Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
File:                     068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json)
Hash identifier:          cAuXLFxjMk8WU48QcMl5666KSAVAJwLRmiFR1Ta1qG0=
Subject key identifier:   BC:1E:B2:A8:F9:FF:55:8E:F6:75:2D:D5:01:C0:E0:FF:E2:7A:22:70
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       3A84B0141E4D1FCB9098D9A75388CFE7EDC70412
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
Manifest number:          025D
Signing time:             Sun 29 Jun 2025 22:25:59 +0000
Manifest this update:     Sun 29 Jun 2025 22:20:59 +0000
Manifest next update:     Mon 30 Jun 2025 22:51:59 +0000
Files and hashes:         1: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: uQbx9J4xqOZ9ulDsiq8PH8RnyLqo6V/EHfZIYzuiAOU=)
                          2: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: Bzk4dZzrNC2Jl6ZUDrTLxTfoojkN5yomvgAkgomW3v0=)
                          3: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: wm2tRY9M6jWfvTQYvxxOpdG/SPZkWzCB3boa34ewjX4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 22:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:84:b0:14:1e:4d:1f:cb:90:98:d9:a7:53:88:cf:e7:ed:c7:04:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: Jun 29 22:20:59 2025 GMT
            Not After : Jun 30 22:51:59 2025 GMT
        Subject: CN=BC1EB2A8F9FF558EF6752DD501C0E0FFE27A2270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:57:a3:6c:9b:9b:78:46:b3:fb:32:9f:68:
                    7b:fb:94:5e:37:2b:fa:02:16:58:06:31:79:e9:5e:
                    22:eb:d4:2a:92:b4:06:2b:d4:c3:14:18:99:7c:15:
                    75:f1:a0:7d:aa:22:7e:09:9a:91:41:7e:0d:2f:c3:
                    18:15:8e:ec:57:e9:69:d0:15:25:8e:ca:cb:2d:5a:
                    e8:ea:ce:72:17:03:31:b8:ae:36:5a:64:ff:d6:77:
                    cc:9c:3a:4d:f1:95:7d:4d:76:d3:5a:c2:5e:d5:2c:
                    b2:99:eb:7f:33:33:64:4f:2b:d2:b0:42:af:98:0e:
                    88:09:16:3a:04:b0:25:39:80:2e:eb:18:26:50:38:
                    41:22:7e:12:31:b7:89:4d:c1:80:55:99:de:f5:f8:
                    6e:27:1f:71:a4:e1:af:3a:a9:58:2f:be:7c:cc:84:
                    02:43:d0:13:71:dd:8f:83:50:63:9e:34:82:97:c6:
                    fd:91:ea:83:d5:1a:a9:2b:7f:38:7c:60:89:41:0f:
                    66:ea:e7:70:61:42:2d:38:c6:5a:9d:07:b3:b3:76:
                    d5:6e:aa:22:50:76:57:e0:c9:58:4b:58:2b:9b:e9:
                    9c:82:b4:29:fd:d2:e6:ea:c4:68:08:5b:21:5a:92:
                    8b:43:2d:52:aa:1a:23:7a:9f:00:72:fb:02:db:38:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:B2:A8:F9:FF:55:8E:F6:75:2D:D5:01:C0:E0:FF:E2:7A:22:70
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:88:43:94:3d:ff:25:51:9b:ea:74:62:5a:60:e3:63:ef:
         78:ab:47:34:a9:d9:51:01:1e:4d:ad:1e:02:16:b0:e1:6f:b2:
         7e:d2:f4:74:b4:e0:00:42:e8:16:a5:00:fe:a8:7d:07:51:a7:
         b8:db:e6:4e:ff:2e:09:f0:62:cf:a6:1d:56:12:c0:b5:85:55:
         20:e0:88:35:29:60:77:cf:b2:31:9d:58:97:6f:da:99:a4:3a:
         74:fd:69:7e:0c:5b:f4:50:00:02:79:c6:05:a8:6c:86:f9:1f:
         bb:0f:92:8f:6e:55:fa:0a:62:26:23:99:2b:01:c9:55:22:07:
         d9:fe:ad:c0:c8:c2:24:92:38:fa:0e:f0:54:18:46:bb:d7:ff:
         99:f5:df:b2:40:b0:8d:f4:08:3a:c2:57:4f:f0:94:2a:64:62:
         21:c2:e1:6b:a9:33:5b:ca:e3:79:19:c3:bc:0b:d8:88:73:b2:
         eb:aa:f9:31:98:a0:8b:87:67:16:a7:64:b6:00:30:ab:cd:53:
         d2:a8:99:56:37:03:ec:c9:e6:88:10:08:be:cc:e2:99:1f:e4:
         f4:d6:7f:bc:3d:ce:8f:76:a9:2d:1b:63:38:53:6b:26:c7:53:
         d6:1a:92:6f:3a:56:a2:64:e7:79:6f:8f:45:c3:9f:e3:9e:db:
         dc:ac:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:41:11 2025 by rpki-client