Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft
File:                     8E77BC88C5492D8563E5C64470A26FC3D0020706.mft (raw, json)
Hash identifier:          M1tiEkz88ZRh0dthKbq1Sg0+5TfoYBh6/WdYDchUVqk=
Subject key identifier:   91:CA:BE:88:89:75:D5:E0:B0:DE:B8:BE:80:F8:59:02:8A:89:AC:5A
Authority key identifier: 8E:77:BC:88:C5:49:2D:85:63:E5:C6:44:70:A2:6F:C3:D0:02:07:06
Certificate issuer:       /CN=8E77BC88C5492D8563E5C64470A26FC3D0020706
Certificate serial:       7A89FB0E42F254784DC93209CF6CB05CAE905665
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft
Manifest number:          02AB
Signing time:             Wed 02 Jul 2025 23:28:00 +0000
Manifest this update:     Wed 02 Jul 2025 23:23:00 +0000
Manifest next update:     Thu 03 Jul 2025 23:28:00 +0000
Files and hashes:         1: 8E77BC88C5492D8563E5C64470A26FC3D0020706.crl (hash: kQ02npfP1wT7e3bm53u1Jh0PjkuNOp33+G8/8DHzA+A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.crl
                          rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:89:fb:0e:42:f2:54:78:4d:c9:32:09:cf:6c:b0:5c:ae:90:56:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E77BC88C5492D8563E5C64470A26FC3D0020706
        Validity
            Not Before: Jul  2 23:23:00 2025 GMT
            Not After : Jul  9 23:28:00 2025 GMT
        Subject: CN=3082010A0282010100DB92E46170334E655DF6B7B7586F6229BCAD2E4D9CB4F89C43A191A394F544F9BBB5AEEFF3A793E2BE974B9682478527BB5C8F3BFE1038D41DDEE78D4566F0A9306F9DF8EC7C47637E89A4731256737E7D75920865C66E852EBB978F62FB205A0586FE40A2F5C790A2C752111A315836FEF7E424C8FC0ACE34B8A0A6079AFB852AF085F5F176E5E120B931B33462F77D704B9CBAFB4000D2E2F40C845422415A1592B32ADB29254FCC3C95A4BBB536B467652DE9D5453A8EE34DB221D21769A49AD1A097178A146009320B0D7300EF616B1504FABE7EF0E26DD3E7634597C31C3FD679A638664624417C0024C4C95E3B7923F7C856FB56BE532DFECBC360F8E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:e4:61:70:33:4e:65:5d:f6:b7:b7:58:6f:
                    62:29:bc:ad:2e:4d:9c:b4:f8:9c:43:a1:91:a3:94:
                    f5:44:f9:bb:b5:ae:ef:f3:a7:93:e2:be:97:4b:96:
                    82:47:85:27:bb:5c:8f:3b:fe:10:38:d4:1d:de:e7:
                    8d:45:66:f0:a9:30:6f:9d:f8:ec:7c:47:63:7e:89:
                    a4:73:12:56:73:7e:7d:75:92:08:65:c6:6e:85:2e:
                    bb:97:8f:62:fb:20:5a:05:86:fe:40:a2:f5:c7:90:
                    a2:c7:52:11:1a:31:58:36:fe:f7:e4:24:c8:fc:0a:
                    ce:34:b8:a0:a6:07:9a:fb:85:2a:f0:85:f5:f1:76:
                    e5:e1:20:b9:31:b3:34:62:f7:7d:70:4b:9c:ba:fb:
                    40:00:d2:e2:f4:0c:84:54:22:41:5a:15:92:b3:2a:
                    db:29:25:4f:cc:3c:95:a4:bb:b5:36:b4:67:65:2d:
                    e9:d5:45:3a:8e:e3:4d:b2:21:d2:17:69:a4:9a:d1:
                    a0:97:17:8a:14:60:09:32:0b:0d:73:00:ef:61:6b:
                    15:04:fa:be:7e:f0:e2:6d:d3:e7:63:45:97:c3:1c:
                    3f:d6:79:a6:38:66:46:24:41:7c:00:24:c4:c9:5e:
                    3b:79:23:f7:c8:56:fb:56:be:53:2d:fe:cb:c3:60:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CA:BE:88:89:75:D5:E0:B0:DE:B8:BE:80:F8:59:02:8A:89:AC:5A
            X509v3 Authority Key Identifier:
                keyid:8E:77:BC:88:C5:49:2D:85:63:E5:C6:44:70:A2:6F:C3:D0:02:07:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:91:71:13:33:7a:28:22:23:1d:c4:30:de:7c:7a:7a:a9:be:
         f9:4e:2e:4d:1f:bb:e5:82:f3:e1:e6:b6:79:c2:0d:77:c6:ac:
         34:91:5e:27:3a:7f:b0:c6:d7:bc:09:65:10:65:d8:63:d3:2b:
         b8:00:65:d1:e6:3f:6d:90:60:86:a1:8c:3c:ca:8b:df:b4:c8:
         60:47:b5:93:34:91:26:a2:55:33:cf:e6:7d:e5:a0:4e:39:b1:
         88:08:a2:c5:21:c0:4a:c4:c3:32:86:f1:a8:0d:91:b8:4e:ed:
         3b:0b:fc:61:fb:b5:7c:03:26:34:7f:34:8e:4c:60:99:72:11:
         95:27:7d:50:b0:c3:50:d5:9a:4e:50:28:14:a6:2f:6d:b0:4a:
         74:0a:2a:5f:f5:85:de:61:38:f2:f3:cd:9d:5c:4c:46:93:13:
         2b:d5:7d:1f:c7:2e:bc:48:a2:39:9e:98:4c:5e:ca:f6:3e:67:
         b3:63:31:9b:79:4d:43:2c:a8:bb:de:e8:6d:da:a5:01:77:25:
         90:97:02:39:3e:87:f0:fc:93:9c:82:17:0d:28:7f:fb:96:42:
         f8:9c:2f:2c:a6:51:e0:3a:8f:c7:1e:e1:e0:d6:7f:14:0b:24:
         4b:c8:47:a7:ff:13:c0:98:80:0f:86:c8:64:20:03:a6:56:c4:
         52:6d:ac:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:52:27 2025 by rpki-client