Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
File:                     76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft (raw, json)
Hash identifier:          24LSsfeoAUiwFkPf5Zy1vB1X0SHSTg8/bDhJm4ciUfQ=
Subject key identifier:   F9:C4:02:60:16:70:0C:F7:7A:B8:F4:0D:0F:C4:43:95:6F:47:27:43
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       0665300F3751FFA13C3BF44E7E32747030E90433
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
Manifest number:          021F
Signing time:             Mon 12 May 2025 20:39:12 +0000
Manifest this update:     Mon 12 May 2025 20:34:12 +0000
Manifest next update:     Tue 13 May 2025 21:15:12 +0000
Files and hashes:         1: 34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa (hash: 57M5zT7bwnTdVuiEiGUC5SaiuybEBy3X/bHYDAY83DM=)
                          2: 34352e3233302e3233352e302f32342d3234203d3e20323637313737.roa (hash: mbKhrWXAekcijWc1e9HYQdf9gNVOSnAkP7t+tTNOnXA=)
                          3: 34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa (hash: duscJe1I+dFISnbZMdlBq3Cu6EIOS8C0XCoFj4T3DqQ=)
                          4: 34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa (hash: 9WTrEZhwAN2iKPnZJ845CUVsIzl6ulTEz4wn1k4+pxk=)
                          5: 76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl (hash: vyx0iqVBxPDAd8Epcmm6H1jmugiuPKXkANqfMMc0We8=)
                          6: 34352e3233302e3233322e302f32322d3232203d3e20323637313737.roa (hash: +aWi6zCfSQhFmPkYX4L6eOV889iP8yGCOKJkxR9AsbI=)
                          7: 34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa (hash: dphLzFHEk3uEJRWgNjoiQjPscx8SzHqwQ1LJr36za7g=)
                          8: 34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa (hash: ZSytagn0io8ordscWltef3mJBrwD+rC2j411ShxAXO4=)
                          9: 323830343a343935303a3a2f33322d313238203d3e20323637313737.roa (hash: 6+aX9Yw41Etjt8GnsMtvaEL2Jdx69VdQjepFNV8L/cg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 21:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:30:0f:37:51:ff:a1:3c:3b:f4:4e:7e:32:74:70:30:e9:04:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: May 12 20:34:12 2025 GMT
            Not After : May 13 21:15:12 2025 GMT
        Subject: CN=F9C4026016700CF77AB8F40D0FC443956F472743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:6b:58:46:3b:7b:83:74:12:df:b9:5a:e4:
                    c9:53:bd:78:98:bc:ef:b7:ef:34:94:b2:55:a8:a3:
                    00:3e:b0:0f:c2:24:d2:0c:68:d5:ce:76:b2:b4:e9:
                    1c:b5:1a:2f:d1:c2:69:55:35:79:bd:48:af:61:93:
                    f8:02:3f:f6:7c:7d:1d:28:05:9d:80:b7:46:37:a4:
                    df:f6:02:7d:f1:a3:09:ff:5f:53:be:47:98:6e:69:
                    1b:a9:af:8d:62:f3:cb:6d:d7:56:fe:03:74:98:af:
                    7e:b3:ad:de:b1:8f:25:4a:60:28:fc:ef:17:95:69:
                    af:fa:fb:82:3a:a8:02:be:4a:fa:f4:8f:e9:3a:0a:
                    0c:73:14:c3:b5:e0:93:16:6b:dd:fc:74:76:8f:e3:
                    dc:e2:c5:2f:c2:c6:13:ff:8c:ac:71:7b:91:8e:da:
                    ff:61:74:f1:2a:68:8a:73:db:ba:f9:4a:4b:ff:1f:
                    08:0a:0a:3e:55:bd:4d:d0:38:b2:5c:57:4e:1d:48:
                    e2:72:44:c9:5d:5a:76:b3:2c:69:33:50:00:41:50:
                    bc:ab:54:93:5c:4b:f1:d4:63:c4:e6:de:15:98:0d:
                    46:a2:d7:e9:93:ea:eb:71:9b:a1:2f:2a:e3:59:9f:
                    a2:2b:fc:0d:9a:c9:bb:4f:89:73:8d:cc:fd:ec:2e:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C4:02:60:16:70:0C:F7:7A:B8:F4:0D:0F:C4:43:95:6F:47:27:43
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:ba:8e:30:2c:0f:f6:9e:5c:d9:e0:c1:d8:5c:0a:9e:cf:
         3c:f5:ef:38:93:d8:fc:92:0e:c9:96:5f:01:23:75:7d:a3:33:
         b4:a1:d7:fc:bb:02:60:a0:a3:f9:a9:43:33:1c:86:bd:81:07:
         46:03:e1:ee:26:d1:36:b1:8b:c8:49:a1:b8:68:71:d6:b2:85:
         80:3c:8c:0e:12:0b:eb:4f:4d:f6:bb:c8:aa:11:21:5e:21:ad:
         8d:9e:47:bf:49:04:84:62:ef:16:cb:81:ec:b7:74:5f:96:40:
         84:2a:c8:f4:aa:3e:2e:5c:de:0d:c0:f7:01:c2:37:15:c0:94:
         9f:ba:51:01:3e:0b:22:3c:cf:7e:f0:02:f5:38:7c:6d:6b:23:
         a2:6a:60:12:97:92:02:d8:36:e6:cc:b9:e7:45:d1:8e:ee:43:
         ea:e6:39:03:be:bb:ad:2a:1d:84:8a:dc:c1:06:b8:5b:3e:9a:
         ee:1e:1d:d7:c3:63:68:ab:24:02:1b:bb:5a:79:63:7a:1e:ff:
         19:33:26:f1:96:fa:5b:b0:b2:41:95:30:64:88:d6:7d:06:bb:
         38:cd:b7:ba:d9:0e:66:74:52:5e:a6:fd:8f:a9:17:ef:15:e3:
         d6:70:66:58:f8:2c:5c:7c:d3:0b:34:85:34:92:af:33:55:72:
         96:b7:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:32:11 2025 by rpki-client