Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
File:                     4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft (raw, json)
Hash identifier:          7jypllzunL3EBFqD1kMxIkHhyBrJ445A3BQ+LK2VYC8=
Subject key identifier:   E9:36:75:CB:E2:B0:6E:74:99:F8:19:4A:9B:6E:23:25:4C:F0:EB:89
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       6F3439AE32BD48AEE6F1E017CF788818E44FB42A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
Manifest number:          021C
Signing time:             Wed 14 May 2025 23:16:09 +0000
Manifest this update:     Wed 14 May 2025 23:11:09 +0000
Manifest next update:     Fri 16 May 2025 01:03:09 +0000
Files and hashes:         1: 34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa (hash: AwKwCZdwbOUibuNR1i8XrT9Tfaror0z1Pm6/W6G5zwc=)
                          2: 4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl (hash: W9HIRF/FtBc/rqMAZtEgGUFGYlilJgvNGVBFz81aJpY=)
                          3: 323830343a376566303a3a2f33322d313238203d3e20323731363536.roa (hash: BSWaPmS67xRVsnW3AMVQYa8EI6CRtHNg5ATogTv70Zs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 01:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:39:ae:32:bd:48:ae:e6:f1:e0:17:cf:78:88:18:e4:4f:b4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: May 14 23:11:09 2025 GMT
            Not After : May 16 01:03:09 2025 GMT
        Subject: CN=E93675CBE2B06E7499F8194A9B6E23254CF0EB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:a2:03:69:b1:65:cf:69:cb:8b:34:ff:2a:
                    74:50:a9:f3:4c:74:a6:31:8e:bd:c4:42:ca:15:80:
                    33:e0:75:61:24:ab:07:63:56:19:e3:cb:2b:ac:98:
                    dc:69:0c:c1:36:d3:f1:91:ef:4f:ef:04:61:6b:68:
                    62:80:42:24:d2:2c:e3:94:61:73:13:2a:4e:d1:e9:
                    f5:86:2f:5a:96:4b:42:aa:43:bc:53:e3:98:36:f6:
                    b5:27:55:62:d9:91:99:ce:9b:0f:75:cd:63:53:1f:
                    a9:5f:a5:f4:2f:d8:3a:13:28:bd:2c:bb:41:e2:cf:
                    0f:2e:d2:88:4a:b1:18:86:a6:ac:2f:b8:ec:98:67:
                    5a:4b:61:64:ed:c8:6a:2c:e6:c7:b0:d5:40:16:b8:
                    5f:a1:88:5d:1f:c5:e3:f6:c0:7a:a9:29:62:d7:bd:
                    99:1a:b2:fb:03:ca:a6:d5:e7:44:97:b0:ee:88:91:
                    33:83:5e:04:26:db:01:ff:ec:12:f4:84:cf:04:83:
                    19:42:2a:7e:2e:3c:f3:9c:ab:12:39:3c:8d:e8:ab:
                    29:58:3a:46:2b:5e:49:ce:da:51:d8:86:8a:a3:c6:
                    e1:be:12:ad:da:12:a3:26:f1:31:6c:5f:a1:6d:99:
                    7b:a9:6e:77:9b:47:f1:85:b4:95:b8:66:1a:d3:68:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:75:CB:E2:B0:6E:74:99:F8:19:4A:9B:6E:23:25:4C:F0:EB:89
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e2:d1:14:1b:31:3e:ea:b8:86:7b:e8:c9:bb:ba:33:d3:a9:
         4c:59:49:34:a0:87:ef:1c:10:ac:de:9b:e7:c4:20:b2:6b:63:
         7d:0a:3a:92:b3:9f:79:7a:8d:5d:7d:78:8e:cf:2b:0c:ab:08:
         31:e2:ae:ab:19:7b:cc:45:9e:d1:79:36:91:66:7d:91:37:14:
         34:ee:65:3b:18:5a:d0:7c:77:7b:18:f6:e5:0a:06:b5:27:72:
         56:17:cb:b8:75:67:63:dd:6f:b9:ad:9d:f7:b6:bd:d4:69:90:
         ab:97:79:97:0e:77:c6:e0:09:0c:36:ce:24:5f:d6:e1:8c:47:
         d8:8d:6a:a0:84:d3:87:d0:bb:fd:47:c0:5d:bd:c1:68:a4:cc:
         19:d2:45:aa:d4:8f:93:43:59:ea:c0:54:38:49:fb:a0:d3:e1:
         47:63:0a:e1:f2:ff:11:ad:97:01:4a:30:7f:ea:5d:f9:02:63:
         24:63:0d:4b:b4:58:18:05:a7:8b:4f:6a:45:d0:cf:1a:b5:48:
         cb:86:77:98:74:b7:63:68:2b:5f:6b:e4:db:0b:36:c2:f5:db:
         65:e4:83:3c:26:87:3a:3f:48:2d:23:b8:7e:f6:10:ab:94:dd:
         c1:60:8b:66:fd:76:de:5d:0a:a8:74:1c:7b:04:b7:86:9b:9d:
         9f:1a:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:03:33 2025 by rpki-client