Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
File:                     612546079777C83995107BFA129E54CE43A50026.mft (raw, json)
Hash identifier:          CqPH9HTC36hHsOd24QLmC4esPjfzdhX48vWBlyo5Z3Q=
Subject key identifier:   87:3B:7E:05:58:C6:ED:67:11:83:7E:D8:57:86:AD:37:47:76:8B:0A
Authority key identifier: 61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
Certificate issuer:       /CN=612546079777C83995107BFA129E54CE43A50026
Certificate serial:       1CF95C77DED96665A60783C96941D704E85A7CC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
Manifest number:          2B
Signing time:             Sat 05 Jul 2025 04:19:38 +0000
Manifest this update:     Sat 05 Jul 2025 04:14:38 +0000
Manifest next update:     Sun 06 Jul 2025 07:02:38 +0000
Files and hashes:         1: 323830343a323734303a343130303a3a2f34302d3430203d3e20323633383837.roa (hash: G3mmiivxvrRYrNJsiXMl+Orj+1qMnU0Q5OFsf30grp4=)
                          2: 323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa (hash: W3wTlvePLpHNPbPRiB6RJiK82ghrQTDdFaRGX4Uogn8=)
                          3: 3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa (hash: VilHlCPRJgquAqbFq2BHRUJDaEpts/yDpee8EDptG7M=)
                          4: 3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa (hash: CYR7WgKDYmNlRqLf26BrPb+qlHHAgWaK6zys94KzWc0=)
                          5: 3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa (hash: 9AOgP+yaJyh3yEDw7PFI319zeFk86CLgh8l3HWNXLTQ=)
                          6: 612546079777C83995107BFA129E54CE43A50026.crl (hash: aTA+ppasPX0rrstq368m3A4Lpo2NST3dQeRgQp/APE8=)
                          7: 323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa (hash: nS3WHvyAwdkvDNrZKqolPkysifNRraVq63Rpy2PdrXM=)
                          8: 3133382e3230342e3133312e302f32342d3234203d3e20323633383837.roa (hash: 5ZIpVyFsMGgZOX3op+RevIlnakvCOwU0PoPZi3GPbGw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 07:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f9:5c:77:de:d9:66:65:a6:07:83:c9:69:41:d7:04:e8:5a:7c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612546079777C83995107BFA129E54CE43A50026
        Validity
            Not Before: Jul  5 04:14:38 2025 GMT
            Not After : Jul  6 07:02:38 2025 GMT
        Subject: CN=873B7E0558C6ED6711837ED85786AD3747768B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:c8:0f:3c:ee:5e:d1:ce:3d:d1:ef:2a:3c:
                    8d:04:5a:bf:14:70:18:49:0f:22:34:42:ec:80:fe:
                    e3:a9:de:ff:a8:1a:2c:30:27:88:20:23:ef:c1:66:
                    6c:7b:d6:ba:9a:20:5f:de:67:dc:4b:13:c5:8b:e0:
                    71:ca:57:d2:14:80:29:b0:b7:e8:40:0e:19:61:74:
                    ff:d3:2b:0c:79:6f:9a:1f:45:11:61:50:72:fd:2d:
                    1d:be:0f:e6:dd:fb:fb:61:80:31:d6:05:91:55:71:
                    71:a2:df:35:5b:88:19:24:a1:75:91:59:18:19:74:
                    a4:7e:c5:ba:9f:dd:5d:2e:9e:33:ef:71:4d:e9:71:
                    e0:b3:0f:af:d5:03:41:52:79:9e:9b:93:2e:f2:2e:
                    f3:92:95:a6:73:54:52:05:79:36:19:11:ce:54:48:
                    ea:40:2e:16:93:a2:b8:51:55:db:7e:95:6f:f0:20:
                    ef:03:ef:37:f7:01:45:16:06:2b:e8:cd:2b:cb:34:
                    66:f3:28:0b:47:fe:6e:cb:09:03:d2:b5:2f:aa:5d:
                    23:54:14:30:cb:8f:b5:5f:a3:f9:54:28:03:7c:94:
                    27:1d:5a:b7:80:d3:f2:9a:da:41:00:ed:c8:b5:d6:
                    e0:ec:50:ab:5d:6b:7d:ee:80:91:ba:d1:a2:da:be:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3B:7E:05:58:C6:ED:67:11:83:7E:D8:57:86:AD:37:47:76:8B:0A
            X509v3 Authority Key Identifier:
                keyid:61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ea:3a:ca:1c:61:0c:eb:38:67:ab:1b:d4:7d:4a:f2:64:7a:
         f5:d1:ee:dd:6e:33:b7:a4:b9:5b:a2:e4:6e:2f:01:a9:d2:29:
         56:6f:3c:9c:4b:b9:50:05:9a:65:0e:ea:83:db:f2:9f:3d:a2:
         b2:b6:72:e4:f4:16:f3:5d:49:7e:42:90:85:c0:90:ac:d7:83:
         bd:d4:24:ec:a2:7a:e3:5b:11:da:71:65:df:9d:63:ea:e6:7b:
         1e:5a:14:59:e7:d5:b1:98:f1:75:9e:37:0c:eb:f5:b4:01:64:
         cb:fd:52:7c:c5:3a:6c:2e:c7:6c:f2:f6:bb:57:4e:be:2a:49:
         75:8e:ec:5d:b9:37:11:47:bb:93:ce:4b:17:a3:1f:05:9c:8d:
         31:7d:85:19:a2:84:d0:d0:a9:9d:fa:b2:37:f6:9c:86:74:46:
         bc:20:ca:35:72:cd:2c:5d:fa:ee:f3:90:8d:b6:4c:d5:b9:79:
         41:e8:db:3d:a3:15:af:38:c1:68:39:6e:77:e4:83:8b:d2:12:
         5d:67:fd:5c:a6:90:33:00:c4:a7:0c:c1:2a:d6:34:69:1a:4f:
         ec:88:83:36:73:67:5d:81:b7:f3:f9:06:4e:f1:34:77:57:e4:
         b1:af:33:f8:9b:a8:99:2e:a4:d2:67:a7:2d:bc:a4:44:81:3e:
         9d:89:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:08:32 2025 by rpki-client