Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft (raw, json)
Hash identifier:          rO2nfOg0gBfaCNCTKfFwLbilzWePJs684KNc+0I6b/8=
Subject key identifier:   1C:5C:F8:E4:F1:7E:85:0F:12:E0:21:79:41:CA:33:13:FA:C1:82:80
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       06F19C746FA479073285FB51A588C55CEA004511
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
Manifest number:          29
Signing time:             Mon 30 Jun 2025 03:02:40 +0000
Manifest this update:     Mon 30 Jun 2025 02:57:40 +0000
Manifest next update:     Tue 01 Jul 2025 05:47:40 +0000
Files and hashes:         1: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: R7MIKUFJ61JnpNcf/kEfY1SDTgaGtaQruSRJo+oewXw=)
                          2: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl (hash: +5/3UO+krnC+DnzA1XN4hcZ+xmmIiuLAplogXtcSiU0=)
                          3: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: AByqAu5aFAKkVdIxOZPc9IFOefmyvDsFDw/jy1fUyFk=)
                          4: 323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (hash: CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=)
                          5: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: LFEgWICXHnee4/bGPrqW2v3LYv3dbDv2jg2lbR5xrCI=)
                          6: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=)
                          7: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 05:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f1:9c:74:6f:a4:79:07:32:85:fb:51:a5:88:c5:5c:ea:00:45:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Jun 30 02:57:40 2025 GMT
            Not After : Jul  1 05:47:40 2025 GMT
        Subject: CN=1C5CF8E4F17E850F12E0217941CA3313FAC18280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:ee:a9:91:bb:8b:2e:53:08:2d:ee:a8:e0:
                    63:3b:9f:db:06:57:98:7f:45:87:d3:84:b1:1a:a3:
                    12:e7:91:b7:75:fe:4b:d6:ed:46:96:c0:99:70:9e:
                    ab:01:08:fe:91:8e:03:5e:2f:1e:f5:2b:76:79:06:
                    73:96:bd:22:de:5c:ce:a0:62:ad:33:e2:57:7b:ec:
                    45:d3:89:b9:2a:f7:26:e4:2c:54:f5:3f:17:c6:23:
                    45:81:03:31:e5:a1:31:c1:75:c1:f3:34:aa:77:42:
                    42:f9:07:f3:47:7d:49:84:6f:1a:7f:74:6e:f1:c7:
                    56:17:71:95:4f:ef:00:00:18:25:db:8b:ae:9e:13:
                    e4:d6:7f:f5:10:f3:b3:e3:00:68:19:42:ad:e1:22:
                    f9:52:62:90:94:3f:14:fc:7e:d1:84:4c:7d:e9:7a:
                    57:d9:f4:cd:bd:57:f6:9b:28:c3:43:9b:7c:50:cf:
                    02:a7:1f:18:fd:47:5e:ae:d7:2d:6e:16:2e:58:2e:
                    62:6a:6d:4a:36:f9:d0:37:98:54:50:34:af:3c:ab:
                    f4:f5:d0:d3:68:c1:68:56:3a:01:0f:aa:c7:eb:ba:
                    bc:05:38:75:ed:8d:ce:3b:f4:bd:dc:66:5b:9c:e9:
                    86:b0:ec:d6:54:6f:3a:4d:06:a2:72:98:4a:7b:3c:
                    f6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5C:F8:E4:F1:7E:85:0F:12:E0:21:79:41:CA:33:13:FA:C1:82:80
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:94:15:bc:68:1e:89:e7:05:60:bb:65:00:b2:21:cd:f5:
         35:0b:0f:d4:75:94:9f:97:33:ae:84:27:0e:89:2a:94:55:36:
         28:7c:4d:ec:b0:01:8b:0a:54:4d:ee:db:90:f0:ef:47:23:50:
         b3:25:bd:65:c0:89:ce:f5:8e:a8:c6:98:66:a9:87:04:59:c1:
         59:93:d6:f1:c9:5e:14:9e:ba:8c:46:42:73:96:3c:f5:ac:60:
         59:81:79:48:7b:bf:ab:d9:ee:84:9b:bb:83:d9:ec:7a:0f:d7:
         26:87:cf:f6:86:ad:c3:15:69:a0:d7:16:80:7e:ed:0b:c3:0a:
         88:63:20:90:b9:1b:88:55:4e:0b:75:a9:16:d6:b4:f7:4b:c6:
         da:3c:03:cc:50:55:14:54:f2:3c:05:82:75:b2:3c:4b:e7:78:
         4f:a0:1a:61:d2:dc:ab:ed:5c:45:ac:07:bf:94:d0:a7:4d:b8:
         ac:55:c1:a9:da:11:ea:ac:1e:a3:5a:a2:66:61:c2:b1:bf:1c:
         d6:05:c4:1a:0e:a3:49:ef:8c:60:e6:b9:d4:cc:9e:4e:0c:df:
         74:7c:7d:14:cb:fb:67:15:fc:4a:f8:4b:19:fd:05:62:95:55:
         c7:25:e9:b6:04:f8:9e:66:14:4e:86:49:97:11:2a:6b:80:49:
         ec:ee:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:16:17 2025 by rpki-client