         70:7c:6f:16:cf:7a:3d:e2:5f:da:3e:79:42:50:10:29:e7:65:
         68:8a:79:8f:11:ec:18:b7:d1:c9:19:75:62:aa:f7:d6:72:f2:
         a0:70:67:16:fa:ba:8b:48:d4:e8:76:1a:7c:ea:1b:27:80:6f:
         65:38:b3:35:67:c5:6a:31:03:6e:e9:b1:55:09:9c:27:95:1d:
         c1:66:8e:0d:da:b9:14:8d:e5:49:c9:16:1d:f5:fb:4c:a8:a3:
         b9:e1:d4:ae:6f:89:86:44:d4:b3:07:96:5c:5d:c9:00:95:49:
         d3:35:ab:71:38:ae:0d:1f:3d:ed:d1:d6:59:5b:8f:65:ae:5c:
         56:16:9d:76:49:f8:f7:6e:05:09:9b:f0:0f:5b:ef:bc:46:6b:
         b3:b2:6c:f1:60:35:68:85:49:1d:62:42:98:97:20:88:3c:dd:
         24:11:17:92:78:5e:9f:9f:c4:d6:35:83:03:16:c0:54:3b:de:
         fb:0a:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 04:45:16 2025 by rpki-client