Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
File:                     6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft (raw, json)
Hash identifier:          3Vi3f+/g6qQK/ILknUr9IqDFoPEUPll1bLLIq+eZIhg=
Subject key identifier:   F6:8F:4C:42:C5:F4:94:92:AF:1B:DA:A3:94:80:7C:9D:2B:07:33:43
Authority key identifier: 6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1
Certificate issuer:       /CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
Certificate serial:       2A0C0A0CB8E302E9FBF508085ECC3BAA33816035
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
Manifest number:          0217
Signing time:             Mon 12 May 2025 14:44:39 +0000
Manifest this update:     Mon 12 May 2025 14:39:39 +0000
Manifest next update:     Tue 13 May 2025 16:47:39 +0000
Files and hashes:         1: 6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl (hash: RsQd3WBuZ4Kx8pj3DZP0CEt99qpcnHgG3ISJy8m7AO8=)
                          2: 3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (hash: s2m/rSCGWtXFgQ0ZfdSHKZmWkAcKxBcAVuMFFal50mU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl
                          rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0c:0a:0c:b8:e3:02:e9:fb:f5:08:08:5e:cc:3b:aa:33:81:60:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
        Validity
            Not Before: May 12 14:39:39 2025 GMT
            Not After : May 13 16:47:39 2025 GMT
        Subject: CN=F68F4C42C5F49492AF1BDAA394807C9D2B073343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:1f:48:f5:ad:e6:c3:24:66:c5:84:49:31:
                    b1:b9:59:2e:bf:73:c0:11:3c:22:ad:2e:38:4a:dd:
                    d2:a2:0a:ed:b5:db:4b:e5:7a:20:3f:0f:03:28:7b:
                    63:8f:95:75:2f:62:74:a0:44:e3:16:48:63:b0:82:
                    21:20:10:5b:fb:4e:72:e0:da:3c:cb:16:c4:56:54:
                    6e:c8:e9:c9:ab:f0:58:e2:b8:97:29:4d:a9:53:69:
                    17:d6:e7:57:7f:83:f1:ba:dc:f2:6d:a3:39:09:35:
                    9e:a2:a9:67:19:d2:c5:59:de:f3:9e:ff:1e:05:b3:
                    6d:69:e0:f4:70:95:e0:4e:e1:32:b6:7c:67:fd:33:
                    a1:e2:15:4b:44:1c:8b:fb:ab:cc:73:45:f3:ca:fc:
                    9c:ca:a6:e8:40:12:9e:d8:a9:2b:c4:1f:9f:57:91:
                    35:c4:80:a6:05:20:42:4f:ec:c4:5f:1b:10:80:64:
                    cf:3d:61:48:e4:ca:21:eb:3f:59:bc:6d:73:f5:ba:
                    f1:94:0c:72:b8:63:06:51:24:d8:0a:5b:83:17:a0:
                    31:d3:55:c7:bc:55:f7:83:62:d0:ab:ed:15:30:14:
                    6a:20:ad:3a:6e:d4:b9:96:bc:d1:c0:46:4f:3c:8f:
                    58:80:d2:81:54:8e:96:35:da:14:9d:30:63:30:67:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8F:4C:42:C5:F4:94:92:AF:1B:DA:A3:94:80:7C:9D:2B:07:33:43
            X509v3 Authority Key Identifier:
                keyid:6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:38:08:e3:83:aa:74:00:97:6d:78:2c:fe:6d:35:ba:47:53:
         5f:fe:ac:a1:bf:a4:92:c6:40:0f:b0:a4:c0:1c:bf:3b:c0:36:
         39:34:e7:33:9e:d8:40:73:ab:26:41:0e:18:c1:cf:f5:6f:91:
         72:21:aa:cf:54:d4:1c:1c:41:2a:97:74:55:1d:e2:a3:93:10:
         ac:66:61:7a:97:21:5d:0b:6f:98:46:21:db:3a:ae:9c:b0:2d:
         1a:9f:de:e9:08:52:ef:52:f4:a7:ae:f4:a9:8d:f6:5b:d3:8d:
         4c:74:6e:75:6f:e7:e0:cc:3f:73:3f:0a:b9:cd:19:b8:90:d7:
         7c:c9:c4:cf:c6:64:7f:30:04:81:25:c9:c8:2e:6a:f9:d0:18:
         f8:d4:9b:75:3c:cf:20:34:1c:64:54:38:4e:a6:f9:cf:26:62:
         9a:4e:74:56:45:21:8f:3c:59:18:ab:44:68:aa:2f:8f:72:cf:
         48:d1:ec:30:b9:98:59:b0:c6:03:37:7d:c2:ec:8f:e9:02:28:
         70:54:a9:5a:c7:6e:0c:3a:a3:1b:3d:96:5a:94:3d:4c:78:93:
         56:30:c1:1e:27:bc:b6:5c:c3:71:17:81:43:0e:1c:a1:1c:20:
         48:a8:e2:3b:57:ee:35:05:ee:2e:e0:09:95:85:3c:70:4a:e7:
         7b:66:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:20:27 2025 by rpki-client