Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
File:                     806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft (raw, json)
Hash identifier:          5sKVC90XFDKIBQnEuqdJXLWE68rxur3bgVKgyLs999Q=
Subject key identifier:   D7:44:69:E2:28:B3:EA:1E:C0:D8:C5:1D:97:3F:C5:E5:14:EA:D4:17
Authority key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52
Certificate issuer:       /CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
Certificate serial:       25E69E64502C87BB677E16500E23641E4D80FD42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
Manifest number:          0259
Signing time:             Wed 02 Jul 2025 22:15:14 +0000
Manifest this update:     Wed 02 Jul 2025 22:10:14 +0000
Manifest next update:     Fri 04 Jul 2025 01:31:14 +0000
Files and hashes:         1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: aJepNlwBajDAqgc6KneJ78CpKDsJPHnN/0pqAA8sjeQ=)
                          2: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl (hash: GfZgblsX7SNSKsuAMygrzB0F8qrZmV++cT6NUeCxQmU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e6:9e:64:50:2c:87:bb:67:7e:16:50:0e:23:64:1e:4d:80:fd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
        Validity
            Not Before: Jul  2 22:10:14 2025 GMT
            Not After : Jul  4 01:31:14 2025 GMT
        Subject: CN=D74469E228B3EA1EC0D8C51D973FC5E514EAD417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:46:e4:c6:36:2d:61:14:99:38:3b:5e:75:
                    31:94:f9:e7:94:49:08:90:b6:ef:c1:87:ad:33:f4:
                    1c:ee:80:06:c8:8e:63:ac:d2:6d:4c:ce:13:45:35:
                    80:7f:8c:16:e9:87:58:76:46:c0:77:c8:91:fa:06:
                    d6:32:3a:42:e6:66:c1:4c:2e:0e:b4:41:61:27:74:
                    b4:74:48:2a:37:e4:fe:0b:d3:86:83:a2:0f:21:a4:
                    b3:eb:14:26:a8:6a:9c:07:e1:63:fa:c7:a2:76:42:
                    34:7f:05:ef:be:58:43:03:51:74:32:5b:7b:4d:df:
                    84:f8:86:97:43:3c:10:36:48:5c:60:6c:68:34:2b:
                    e8:dc:9c:fe:8e:2a:3a:7f:4e:46:cc:24:15:15:e0:
                    bc:df:af:a6:a3:90:96:8f:9b:0c:b9:53:72:73:d1:
                    cb:13:c1:e7:ed:00:d9:a0:a6:47:f3:2c:fe:6a:14:
                    87:9b:dd:e0:f8:9c:d8:7f:9b:c4:60:f8:d8:26:e0:
                    4f:47:3b:7c:f1:17:44:cb:49:dc:60:b3:93:65:61:
                    cf:a0:05:99:f6:55:73:b2:f7:a0:d3:16:cd:cb:a1:
                    f7:27:0c:98:f8:12:a1:5a:97:73:09:bf:8f:0a:17:
                    32:cb:f4:f6:12:c1:8b:89:57:9c:63:2d:24:f9:89:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:69:E2:28:B3:EA:1E:C0:D8:C5:1D:97:3F:C5:E5:14:EA:D4:17
            X509v3 Authority Key Identifier:
                keyid:80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:34:6d:bf:29:de:74:4c:71:45:05:ba:26:8a:08:10:dd:3b:
         49:f7:3b:28:72:0a:d6:c8:c7:99:f0:e1:8d:b9:fd:64:f6:ed:
         a7:b0:d7:c8:49:73:7a:a3:0d:7e:1e:71:22:81:e6:a8:6d:a5:
         9c:35:18:ad:a1:c7:4b:8a:a8:7f:17:c6:fc:6e:7a:a4:35:b6:
         bc:d2:6b:71:e6:3e:fd:6b:b5:b7:5e:07:8d:58:28:67:52:20:
         b0:e6:0d:08:59:41:ff:35:19:4f:ef:95:3f:32:cb:fe:c9:7d:
         7f:0e:6c:f7:e7:ee:cf:da:8a:4c:5a:ba:d4:a6:2d:31:2e:aa:
         c8:b5:bc:5f:5c:d8:a0:e8:25:50:40:e1:61:9f:60:03:5c:db:
         b4:71:ad:a1:9c:8e:e4:e1:64:e9:e1:82:16:98:1d:f5:5a:97:
         31:1e:e9:08:62:af:f5:56:12:6e:a8:81:41:99:73:42:98:26:
         db:f4:ce:33:1a:c1:df:3d:d8:2f:50:56:32:e6:0a:90:c2:68:
         ae:1e:b8:81:37:9b:18:cf:ff:7e:52:eb:ff:a0:b9:37:97:ea:
         b3:51:e6:57:ce:06:f0:72:ae:51:96:c2:b7:2e:ec:70:32:2b:
         07:2d:b3:14:cd:b6:1c:88:27:69:0e:ef:39:44:26:8e:df:c8:
         9e:0b:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:07:48 2025 by rpki-client