Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft
File:                     DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft (raw, json)
Hash identifier:          ox+U2aogU1fyewdMjGLMqtEkWxkuADLDYzjRSdf83Pc=
Subject key identifier:   6D:61:01:E6:27:48:FC:E9:15:19:00:45:FF:87:21:8C:47:A0:A6:39
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Certificate issuer:       /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial:       304B341B9F2C1AF2C2A8DFD4F26E1DE4E1704CAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft
Manifest number:          025B
Signing time:             Mon 30 Jun 2025 13:00:42 +0000
Manifest this update:     Mon 30 Jun 2025 12:55:41 +0000
Manifest next update:     Tue 01 Jul 2025 14:34:41 +0000
Files and hashes:         1: 3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (hash: Xk4SrT+GGGaVOhZ2xRbts1hOkz1NsKHieSFrxk2a40U=)
                          2: 3137372e33392e32342e302f32322d3234203d3e20323632333734.roa (hash: 8btmXSaBtEzeaDhVHhrjiatoOh7icMAxg+Q/rOboO7k=)
                          3: 3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa (hash: WCiiT1lhiaxrzOBC2c2piDJqkG+wgpOj5cOhDI/yP08=)
                          4: 323830343a3837383a3a2f33322d3438203d3e20323632333734.roa (hash: Y3egpxn9zRsePkuOz6YzMykOrAKbPBDohNlu7Jrp3Jk=)
                          5: 3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (hash: QR0TJ7RbUcQz9xIQPmKNnxula9nPlMTY2H1rGXD6axc=)
                          6: DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl (hash: Dkk4yxvRWYNHOFbpDSORG1c4TJbtZVziOLgLTwQLbew=)
                          7: 3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (hash: p9856q7w7GJN6flH1gL4ZOGuJX2vtNFTqkg5+jMeg9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 14:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4b:34:1b:9f:2c:1a:f2:c2:a8:df:d4:f2:6e:1d:e4:e1:70:4c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
        Validity
            Not Before: Jun 30 12:55:41 2025 GMT
            Not After : Jul  1 14:34:41 2025 GMT
        Subject: CN=6D6101E62748FCE915190045FF87218C47A0A639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:94:a8:65:75:a0:46:d0:54:80:2f:7a:cc:
                    54:b7:e2:eb:69:16:dc:10:21:43:de:1d:c6:c5:bd:
                    95:d6:f5:ee:95:62:e9:a8:ba:ad:28:c0:c6:dc:41:
                    23:ac:d3:ee:a7:45:92:b5:6b:6b:fd:db:92:f4:9b:
                    bf:9c:4d:6f:53:32:5e:06:25:32:85:5d:1c:b9:f2:
                    0d:82:81:a4:ae:d5:78:07:67:81:a8:db:f0:8c:d2:
                    28:23:02:51:8a:78:02:a5:f0:c6:e8:ef:36:ca:a0:
                    79:74:07:d1:4e:d4:c0:5b:52:23:31:2a:03:da:e2:
                    fc:5c:1c:7d:52:0b:85:a5:2e:09:94:a1:fb:b0:32:
                    94:bd:fb:52:96:af:4d:1c:02:9e:6d:a8:58:f8:7a:
                    4d:1d:04:50:74:6b:7e:5e:e5:3c:db:b4:2d:81:da:
                    f2:b0:b7:35:40:7a:a5:d3:ab:b1:39:d6:77:8a:03:
                    c0:f7:6a:85:f9:1c:4a:2f:21:c0:a0:0b:a4:47:dd:
                    5d:a1:d5:5f:d7:6d:9c:67:4b:e7:cc:26:eb:be:94:
                    c1:2b:7c:f4:f5:71:b7:e5:f6:b7:c3:95:f0:ee:c1:
                    62:1f:7c:7f:e3:4f:dc:4a:48:97:fa:bc:c2:97:6d:
                    d4:95:3f:2c:2f:5a:ef:ff:dc:0a:57:a7:59:57:f9:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:61:01:E6:27:48:FC:E9:15:19:00:45:FF:87:21:8C:47:A0:A6:39
            X509v3 Authority Key Identifier:
                keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:da:7b:94:4e:d6:02:63:cd:0a:58:7b:b6:55:65:2b:0c:
         9e:5d:24:b8:c2:6b:16:6b:ad:c8:78:00:b4:e2:06:97:9e:51:
         99:ae:5f:ca:fb:4b:cf:6b:c1:20:54:73:20:0c:22:11:d9:2b:
         93:8f:55:ad:fd:4c:d4:20:62:79:d7:41:a7:ce:6f:39:11:91:
         4a:be:ab:bc:ff:da:84:a6:d2:23:b8:4f:89:da:ac:8c:c8:17:
         15:28:ca:55:be:5c:14:24:92:eb:c4:16:06:89:bd:06:b3:83:
         9d:2f:7c:22:7b:49:89:13:e2:91:2b:52:1d:df:ff:c2:67:3b:
         83:b3:65:8a:eb:65:a6:2f:91:68:d9:40:b6:70:9d:e4:47:f4:
         57:55:bf:33:cd:82:8c:28:73:82:2d:91:c2:19:bd:f8:8e:df:
         b1:04:b5:c4:a4:84:b8:f5:32:80:8e:c2:59:f0:ae:55:c9:90:
         81:62:9e:29:1c:14:31:d9:27:19:d1:27:10:84:02:4a:75:fb:
         6b:fc:19:e4:8b:d8:d5:68:7f:6c:13:93:94:2c:db:a2:cf:8a:
         60:6d:1d:73:1a:78:2a:80:76:08:02:e8:70:08:db:e3:1e:98:
         f3:c4:0c:f8:a7:05:45:3b:1d:fc:19:a9:d5:47:6e:a0:86:4c:
         06:ac:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:01:08 2025 by rpki-client