Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
File:                     4FD2257689EE83DB094839D2005FC336CC9380AC.mft (raw, json)
Hash identifier:          cwvBlsi0t+E7jpYr1v7WusIqDQPwsP+lrxBh2I6t+Ug=
Subject key identifier:   84:7C:39:A2:3D:B8:46:4E:FA:AF:BC:51:28:98:6C:80:4F:6A:5D:68
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       15C103053533F41E61471DC182287FFC8B1A4AA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
Manifest number:          E2
Signing time:             Thu 03 Jul 2025 01:44:09 +0000
Manifest this update:     Thu 03 Jul 2025 01:39:09 +0000
Manifest next update:     Fri 04 Jul 2025 05:38:09 +0000
Files and hashes:         1: 3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa (hash: ncemmfCK8Jrh4s7nkif5EptKdEjXlKmZiVK2y8khyJc=)
                          2: 3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa (hash: qndJfIptJC9yrfcEVJgujh+TReYWx3rlhNPGhfhBHwg=)
                          3: 323830343a316162303a3a2f33332d3333203d3e203631383736.roa (hash: 0AZ+Jv1msHrFMT3xPClxfkdREKo+wmI9p7AliSfsvEc=)
                          4: 3230312e3135302e3132352e302f32342d3234203d3e203631383736.roa (hash: olfmdUmhJC1CaZ7MofhJNQmuDctq8XDZmX9em4IJdnE=)
                          5: 323830343a316162303a383030303a3a2f33332d3333203d3e203631383736.roa (hash: asXcV43eUrZtnln1hmJPTDX7dYUdIjbgYEiR8l7/X+w=)
                          6: 323830343a316162303a3a2f33322d3332203d3e203631383736.roa (hash: 0HxwcvLsSBWLgQV9Trf7mNwIYgtZeekt0QCt4+QSurU=)
                          7: 3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa (hash: +N7CDk4KdTJFe6il7z4dhlJ2i/YFPzNwtbNOJsxlIp0=)
                          8: 3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa (hash: S8hmTlLRX7ytwjGFkimNl0EkgqL9GWnHm/nrDTT3sdQ=)
                          9: 3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa (hash: X+j7TFrVBsxwDKrW/5irjs/OaOYZIIg0TWAxzbyMC8k=)
                          10: 4FD2257689EE83DB094839D2005FC336CC9380AC.crl (hash: p1f9Ecu+STURE5jxXnIOXGxMIov8HIxYpWlniIMTWJ8=)
                          11: 3230312e3135302e3132362e302f32342d3234203d3e203631383736.roa (hash: bYiM5N3n7x797bunlJfuDYZqUd0hq5rCluRf85xm47Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 05:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c1:03:05:35:33:f4:1e:61:47:1d:c1:82:28:7f:fc:8b:1a:4a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Jul  3 01:39:09 2025 GMT
            Not After : Jul  4 05:38:09 2025 GMT
        Subject: CN=847C39A23DB8464EFAAFBC5128986C804F6A5D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:a4:57:33:e3:af:ee:eb:c4:b0:53:e6:20:
                    f4:20:e1:36:e8:eb:2a:1f:10:a6:37:f8:fb:bd:5a:
                    8d:06:2f:ea:85:08:17:cc:28:f3:6b:31:06:16:80:
                    fa:3a:b8:67:31:cc:0f:79:7e:5a:7e:c6:4a:c5:dc:
                    6e:3a:ed:ce:d2:e6:f3:b0:9e:90:d2:4b:44:42:16:
                    89:d2:0a:a7:ca:ee:ac:2b:3a:af:00:89:02:7c:be:
                    42:22:e3:a6:cd:a0:15:84:77:f6:15:a9:15:40:6e:
                    69:65:e3:56:5d:10:62:bf:34:83:5c:f4:54:e5:b2:
                    de:43:db:12:25:32:70:59:3a:87:7b:77:7a:43:91:
                    65:f1:66:95:50:91:6c:29:06:4d:69:9d:23:77:ce:
                    ed:6a:64:e8:9d:ce:bb:2c:e9:e3:c9:ab:d2:8c:4d:
                    ec:c3:bd:ad:5f:3c:8a:cf:99:c6:f4:81:e4:ec:d5:
                    fa:b9:83:6e:30:95:7a:06:ae:82:70:61:13:02:4d:
                    37:a0:da:80:05:38:59:43:73:10:3c:4e:ff:62:88:
                    63:34:6d:6e:96:a4:19:d4:e2:ec:92:44:b9:b1:58:
                    14:77:d1:09:66:0c:36:57:44:cc:a0:36:50:68:9c:
                    ad:bb:a8:cb:6d:18:a9:2f:78:63:25:67:c3:20:ed:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7C:39:A2:3D:B8:46:4E:FA:AF:BC:51:28:98:6C:80:4F:6A:5D:68
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0d:d5:e6:49:3c:c4:8e:bf:a8:48:b2:0c:d3:4b:34:2b:76:
         b2:ca:12:5d:7c:ed:54:49:f5:84:65:75:8e:fa:b0:c9:dc:ba:
         61:85:c2:93:57:36:96:c1:3c:39:35:18:6b:cd:41:4c:96:6c:
         94:49:76:7c:58:12:79:8f:20:a9:81:9a:31:91:56:0a:e8:6e:
         cd:3d:55:59:af:0a:b6:03:da:ca:a0:2d:3a:14:c3:f3:65:a5:
         5d:df:8e:8f:7b:ec:b0:0a:86:1f:14:78:29:22:f9:10:eb:fc:
         c1:62:dd:6a:b5:61:b4:1d:cc:ee:a2:46:0b:d8:3f:96:3d:64:
         93:3d:b6:20:e6:1c:9c:c3:15:a2:54:20:d2:b3:00:18:20:e8:
         84:cb:84:68:5a:2b:61:e4:e8:d1:69:e8:e7:32:c2:09:16:e2:
         4b:90:d1:7a:6f:e4:56:8a:d7:bb:85:6b:d2:d9:31:5b:8f:54:
         2a:cd:a9:35:98:36:24:24:cf:20:67:47:53:bc:37:0a:13:e8:
         61:52:59:a9:72:6b:01:de:7d:40:d5:c3:d9:d4:19:e0:3d:ea:
         fc:5c:ef:2b:55:89:ec:10:56:1d:1d:cf:82:e3:bc:f4:20:bc:
         6f:d2:02:a5:fb:64:82:71:e8:17:4f:dc:3b:12:d2:5c:25:92:
         90:f7:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:17:23 2025 by rpki-client