Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
File:                     6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft (raw, json)
Hash identifier:          FKNfpGDJUnZl5jGmTwD56ZkM2u+F+CIROARIH1Cja9w=
Subject key identifier:   9F:8F:4E:C3:C8:6D:58:47:6C:67:CC:62:13:66:EC:97:6E:62:12:6F
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       21415631FD892FC63480E6BC4D494BE0B67CD760
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
Manifest number:          0221
Signing time:             Tue 13 May 2025 23:15:06 +0000
Manifest this update:     Tue 13 May 2025 23:10:06 +0000
Manifest next update:     Thu 15 May 2025 01:30:06 +0000
Files and hashes:         1: 3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa (hash: LLRlbHTgsnwJrTLX/m1CwgoDx+KvHwfahlAasRbqstY=)
                          2: 3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa (hash: 7GIBFAbsUsSf5BspmuaaAnyXIqZMBMwILqkmm9/Uq/g=)
                          3: 3230302e3231392e32322e302f32332d3233203d3e20323730383131.roa (hash: JrpaE8YkVdxsms0DeBWgd5ou3aTjQTNnq+UscQ8+n1c=)
                          4: 3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa (hash: CyDXK9ljjUpg2AqV1nyIeRl76AjKavDna/RybpHlnfw=)
                          5: 6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl (hash: 3BmpYbUl3g3VPMKyBus33gNdac9q7j3dzp9Asp1mYgE=)
                          6: 323830343a373163383a3a2f33322d3430203d3e20323730383131.roa (hash: hPLCj0OmtYzEERMMb7Lluzq47S1spUHPq2fzntk8MUY=)
                          7: 3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa (hash: RsgF5cFO2/9j985MNd1AxgPjrFrD48WgquKiem/oVkE=)
                          8: 3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa (hash: pBql1PSue60BNpc/hgezfefArOcwu8TTLHWzw6gk98s=)
                          9: 3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa (hash: fgdwBClArGcywT5nJVYvGozREMbGVi5St1oOX7D5Sv4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:41:56:31:fd:89:2f:c6:34:80:e6:bc:4d:49:4b:e0:b6:7c:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: May 13 23:10:06 2025 GMT
            Not After : May 15 01:30:06 2025 GMT
        Subject: CN=9F8F4EC3C86D58476C67CC621366EC976E62126F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:a2:de:9c:bd:a5:34:bd:4a:de:58:79:c1:
                    cd:69:87:2d:3c:3c:a3:ef:fb:e6:2b:1e:c6:01:ff:
                    9e:48:a0:80:3a:e5:47:e4:ec:92:ac:84:6d:94:43:
                    fa:3f:88:22:2d:13:b6:0d:4d:c3:ed:03:57:88:d4:
                    08:fb:1f:83:19:e7:ef:a9:85:b7:83:e7:33:71:2d:
                    85:52:80:85:07:4a:4f:e9:c7:d8:d1:7b:fb:8e:c9:
                    37:6e:ac:5b:6f:b3:1f:88:fc:52:b0:37:98:51:e6:
                    73:ae:5a:af:02:cf:f4:69:d3:82:5e:41:d5:e9:c6:
                    88:59:f5:8d:cc:e6:97:88:f7:04:e8:6d:74:74:ff:
                    30:14:09:c6:0f:c5:bd:f3:9d:5d:1b:a1:4a:86:8f:
                    15:a7:29:d9:78:66:dd:6e:99:46:32:3e:8b:a8:5a:
                    49:b2:9d:09:3f:34:a4:0e:6f:c1:f4:8c:52:89:0c:
                    84:4b:bc:1f:ef:cd:bc:d8:9b:39:05:58:2b:fa:3d:
                    ea:1d:33:78:5f:42:d8:8f:46:19:45:6a:71:8b:43:
                    39:3e:2b:2f:f2:8b:3c:9b:44:f3:ea:76:93:83:7c:
                    82:39:a4:9a:96:6b:6b:bc:7b:e7:51:94:9e:37:4c:
                    6d:f2:58:f0:65:56:43:ec:da:d1:44:79:f2:38:91:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:4E:C3:C8:6D:58:47:6C:67:CC:62:13:66:EC:97:6E:62:12:6F
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:d6:20:25:78:de:83:09:9f:f2:8f:71:73:1b:46:cc:48:c7:
         60:3a:98:49:3c:94:43:d8:99:4a:65:3d:7f:22:6f:45:0c:be:
         d1:fe:89:57:f3:3d:a7:8f:4e:e8:66:5c:29:d9:41:41:cc:f3:
         47:d6:72:2e:55:1b:55:e1:30:85:c6:2c:0c:62:fc:f5:34:2a:
         fd:07:8e:06:86:90:51:0a:fd:20:cb:95:ec:56:be:5e:15:49:
         11:fa:97:17:ae:08:5e:f7:a3:11:df:30:67:13:93:04:95:9b:
         da:46:14:93:bd:8b:df:a6:d8:db:2e:8e:90:d8:9b:38:d9:dc:
         c0:c7:fb:fc:39:8e:d7:1b:5e:b8:10:44:dc:8e:d4:63:43:7d:
         94:46:4b:99:0b:58:aa:66:2e:66:56:7c:03:7a:cd:f7:09:32:
         06:55:61:20:59:ff:e9:32:2a:cb:6b:41:d1:ad:b3:d2:ee:93:
         05:68:d7:96:9e:34:a1:f2:71:31:45:f8:88:30:dd:8f:8b:b1:
         e4:ff:f4:c1:c0:0e:c7:a2:70:a9:25:61:d6:00:f4:fd:1a:bd:
         b4:62:03:c8:c3:74:58:0c:82:c1:db:13:bc:d2:8a:78:a9:18:
         d6:06:51:f1:d6:57:82:2d:b8:7a:2d:93:f7:08:0e:ee:b5:05:
         da:d7:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:11:44 2025 by rpki-client