Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          6DkSt6H+WYsEjcGhwb9K3qgfgFBTUdShxqBM/IwYQZY=
Subject key identifier:   6D:E8:B4:BA:CD:1D:09:60:3D:DE:F3:C8:CB:FF:22:B9:C5:A6:F6:44
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       0D4B4EA554EA022A927E3584922C739759ADCCFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          2B
Signing time:             Tue 13 May 2025 22:44:39 +0000
Manifest this update:     Tue 13 May 2025 22:39:39 +0000
Manifest next update:     Thu 15 May 2025 00:53:39 +0000
Files and hashes:         1: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: sDn+4Uu4m4W5bslIPmCXR04C2X/8MTPWAS8yBpOzj8A=)
                          2: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: a6f42d45bxiLHIMWETpqkEcBoAgdph66Eltfz5OsBcc=)
                          3: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=)
                          4: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: SUf8Tu5fQcHqLEG/X+IxVdXyuVJi2uKIfsZ97S4Dyj4=)
                          5: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: 3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=)
                          6: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: jHEp77ey3eYInyX7NnipiftUAAgDp3GkFWmhML9L1Yg=)
                          7: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 00:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4b:4e:a5:54:ea:02:2a:92:7e:35:84:92:2c:73:97:59:ad:cc:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: May 13 22:39:39 2025 GMT
            Not After : May 15 00:53:39 2025 GMT
        Subject: CN=6DE8B4BACD1D09603DDEF3C8CBFF22B9C5A6F644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:84:fd:2d:1d:9b:14:c7:de:85:b6:cb:57:
                    49:21:5d:25:60:13:12:13:2b:d1:ec:b6:f7:f2:2e:
                    33:1c:91:b6:c0:05:a1:81:ca:a1:1c:df:9d:93:46:
                    cb:18:be:4a:d8:1c:e1:ce:88:25:18:41:53:8e:94:
                    cc:03:ca:0c:03:78:8b:b5:90:02:33:60:8f:e2:3b:
                    04:bf:11:fa:53:d4:ba:e2:a5:f9:e0:ab:82:53:0a:
                    a1:7e:1d:92:02:fc:ae:75:b8:54:d1:28:79:82:14:
                    6e:d3:af:29:23:af:22:20:01:0d:87:b1:30:d8:9d:
                    fd:ce:4b:40:b5:58:fc:fd:5b:90:21:9b:7c:e3:8c:
                    91:92:9e:32:3b:1f:77:ed:cd:84:72:ee:15:4e:a3:
                    4f:6e:20:2b:5f:fb:37:13:0d:07:61:e4:5f:bb:d1:
                    06:35:a8:74:8f:f1:9e:a1:26:a2:65:33:3b:1e:8c:
                    6a:c5:d5:f4:59:0c:75:87:e4:ce:45:88:5e:d1:ee:
                    62:4e:fa:e3:01:13:fb:64:d7:e1:94:ad:63:b6:01:
                    8a:8a:fa:a5:58:3f:4f:6e:7c:7e:9e:ce:6e:7e:cf:
                    1f:d9:0d:82:c7:6e:b0:2a:4e:3e:d9:9f:6a:41:c5:
                    44:7d:0a:48:3c:30:47:b6:db:25:57:a1:1e:59:47:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E8:B4:BA:CD:1D:09:60:3D:DE:F3:C8:CB:FF:22:B9:C5:A6:F6:44
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:82:22:11:7d:84:5d:3e:ad:92:79:53:3a:96:ab:61:6d:67:
         b7:67:19:df:0e:1c:52:c3:d0:a8:59:0e:fe:e6:b2:70:e2:59:
         62:8f:75:d0:c6:ed:4f:0c:1c:40:2a:01:bc:60:99:29:76:69:
         ca:61:11:93:d4:f9:3e:a0:e8:e7:62:2a:9a:77:bb:5d:40:57:
         79:34:52:d0:ce:7c:21:aa:5b:13:f5:29:fc:10:eb:33:47:6c:
         44:ff:4a:d8:06:e2:ae:58:f4:dc:12:0a:09:7b:0c:2c:89:fe:
         82:4f:cb:58:e2:d8:25:37:94:3b:ea:61:f0:33:8e:9f:7d:98:
         9c:41:d4:d0:4b:9e:71:2f:29:77:29:c2:6b:d6:70:c1:96:19:
         83:e0:88:00:db:65:85:89:c0:10:ac:02:73:f8:10:e7:bf:0e:
         f7:40:b3:57:c6:4d:dd:af:02:30:39:60:54:51:1a:94:24:78:
         8b:ca:65:31:38:f9:77:3b:95:09:01:30:0c:fb:28:e9:1e:43:
         dd:91:9b:23:b2:e2:e7:5b:a9:5e:ab:10:17:5d:09:d8:64:8d:
         f7:de:53:3d:10:ba:c3:0d:05:2c:b3:db:46:16:18:2e:46:a3:
         4d:29:5f:49:d1:f0:0e:9a:d5:5f:f7:47:aa:7d:d8:20:b7:82:
         59:3e:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:29:43 2025 by rpki-client