Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
File:                     068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json)
Hash identifier:          fS/kVcMOIGNV2xWblYsDfzM4vuXn9fARq+phmJM+Yd4=
Subject key identifier:   8F:43:05:2F:50:BF:CE:FF:FC:CE:01:62:99:F7:E9:36:F7:2C:70:66
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       5E5532BF4FA5CAD706A892C81F1C94FB9CA20C3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
Manifest number:          0218
Signing time:             Fri 09 May 2025 13:53:45 +0000
Manifest this update:     Fri 09 May 2025 13:48:45 +0000
Manifest next update:     Sat 10 May 2025 16:31:45 +0000
Files and hashes:         1: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: 69lxAYaK2QSM2pPAM/QParH8uflnBBpKiOsKypumOug=)
                          2: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: uQbx9J4xqOZ9ulDsiq8PH8RnyLqo6V/EHfZIYzuiAOU=)
                          3: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: Bzk4dZzrNC2Jl6ZUDrTLxTfoojkN5yomvgAkgomW3v0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 16:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:55:32:bf:4f:a5:ca:d7:06:a8:92:c8:1f:1c:94:fb:9c:a2:0c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: May  9 13:48:45 2025 GMT
            Not After : May 10 16:31:45 2025 GMT
        Subject: CN=8F43052F50BFCEFFFCCE016299F7E936F72C7066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:bb:48:4a:38:47:a6:d8:40:36:e1:e6:30:
                    98:f3:55:7e:f2:1a:fd:90:95:83:d5:91:47:ff:4c:
                    8e:82:03:aa:21:84:3a:2f:07:35:c0:c9:6f:41:55:
                    35:07:aa:57:aa:0c:35:96:65:9f:da:12:67:ce:7f:
                    91:9f:29:28:5c:36:12:89:8e:50:9d:6f:5c:3a:06:
                    f1:67:5b:18:1f:6f:19:63:1d:c0:c3:27:86:48:fb:
                    9a:b4:a2:87:4f:30:0b:74:df:a4:7c:21:32:ad:29:
                    6f:13:66:38:e8:b0:58:09:96:16:5e:35:6e:a2:0a:
                    39:0e:d8:ec:b6:2c:23:16:3b:8b:50:12:ed:40:12:
                    9e:01:2b:59:df:99:64:ad:a7:d2:c3:31:63:5d:79:
                    1c:08:04:71:45:ea:60:6f:e7:e3:d0:eb:e8:2f:f2:
                    64:07:df:52:8f:43:2e:25:a7:32:dc:0e:16:5d:8f:
                    10:5e:0b:0b:e0:65:a1:3e:1c:b9:65:68:70:ab:00:
                    bd:ee:c9:ea:ac:11:d9:1e:56:34:85:28:bc:d1:5d:
                    84:1c:ba:26:52:29:59:41:3a:fd:19:9f:bc:21:d1:
                    be:08:f1:54:4f:f6:0f:c3:b8:a1:07:18:37:ed:de:
                    61:f1:31:25:2e:3d:91:2b:48:21:1b:57:09:ff:4a:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:43:05:2F:50:BF:CE:FF:FC:CE:01:62:99:F7:E9:36:F7:2C:70:66
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:17:f1:be:58:46:7f:05:1b:02:43:1c:1e:27:a6:a8:7e:e5:
         ee:d0:7a:12:6f:ea:82:87:c1:73:75:f5:b8:7d:f8:a8:8b:c6:
         20:68:e6:48:d4:b7:29:a9:38:d1:45:23:ba:ab:87:2b:96:0d:
         04:c3:28:60:ce:ea:e4:96:28:26:df:10:bb:fd:2a:9c:34:ab:
         15:03:33:05:c2:f4:aa:84:ca:43:7d:0b:69:06:f6:09:94:06:
         b7:2d:37:06:79:b3:2c:4e:14:3f:05:9a:08:cc:5a:6b:44:9a:
         8a:c6:13:6a:dc:33:90:c1:c6:38:98:5d:3c:6e:86:5e:fa:e8:
         45:2d:5d:44:d3:44:41:5f:8c:aa:31:94:e5:bf:10:9c:3f:99:
         08:ad:4c:33:db:cc:ec:08:44:95:5d:cc:58:a5:35:d7:af:5a:
         99:85:f1:9e:c3:28:56:86:33:b3:1e:89:c5:6e:f4:c7:11:84:
         a1:f6:e5:17:5a:9d:18:1b:f1:fd:51:c2:57:93:4f:b5:a9:82:
         bf:44:31:8e:c0:b1:24:d3:03:fe:ad:c7:93:f1:4c:80:d7:26:
         b0:a1:de:3c:cf:ca:c7:5c:34:de:1e:a5:89:89:f5:89:b0:d7:
         d4:40:16:b0:42:72:ca:6d:fb:4f:0c:d3:83:b8:4e:03:56:06:
         cf:90:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:12:31 2025 by rpki-client