Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
File:                     9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft (raw, json)
Hash identifier:          7RG8Tly9GszyD6IAZ0ZfA8Ij8+1tU3a7DHRjzfxH9+g=
Subject key identifier:   F6:A4:71:F7:CE:E2:E1:40:D0:53:43:15:DD:39:6E:FF:11:6D:F9:0B
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       540F64FF95D9F327370881BEF3D4DFD1E87F76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
Manifest number:          54
Signing time:             Thu 03 Jul 2025 11:09:12 +0000
Manifest this update:     Thu 03 Jul 2025 11:04:12 +0000
Manifest next update:     Fri 04 Jul 2025 14:04:12 +0000
Files and hashes:         1: 3136382e302e39342e302f32332d3233203d3e20323635323331.roa (hash: boARMv+KextnY0lTD91sQDog/0RZ6aWlWkvUEJ9jy6M=)
                          2: 3136382e302e39322e302f32342d3234203d3e20323635323331.roa (hash: F7tTFMg2I2nUQcrRSqdu9LIlpqNtaAYXjo2W8vgNxAA=)
                          3: 3136382e302e39322e302f32332d3233203d3e20323635323331.roa (hash: dRH1WvpSwekmglWG3rDq1VTpWxYqnyPGTxeGGy/2bxM=)
                          4: 323830343a326361303a3a2f33322d3438203d3e20323635323331.roa (hash: NmLkvgmPWpP3+AIUgkQshTGCVh+ID6Htu2PNGa7de/0=)
                          5: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl (hash: G3tvOO5ZIWiMLNA1rcLKb28wWRWcFdq/P1Xtt0OOj+s=)
                          6: 3136382e302e39322e302f32322d3232203d3e20323635323331.roa (hash: ZU9qJeLM9IJt8wNEyuuoMiWoz4PvdDcmyDLtRxf/I3Y=)
                          7: 3136382e302e39342e302f32342d3234203d3e20323635323331.roa (hash: 1qlhPXsbe2YqvzA3+1VrC0oc1BrSaTzO8dGHX3NX6iw=)
                          8: 3136382e302e39332e302f32342d3234203d3e20323635323331.roa (hash: m+x74TcCn/ocgyBc3RM05glLKi8fYIlFUhBKwpn4K2c=)
                          9: 3136382e302e39352e302f32342d3234203d3e20323635323331.roa (hash: wQlYnivjl5FtxYxNCOs7C52xmlf9Le1Ei0u+ubyv6zQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 11:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0f:64:ff:95:d9:f3:27:37:08:81:be:f3:d4:df:d1:e8:7f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: Jul  3 11:04:12 2025 GMT
            Not After : Jul  4 14:04:12 2025 GMT
        Subject: CN=F6A471F7CEE2E140D0534315DD396EFF116DF90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:9b:73:55:3e:2f:50:03:4b:4c:21:72:60:
                    68:84:0c:fe:d2:f1:5a:03:36:1c:11:6a:63:d4:40:
                    fb:78:d8:19:8c:6e:2e:8a:92:71:18:f1:88:44:3c:
                    e9:17:64:c0:aa:30:e1:ed:9a:00:c3:30:aa:99:05:
                    94:a0:01:e2:2b:d9:b5:15:0e:93:20:8e:de:84:8d:
                    d4:5b:f0:a0:3c:e1:0f:bb:f0:94:e8:c1:37:e8:4c:
                    19:fc:ad:57:8e:15:56:19:47:a5:19:52:4e:d0:bb:
                    ad:8d:ce:6b:fb:32:f2:9a:21:26:c7:52:83:cb:29:
                    3b:b2:ec:00:c5:d5:f8:e3:58:ae:f5:e8:32:e8:68:
                    6b:69:d7:0f:f9:a0:09:0e:0b:39:85:c0:d4:2a:92:
                    ad:c9:10:50:3c:91:47:54:e2:3b:3e:70:7e:16:19:
                    fe:6e:3a:c9:76:ea:d1:ea:31:87:e8:79:ee:29:b5:
                    53:6f:09:65:06:2e:4e:23:d9:41:36:08:2a:1d:fc:
                    4a:f4:8c:7a:3b:72:ad:1b:db:b3:a0:20:f3:0b:ca:
                    54:0c:5c:a0:ed:cb:2b:15:54:47:30:ea:39:77:c0:
                    9e:3c:3f:0b:cd:fd:07:51:11:cb:26:76:85:7f:23:
                    b2:7a:af:98:92:ea:95:5c:2c:6e:3a:16:61:8c:f4:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:71:F7:CE:E2:E1:40:D0:53:43:15:DD:39:6E:FF:11:6D:F9:0B
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6d:d1:80:08:d3:14:a6:fb:1a:6e:cc:b5:29:f5:93:5a:6e:
         65:e9:0b:aa:e2:bd:96:59:1a:60:57:51:11:19:03:2a:52:83:
         39:a1:79:5c:3a:e8:83:7a:5b:22:cb:67:c5:1e:55:0e:e0:51:
         6f:a9:ea:25:ab:e7:78:cc:df:4e:41:54:e2:04:30:f1:5d:ef:
         b8:19:bf:e1:ad:ed:5c:cf:66:40:1e:9f:25:7c:3d:08:3d:68:
         31:3b:c0:1f:3f:5f:d1:1e:bc:c1:b9:4e:6d:01:81:d1:85:45:
         45:a7:57:88:90:13:ed:cb:3d:13:e9:10:22:03:be:9e:d2:28:
         e8:4e:39:18:a7:d8:76:70:50:9f:8e:f5:02:a0:a3:4e:0e:aa:
         54:f9:3d:f2:1e:55:55:62:50:d3:b3:9f:5d:8e:0a:04:5f:11:
         06:0c:1a:ca:a4:0e:7d:3b:69:41:6e:a3:b7:6e:48:ff:e8:6c:
         0a:38:fa:4c:1d:c6:a1:6b:aa:95:de:eb:14:70:ea:ed:cf:a2:
         4e:d0:e6:b0:bd:c0:3f:7d:77:9c:f4:a4:23:2d:7b:dd:dc:00:
         50:49:35:8e:d3:d6:67:67:90:dc:ef:36:94:3b:4f:7b:0e:89:
         7c:32:48:50:a9:6d:59:e0:fd:24:60:cf:4f:49:e6:98:a0:0e:
         81:f6:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:33:36 2025 by rpki-client