Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
File:                     C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft (raw, json)
Hash identifier:          hCmuX4X5uWSJWc1V1IoAsvWIijN0q2ILkcJZe8Hr1Mc=
Subject key identifier:   DE:6D:37:30:CC:57:32:C0:14:B2:F6:3A:F5:70:53:31:56:29:EE:82
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       79034784EE030EBE875EE2A38260175AF09F7660
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
Manifest number:          025B
Signing time:             Sun 29 Jun 2025 16:27:59 +0000
Manifest this update:     Sun 29 Jun 2025 16:22:59 +0000
Manifest next update:     Mon 30 Jun 2025 18:31:59 +0000
Files and hashes:         1: 323030313a313261343a666666663a3a2f34382d3438203d3e203430333536.roa (hash: 9/YOcZEBC791JT7+hlb2tQHen4Pgko7PETy+9QrH8Qg=)
                          2: 3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa (hash: t+FRAhQUKppjhn4KfNeK1ozh/Lg8/ZyoB6qtFQpDyyc=)
                          3: 3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa (hash: QK00rYq5ZWV0YhSkUw1Hgo2Cy2aBlZ7HKqc3o5/lTsk=)
                          4: 323030313a313261343a3a2f33322d3430203d3e203238333436.roa (hash: Ug6/vjQdgJBgBqRYRV59OAzin+XJffDRWUuvHcW7c88=)
                          5: C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl (hash: GcWjQsboAz8cu1YxcN4iuYFlsHa2DVAv2p9T+UeBtE8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl
                          rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 18:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:03:47:84:ee:03:0e:be:87:5e:e2:a3:82:60:17:5a:f0:9f:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Jun 29 16:22:59 2025 GMT
            Not After : Jun 30 18:31:59 2025 GMT
        Subject: CN=DE6D3730CC5732C014B2F63AF57053315629EE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:d7:1e:7e:23:7e:3a:e4:84:45:1d:45:9a:
                    aa:47:9f:90:5a:79:37:2c:82:d5:d3:24:cf:7e:e9:
                    6e:e9:e7:05:8b:b2:7c:69:3b:04:43:2f:00:01:fb:
                    b3:dc:d7:fc:ce:c2:61:e6:90:78:43:bf:6b:1e:72:
                    b0:cb:3f:2a:02:dd:0e:e2:06:9b:b7:cb:67:35:80:
                    36:7a:2a:88:9d:b2:27:e2:89:1b:4f:78:cf:71:2a:
                    b7:3b:0b:3e:e9:c2:b1:75:c5:e8:9b:79:29:48:06:
                    f2:3d:44:1e:0e:61:c4:45:69:12:aa:ce:bf:15:6f:
                    9f:b2:59:36:60:fb:6d:de:ef:8c:28:b8:ad:07:71:
                    11:8e:30:4b:c6:38:11:8e:7f:4e:0a:76:35:ba:c3:
                    1f:a5:61:cf:6e:82:ef:4a:d3:0f:22:bc:9b:e4:da:
                    d2:c8:da:3e:6d:62:4f:3e:2c:a5:2b:86:f9:c0:8c:
                    2a:90:fa:0a:77:99:ae:b5:bc:7f:63:9c:28:e2:50:
                    85:0c:44:b7:86:19:94:46:a4:62:74:83:47:a5:23:
                    e2:9d:a3:19:fe:f1:96:24:0a:59:d2:4a:2d:9d:04:
                    56:e5:b4:d5:a7:ae:fb:3d:a7:5c:4d:ab:aa:10:31:
                    b6:4b:9b:73:99:b5:2d:8f:63:6e:e2:e2:79:5a:fb:
                    13:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:37:30:CC:57:32:C0:14:B2:F6:3A:F5:70:53:31:56:29:EE:82
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:55:7e:a4:41:a4:b0:bc:79:2a:77:05:fb:13:11:36:de:
         0e:09:e8:4c:53:32:e8:ff:f2:55:47:f4:a7:7c:77:5b:49:51:
         91:e3:83:e8:1a:12:48:b7:b8:a5:b1:71:bd:c1:84:c4:b4:d2:
         ce:9f:a7:fc:9b:84:5f:f4:af:ea:58:b3:58:b7:3a:ac:a8:77:
         0b:d5:39:a1:9f:23:cc:a6:ff:8b:24:1c:87:f6:c7:d1:15:9b:
         88:12:39:1a:1a:68:ff:75:98:84:93:14:6c:9e:43:d6:1a:6a:
         dd:f3:e0:8e:15:d6:13:54:f8:0d:f2:ea:56:8a:07:05:08:d6:
         d3:7b:40:9a:16:58:4a:e3:4f:94:6f:6c:bf:05:f7:c0:11:f9:
         57:a7:85:e4:41:91:56:06:7d:92:be:65:60:57:dc:61:39:78:
         6e:48:22:a9:db:e9:21:a4:67:d8:05:a3:77:a6:5e:e9:f4:44:
         9e:59:42:77:76:ce:0a:53:a3:86:b5:db:ea:d0:88:3a:b3:86:
         d2:a8:ac:1b:06:39:78:05:05:e2:a9:59:c0:05:2b:f9:85:2c:
         15:5d:51:c1:61:28:26:47:43:eb:5f:1c:1d:6b:38:0d:7a:91:
         0e:a4:8d:13:fd:10:f5:f0:cb:b5:21:9a:29:3a:0b:d0:b8:91:
         30:1c:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:39:08 2025 by rpki-client