Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
File:                     6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft (raw, json)
Hash identifier:          dk6XSBbUmZll1BmlZUfXvYzqI8wmL6ufNM5pG9oO+MU=
Subject key identifier:   85:13:16:8F:CD:C3:D5:5B:3C:9E:CD:D3:84:EE:EE:20:9F:C6:E5:9C
Authority key identifier: 6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1
Certificate issuer:       /CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
Certificate serial:       60BCAF9C075F2BD7A46783B0B88DBF18E7F73847
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
Manifest number:          025B
Signing time:             Wed 02 Jul 2025 11:55:46 +0000
Manifest this update:     Wed 02 Jul 2025 11:50:46 +0000
Manifest next update:     Thu 03 Jul 2025 15:14:46 +0000
Files and hashes:         1: 3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (hash: s2m/rSCGWtXFgQ0ZfdSHKZmWkAcKxBcAVuMFFal50mU=)
                          2: 6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl (hash: HqQZ6/zLLMS5XeE54a/0yzKv65flFIEubT0ej/igA10=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl
                          rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 15:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:af:9c:07:5f:2b:d7:a4:67:83:b0:b8:8d:bf:18:e7:f7:38:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
        Validity
            Not Before: Jul  2 11:50:46 2025 GMT
            Not After : Jul  3 15:14:46 2025 GMT
        Subject: CN=8513168FCDC3D55B3C9ECDD384EEEE209FC6E59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:a4:2e:db:af:b2:b2:b0:f0:36:2a:d1:00:
                    86:68:06:48:ce:6a:7e:bb:46:05:87:f5:cf:f2:4a:
                    2d:67:64:1f:3d:f1:77:5a:4f:75:d2:ab:6c:83:ce:
                    67:7c:74:0e:b1:cc:c1:6f:56:ca:31:af:a1:3b:ea:
                    b4:73:d0:c1:d7:50:01:ce:d0:db:2b:f9:60:70:33:
                    e2:f6:04:40:e8:d3:70:c3:5c:ef:56:7a:de:0c:28:
                    4a:37:43:70:85:c9:97:62:2e:dd:d0:f9:1e:7d:13:
                    eb:2c:ae:fc:a0:5a:38:60:3f:7e:5e:97:35:c6:5a:
                    0a:9f:a8:b1:24:5b:4e:76:b7:4a:35:c1:4c:f4:14:
                    ca:09:c7:79:96:4f:28:2e:56:1d:58:72:0b:b6:9d:
                    c8:47:48:25:92:bf:f8:62:2e:5b:65:05:86:08:70:
                    6c:7f:8b:59:08:a1:89:c4:5d:43:50:1d:38:93:23:
                    06:18:37:01:45:4b:f6:06:22:1d:f5:2a:42:6b:73:
                    2a:e1:1f:08:92:9d:5f:57:2d:1b:88:cb:c6:d4:67:
                    94:f3:79:74:5f:ba:9e:ec:c5:47:4b:77:2f:03:17:
                    34:18:1d:0f:f8:10:ec:b6:d7:71:dc:30:41:9e:07:
                    09:b6:fc:2a:a9:14:52:8e:eb:79:0f:af:5a:1d:9c:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:13:16:8F:CD:C3:D5:5B:3C:9E:CD:D3:84:EE:EE:20:9F:C6:E5:9C
            X509v3 Authority Key Identifier:
                keyid:6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c9:cc:66:ed:48:1d:02:a2:3e:08:12:40:90:30:8a:ab:4b:
         41:87:e0:6b:8c:79:d9:59:9c:c0:2d:40:0e:02:27:9e:6f:0a:
         05:1e:e2:45:a2:1c:a9:3f:6a:58:28:76:fa:e7:ec:79:5a:d6:
         72:b5:67:4f:3c:d5:bd:8e:50:1d:3e:ce:5a:dd:5d:80:b6:3b:
         99:6a:40:d3:93:8b:8f:97:44:36:ba:73:fc:b2:8c:7f:9a:d7:
         de:20:de:d4:0f:9e:d9:76:ed:c3:1a:57:8f:94:35:48:3b:bc:
         bf:13:21:37:8b:7c:76:d0:8c:93:9f:4f:d3:b6:24:27:db:19:
         fb:2a:cc:63:11:07:79:8d:59:21:08:f0:b2:0f:10:a2:49:5f:
         df:fa:c2:5c:0b:40:10:32:cc:2f:45:a6:76:8a:dc:90:67:73:
         61:75:d4:b3:bf:00:0c:a1:7f:dc:05:fd:57:ee:b9:bc:69:87:
         2f:fc:a1:0e:88:4c:9d:98:8d:15:3b:c7:5b:72:e6:e5:11:7f:
         7f:f7:ae:3b:b9:43:de:7a:d7:4b:46:af:06:87:de:2b:09:d4:
         8e:6d:11:b2:36:d8:79:c2:07:ea:b3:45:0f:a3:cf:2f:04:38:
         c6:a4:c7:46:bd:4b:20:64:1f:bc:30:94:9b:14:76:ae:99:7b:
         a9:aa:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:33:27 2025 by rpki-client