Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
File:                     484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json)
Hash identifier:          NNkP4sqYvW/fGzEul+Irz+5KJBuiD+DIsLMJwCUe0hk=
Subject key identifier:   95:8C:5B:74:F2:AF:6C:53:FE:67:C4:5A:06:E7:C3:16:A4:92:03:0F
Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3
Certificate issuer:       /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
Certificate serial:       244728A4B11600FD338FFDA483077C03FE0D86A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
Manifest number:          0257
Signing time:             Mon 30 Jun 2025 00:40:37 +0000
Manifest this update:     Mon 30 Jun 2025 00:35:37 +0000
Manifest next update:     Tue 01 Jul 2025 02:10:37 +0000
Files and hashes:         1: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=)
                          2: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: cXT1G74sAeWandwstsqLJa+qfnKSnelyZtdJz2J/9Yk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl
                          rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 02:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:28:a4:b1:16:00:fd:33:8f:fd:a4:83:07:7c:03:fe:0d:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
        Validity
            Not Before: Jun 30 00:35:37 2025 GMT
            Not After : Jul  1 02:10:37 2025 GMT
        Subject: CN=958C5B74F2AF6C53FE67C45A06E7C316A492030F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:97:ff:b2:1c:1e:a4:8e:58:b3:25:7d:58:
                    d2:79:95:be:73:e5:3f:c9:37:9b:cf:fe:a3:81:4c:
                    e1:de:ca:19:8d:e6:b8:d9:f1:c7:ed:03:3b:9d:9f:
                    be:ec:28:d8:d0:7f:d3:7b:8f:03:e9:8a:e3:3a:26:
                    01:ff:4f:ed:22:f7:5b:a8:38:1b:29:49:6d:26:55:
                    23:21:ac:3f:5e:ef:5b:51:7d:f9:bb:c1:bf:7d:17:
                    16:c6:25:fd:bd:66:68:d6:33:69:c3:dc:64:fd:da:
                    2f:38:a6:b7:52:65:16:36:5b:28:91:76:63:56:67:
                    90:4c:f0:1a:35:c6:34:2a:f3:20:43:af:b1:e3:26:
                    a1:b5:1c:be:aa:e4:a9:d3:80:d8:51:7b:e3:62:d8:
                    69:e0:71:22:7d:e2:b9:c6:fa:c7:de:5f:2b:e2:bd:
                    80:d5:cf:2d:46:09:ae:19:43:5c:62:d7:86:47:49:
                    f8:df:79:b6:4e:9a:f7:00:8e:80:fe:1a:89:96:91:
                    58:33:e6:b7:17:55:92:2a:1d:c4:27:06:b3:30:1d:
                    af:6d:c5:11:73:07:fc:94:7e:05:6f:24:5c:2e:e9:
                    35:5a:6f:38:13:d8:76:bb:99:63:d6:0d:9a:d2:b4:
                    4e:c9:b0:d8:a3:45:ba:21:6e:13:02:1a:eb:8f:3d:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:5B:74:F2:AF:6C:53:FE:67:C4:5A:06:E7:C3:16:A4:92:03:0F
            X509v3 Authority Key Identifier:
                keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:aa:d2:df:69:10:03:5a:c2:0c:79:47:d5:b0:a0:17:0c:62:
         d1:bb:2c:39:df:0d:32:00:b2:1d:2a:ee:55:ae:53:e0:7b:4b:
         fd:96:9a:12:dc:17:29:f3:41:bd:3b:b1:42:81:3d:f2:4c:d2:
         dc:e1:de:5b:b9:cb:76:35:d2:2d:de:b8:25:22:5d:3d:55:78:
         4c:1d:69:34:b3:57:c8:da:f7:a6:5b:24:41:09:50:9e:1d:bd:
         43:ba:f8:8f:69:40:06:f7:17:6c:5c:84:ba:87:b4:8b:b0:dd:
         f7:7a:e6:29:dd:24:f3:0d:fa:37:c9:43:05:d6:bd:d4:df:d8:
         9b:e4:0d:02:82:2b:54:7d:bf:99:fd:90:3f:01:85:c9:81:0d:
         9e:19:a4:14:d2:f5:c2:ae:3f:18:55:49:72:65:a9:0b:5f:82:
         69:00:b3:f0:a9:1d:9a:a2:21:d9:e6:2a:25:13:e9:a3:1e:47:
         2f:2f:6d:60:33:25:ad:a0:63:69:8e:28:06:1b:d4:48:73:b9:
         ad:4b:59:3b:6e:6d:a9:35:99:10:74:18:2d:a4:63:f3:1b:d6:
         b0:94:23:2c:a4:4d:7c:6b:6c:40:1d:47:54:97:fb:9b:7e:1f:
         d1:84:81:a2:6c:6d:dc:bc:ea:af:83:5e:8f:df:4e:4b:89:9e:
         2a:ee:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:24:33 2025 by rpki-client