Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft
File:                     D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json)
Hash identifier:          cp44S3UByBP6rYUXjEMAMdFkzyq+47X1Mfpp/tD3mo8=
Subject key identifier:   28:84:74:58:CC:74:72:1E:C4:E7:23:81:37:64:E2:B3:67:87:F9:40
Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A
Certificate issuer:       /CN=D95738A14AD98B305087E048FD2E4821E5E2299A
Certificate serial:       0DE1A8898C5435AFD3A936E5B36E1E84C0199964
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft
Manifest number:          6C
Signing time:             Sun 29 Jun 2025 17:08:16 +0000
Manifest this update:     Sun 29 Jun 2025 17:03:16 +0000
Manifest next update:     Mon 30 Jun 2025 20:27:16 +0000
Files and hashes:         1: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=)
                          2: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: PQ5jTTx8BdxCPen61Wv0HiRAqHDer1s1jQlDUWa60pQ=)
                          3: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=)
                          4: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e1:a8:89:8c:54:35:af:d3:a9:36:e5:b3:6e:1e:84:c0:19:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A
        Validity
            Not Before: Jun 29 17:03:16 2025 GMT
            Not After : Jun 30 20:27:16 2025 GMT
        Subject: CN=28847458CC74721EC4E723813764E2B36787F940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:27:b3:16:03:26:e3:6b:18:99:97:7b:07:
                    14:b8:ff:a1:30:8d:42:ea:eb:8b:e9:80:5d:e8:bb:
                    38:aa:54:c2:ec:4c:ae:d9:a2:a5:1d:50:e0:63:0f:
                    b7:88:dd:ab:42:df:a8:13:f4:f9:6b:70:cb:3c:6d:
                    1a:31:e1:ac:9c:9a:ad:13:d6:da:ee:b5:43:a1:bb:
                    f3:93:45:73:5b:68:72:47:02:b3:28:e4:37:c1:37:
                    a8:e5:e7:d6:9c:84:bd:df:85:a0:69:bc:ea:b5:9a:
                    c7:f8:7b:66:6d:a2:e6:57:11:7f:0d:da:43:28:b6:
                    ca:d8:eb:d3:81:4a:02:e4:91:38:4c:2d:d2:91:1e:
                    93:72:c8:4d:4b:32:c3:2b:ec:b7:ef:82:1d:c8:52:
                    43:81:c0:a8:10:12:a2:82:6c:d3:44:31:cf:8a:9a:
                    8c:de:aa:95:38:37:fb:21:04:87:6e:41:d6:d2:bd:
                    81:ae:dc:0a:68:5f:a3:3d:ec:1d:63:dc:16:75:c3:
                    d9:0c:1b:9d:78:42:32:cd:04:e0:01:fc:b5:56:5f:
                    40:33:c6:c5:fd:c2:a4:5a:ee:4f:c2:67:a8:90:a5:
                    2c:a3:ec:aa:c3:c2:a1:be:8e:e9:4f:76:92:f1:69:
                    89:83:dd:07:54:41:e2:44:43:81:b3:3a:25:c3:c7:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:74:58:CC:74:72:1E:C4:E7:23:81:37:64:E2:B3:67:87:F9:40
            X509v3 Authority Key Identifier:
                keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:1b:d1:0e:de:29:e8:71:fa:b1:d9:df:eb:df:7c:3a:92:
         df:b0:40:17:c4:ec:61:4c:68:3c:de:12:fa:c5:17:0e:99:de:
         a5:2e:2f:f0:a8:02:c9:14:1b:1e:c3:78:50:c8:1a:f0:cb:88:
         ec:e4:25:a0:8a:98:26:0d:9b:70:f1:3f:8c:66:dd:8d:a7:fb:
         1b:17:c8:23:92:ce:fb:a1:9e:3d:2e:81:2c:b6:b5:e1:1c:73:
         e8:db:5f:a8:ac:1c:2f:50:ca:7a:01:c9:1f:cd:94:b3:2d:20:
         d2:b3:e8:70:c1:17:0d:83:19:4f:da:f9:bc:29:84:7e:26:b4:
         61:6b:9f:d8:71:de:bb:ae:cb:4a:f4:61:b6:47:4b:06:09:59:
         25:27:82:ee:5a:e6:e4:ae:84:ed:94:08:3a:2b:0c:7e:5b:e9:
         1e:9b:5e:4a:78:f6:24:ae:c3:ef:20:a2:35:fb:c1:9b:ac:a5:
         81:e7:41:ca:4b:ba:ff:3f:75:a9:35:52:00:57:c9:11:68:1e:
         36:e3:bd:de:2b:7e:af:16:21:7c:ee:2a:be:df:48:40:1e:be:
         7e:9b:b5:ac:f4:de:c3:15:0b:fd:7f:64:db:78:92:d8:75:1b:
         13:ae:0e:b9:8c:6a:bd:83:da:fd:2b:eb:89:dc:f4:d0:d9:1c:
         3d:00:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:14:29 2025 by rpki-client