Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
File:                     DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft (raw, json)
Hash identifier:          d5SIy0dNwD5R1Z7yzglPwHVrivqx2i/pPjaDwUe/RR0=
Subject key identifier:   71:A9:7B:85:9E:DF:E0:76:3D:F7:B7:9F:8F:FD:C5:72:4A:27:90:30
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       0D843ED9D6C777D817F7115F6515F81DC6F1B4BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
Manifest number:          0258
Signing time:             Mon 30 Jun 2025 00:05:41 +0000
Manifest this update:     Mon 30 Jun 2025 00:00:41 +0000
Manifest next update:     Tue 01 Jul 2025 00:38:41 +0000
Files and hashes:         1: 323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (hash: DWL3wU1j9/tLvHYS1dyFWxVgwqL+A2vsmPkeTD1xNuA=)
                          2: 323830343a343666633a3a2f33322d3438203d3e20323637303234.roa (hash: 0NBW+l9oQvgut+Wpp8Bb1HAjDdw9+mIwXXr8N5HctTA=)
                          3: DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl (hash: 6YOPVMYsPsxAuU7Ap50tYltVTBNfQ/1D1Qzmo4f79aI=)
                          4: 323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa (hash: ZpGbXyZPQV1RAhEmtqOTxYMrUDE2M/wfiHPg1NwBBUg=)
                          5: 34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa (hash: oVjQhgspeltuV28tjxBz4iFQBhqnc2zEoJwPptISWck=)
                          6: 34352e3232372e3131322e302f32342d3234203d3e20323637303234.roa (hash: NbuMp6zwIPF0O7p39k96W67CEvlo0InSX/oh1MCa9MM=)
                          7: 34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa (hash: Ev7k/0Z/euV4Q2GhoimUlecZQe8xwwzmeRYzoYIJnXA=)
                          8: 323830343a343666633a3a2f33342d3334203d3e20323637303234.roa (hash: JmbvOjVKbR/XYJut5SHfgiOn1lqjtci9jd0EVLJXXL0=)
                          9: 34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (hash: abY2ZiwLus4Y0y8kU8Bbk1j9YGW0GJGomWVx/NV1F0s=)
                          10: 323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (hash: 7gX4nW50jeu8Gj9fE88BAIsPqLu+xcmsC18pJl1XV/Q=)
                          11: 323830343a343666633a3a2f33322d313238203d3e20323637303234.roa (hash: L9M53YB4o7JNc7dDg3XjTGRgx6YePRqEVkPp8+b2wk4=)
                          12: 323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (hash: GNGQttzmJcudreL/5tnOmzIRIQeCdkDFJkbGS5ZFna0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 00:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:84:3e:d9:d6:c7:77:d8:17:f7:11:5f:65:15:f8:1d:c6:f1:b4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Jun 30 00:00:41 2025 GMT
            Not After : Jul  1 00:38:41 2025 GMT
        Subject: CN=71A97B859EDFE0763DF7B79F8FFDC5724A279030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:27:60:82:27:87:33:c8:20:94:8d:d6:40:
                    23:7e:d4:60:8e:bc:49:c4:e9:35:18:59:a7:32:87:
                    cb:77:cd:7b:47:26:fa:22:40:be:19:e1:5b:80:46:
                    20:14:33:3b:e2:ed:fa:6c:df:fd:2d:0a:e9:28:52:
                    77:04:68:41:0c:bb:c9:18:fc:2b:6c:76:36:8a:01:
                    3a:2d:85:3f:a6:24:75:e1:9f:93:8a:1d:f3:22:46:
                    a6:bb:63:cc:c2:97:27:b7:9e:22:a2:60:15:fa:83:
                    22:31:27:61:a1:55:0e:8b:a9:01:ee:0a:72:12:2c:
                    13:34:19:d8:82:6c:ef:1d:9c:f3:4a:de:e5:cf:fb:
                    e0:66:6f:5a:a2:5f:d0:fd:b6:ca:f0:83:35:36:c9:
                    75:e4:17:f3:65:7e:fa:52:40:37:f0:fe:ca:fa:b5:
                    64:e2:ac:9c:71:27:5d:f8:a5:59:c0:3b:1f:c5:0b:
                    52:54:02:8d:1a:07:cb:c6:d4:fc:90:72:ce:3f:46:
                    2e:76:01:36:13:1a:3e:b9:60:04:08:7b:ca:c2:82:
                    ea:a6:8a:64:a7:19:5a:ee:a4:fe:88:35:9a:81:aa:
                    40:11:c1:0f:7d:01:9d:80:62:67:8e:48:52:87:d3:
                    11:90:66:f5:bf:a4:8f:35:24:90:88:bf:09:fe:18:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A9:7B:85:9E:DF:E0:76:3D:F7:B7:9F:8F:FD:C5:72:4A:27:90:30
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:56:64:6d:b4:1f:cc:64:ce:76:1d:a0:27:fa:8b:9f:8a:
         40:b1:c6:f0:51:56:22:7a:d1:e6:64:a9:6c:ff:a3:6b:67:fe:
         7a:fd:f0:ea:54:82:64:d0:43:e0:49:e4:b5:0b:83:fd:51:f8:
         3d:ae:5e:09:db:f6:db:09:27:b6:4b:00:ab:88:df:94:45:1c:
         e6:8e:68:5a:7c:ec:18:9c:4e:44:07:f9:f3:51:ae:23:5c:bb:
         46:4a:c2:74:df:85:16:8a:d0:f4:a7:93:2b:4c:78:0e:60:4c:
         e3:e3:78:96:b5:c2:fd:3e:e7:90:f2:de:f0:a4:4d:00:6e:ac:
         13:89:f0:3c:98:99:48:12:d1:c8:97:5a:c5:d4:a5:54:4e:da:
         08:d0:0b:77:9c:3b:5b:ab:cc:55:3e:54:80:e5:eb:0b:f9:a6:
         d0:8c:85:78:41:c6:2d:b2:81:f3:07:b5:27:55:0c:d3:66:fd:
         b5:cd:95:f9:1c:a1:db:ec:ef:7d:86:a3:de:0e:e8:73:b9:f2:
         04:c8:54:4e:a3:1c:aa:da:2a:08:05:1c:c7:39:31:5f:62:d9:
         46:30:3e:35:24:f5:8f:c5:fd:9c:2c:37:81:cd:af:32:78:4c:
         0b:d2:12:c5:08:37:5b:47:15:32:ae:79:36:6a:a0:ce:5d:27:
         70:a8:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:23:53 2025 by rpki-client