Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
File:                     DC4760B481E70FA8E13E470458ED532F02330CBE.mft (raw, json)
Hash identifier:          CcuO+n9m++WTb+NFCNSJYxREP+B0EDxdZCsLtOOdV74=
Subject key identifier:   68:6F:B8:1D:70:0C:F1:FB:A0:CB:24:B5:1F:C0:C9:DA:71:92:68:2E
Authority key identifier: DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE
Certificate issuer:       /CN=DC4760B481E70FA8E13E470458ED532F02330CBE
Certificate serial:       707018F588A4D5E3DE800DADBD7229FAB47AFEAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
Manifest number:          021D
Signing time:             Mon 12 May 2025 04:55:32 +0000
Manifest this update:     Mon 12 May 2025 04:50:32 +0000
Manifest next update:     Tue 13 May 2025 07:25:32 +0000
Files and hashes:         1: 3139312e362e33322e302f32302d3332203d3e20323632323838.roa (hash: us9ZguvM4l3pmy1t19x6kKXWcy4dhDEn1zT9piJyy9M=)
                          2: 3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa (hash: I57LsSVEHhI8oBhmawCpgSi2sCz5azj8D3Zl2x77OHk=)
                          3: DC4760B481E70FA8E13E470458ED532F02330CBE.crl (hash: qbKnJ1ct3Ct04M3Ds5kjxpG7EzWxZP4sQr+lAtxaStU=)
                          4: 3139312e362e33322e302f32302d3234203d3e20313938393439.roa (hash: +haZXV9gu6P4JwxXrSswv2DXCntNK/lnzVnzViopEGE=)
                          5: 323830343a313362343a3a2f33322d3438203d3e20323632323838.roa (hash: zz/2G/yuKcEe++uJCtT5VTWBP2pHj58L4N7zbpBijI0=)
                          6: 3137372e3135342e3136302e302f32302d3234203d3e20313938393439.roa (hash: uNAkacRq27OSUXPhP2ETA/7h/ueP/OdqUT4i1VneAUc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl
                          rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 07:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:70:18:f5:88:a4:d5:e3:de:80:0d:ad:bd:72:29:fa:b4:7a:fe:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4760B481E70FA8E13E470458ED532F02330CBE
        Validity
            Not Before: May 12 04:50:32 2025 GMT
            Not After : May 13 07:25:32 2025 GMT
        Subject: CN=686FB81D700CF1FBA0CB24B51FC0C9DA7192682E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:12:db:23:b7:1e:7e:ad:e5:92:86:49:d6:
                    fc:59:0e:4c:da:1f:8e:7f:b1:22:5f:1e:ac:02:c0:
                    5f:50:07:e9:47:08:69:97:f7:d1:91:22:44:99:ef:
                    53:7b:eb:9c:85:c9:84:c4:a6:21:e3:46:99:53:17:
                    b5:fc:65:2d:a5:16:f2:b6:91:91:e1:49:5c:d6:96:
                    35:ac:e2:89:29:36:85:43:60:6e:da:52:77:e0:b9:
                    64:26:05:86:73:d9:e0:f8:dc:d6:07:89:15:3c:c5:
                    29:19:db:6c:90:bf:4e:a8:62:d5:2a:c4:86:e0:b9:
                    ea:a2:de:9a:85:2e:5e:c5:fe:5f:22:12:89:13:4c:
                    12:fc:31:79:c6:d6:f5:d9:98:f2:57:2d:02:c8:2c:
                    d9:8e:84:1d:dd:df:33:e4:5c:9f:36:06:af:ed:56:
                    10:06:b7:f7:38:2a:9e:03:4b:b7:b0:2a:51:59:19:
                    1d:3a:52:d4:63:4f:73:f7:52:f1:7e:84:77:a4:98:
                    43:24:29:a0:9d:a9:be:19:1e:b1:c9:f8:80:0d:35:
                    a1:96:90:96:60:2f:6f:83:19:c5:d7:ef:4c:28:8c:
                    57:f8:80:39:89:e5:9a:81:96:bf:25:85:ab:70:25:
                    e5:98:2c:42:5d:0b:00:5f:02:97:53:49:e9:a2:e2:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6F:B8:1D:70:0C:F1:FB:A0:CB:24:B5:1F:C0:C9:DA:71:92:68:2E
            X509v3 Authority Key Identifier:
                keyid:DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:88:40:68:6c:cc:8a:3a:36:54:5e:3f:05:f6:51:97:75:2a:
         4a:b2:70:28:e6:35:44:08:1f:86:c8:8f:63:3c:3f:4b:1c:35:
         f6:8c:86:41:aa:e9:4d:e7:b8:de:31:15:64:41:8c:b9:86:d2:
         48:d4:2c:09:6d:3a:06:87:9f:fa:45:d7:2d:56:10:8f:b0:2f:
         95:1c:06:09:87:7a:e0:c0:17:34:f2:69:13:bc:26:df:30:03:
         d7:e7:3e:e5:17:05:24:7e:26:4d:ae:f3:7e:51:3d:a2:f9:11:
         04:5c:d0:3d:f2:4d:3b:03:b9:88:72:80:2f:92:78:c1:13:84:
         82:57:8e:d4:5d:20:6d:e5:c1:01:de:fc:d9:21:e5:fc:e6:0f:
         22:81:20:e9:98:07:dc:e9:cb:4e:83:41:4c:7f:d7:a5:02:92:
         1c:96:6f:15:3e:a5:97:e7:ed:ec:cf:ec:58:9f:f9:bc:e3:74:
         c1:6f:f5:ff:65:33:61:df:49:e9:65:97:74:9c:f2:31:6a:76:
         d0:ad:68:5f:fd:59:8c:11:31:1e:03:a7:24:2e:ef:e2:2c:dc:
         27:cd:3e:e7:c6:80:54:f2:40:e6:b1:0d:cf:15:99:e4:35:29:
         c5:e9:92:8b:38:24:b5:03:36:5d:0b:9b:eb:30:db:6c:bd:42:
         b7:33:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:54:54 2025 by rpki-client