Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
File:                     CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json)
Hash identifier:          OdyH2pmL0w+wzro+4DS91ve/Y5hiB7XAVftIdC+uBWU=
Subject key identifier:   24:24:72:21:4F:42:5B:09:96:6C:8A:C3:15:8F:9C:3D:63:29:D0:5B
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Certificate issuer:       /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial:       33211CEACB1E8FC4115A405AF32601D30EF71512
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
Manifest number:          024F
Signing time:             Sun 22 Jun 2025 20:44:50 +0000
Manifest this update:     Sun 22 Jun 2025 20:39:50 +0000
Manifest next update:     Mon 23 Jun 2025 21:18:50 +0000
Files and hashes:         1: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: VBCnHU5TBlO8GQbvm38yaXyrz4vjADhjKHV3unpcPFM=)
                          2: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: NcIfGZbCEuTNkG4qep2+FkdDqhpEtKcmdTRPEh7F3LQ=)
                          3: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: mc7zyxlcDWTpf8MHBgckQ6SrkcbI0QSEbJyTbgaFwFE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
                          rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 21:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:21:1c:ea:cb:1e:8f:c4:11:5a:40:5a:f3:26:01:d3:0e:f7:15:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
        Validity
            Not Before: Jun 22 20:39:50 2025 GMT
            Not After : Jun 23 21:18:50 2025 GMT
        Subject: CN=242472214F425B09966C8AC3158F9C3D6329D05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:d9:02:9a:4d:b6:7a:c6:1b:ae:36:22:06:
                    c3:98:b2:34:fd:d6:e4:6b:a2:ac:80:e8:23:55:52:
                    a4:2b:fb:5e:7d:40:72:e4:e1:fd:e8:3c:0f:53:09:
                    cc:d1:f5:27:78:a8:af:92:19:dd:af:ea:9b:1b:1f:
                    fb:72:56:e1:b3:fb:87:11:cd:b1:b4:7f:c4:c2:0c:
                    5e:33:e7:da:9e:fd:99:c4:af:36:00:08:6b:19:4a:
                    aa:d2:c9:dc:dd:cd:20:09:59:e9:b2:73:bf:5a:43:
                    f7:ef:a3:c5:ee:3c:34:d1:17:d7:ce:94:f4:f0:3b:
                    45:33:24:18:5a:40:d4:b8:33:16:0a:64:df:b9:bf:
                    fa:41:6b:4e:f0:c6:c8:48:b9:f6:aa:bd:46:40:3f:
                    66:0d:73:a3:42:85:a7:0d:73:90:93:3d:22:32:53:
                    50:21:02:aa:10:86:30:b5:2f:34:83:a0:66:bb:be:
                    a2:bb:79:b5:23:4d:09:b2:1f:f6:b3:a6:07:f8:79:
                    f7:c3:e9:a2:f7:ec:e6:6d:8f:50:5d:06:4d:ba:34:
                    d0:de:63:57:5e:f0:8a:0d:07:06:cb:c1:63:8f:ec:
                    bb:cf:f4:f6:10:77:74:37:73:96:36:a8:d2:de:57:
                    a3:91:cb:42:8c:53:08:13:34:dd:24:7a:c4:a4:a2:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:24:72:21:4F:42:5B:09:96:6C:8A:C3:15:8F:9C:3D:63:29:D0:5B
            X509v3 Authority Key Identifier:
                keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ad:58:8c:c4:2c:f4:c5:d8:e2:ef:c0:0c:02:7a:19:19:ab:
         79:b5:81:47:17:13:3d:e3:58:72:4c:bb:d6:4e:6c:d5:ae:a4:
         65:fc:ee:83:cd:46:21:90:30:a3:ec:5e:5a:14:11:48:78:ce:
         48:2f:a5:d0:0b:d3:35:45:b2:4c:a7:e4:da:0f:d2:20:18:df:
         a4:2f:31:56:0b:b9:fd:88:7b:74:5a:a6:ef:03:ec:8b:1e:15:
         4a:16:d9:77:c7:0f:a3:41:fd:a6:b3:2d:ad:3d:70:be:c6:cc:
         d4:47:1f:67:f2:dc:2c:de:dc:81:1d:70:82:09:61:02:19:c8:
         ba:44:56:ee:23:65:70:3e:78:24:fe:15:51:e3:9f:27:96:d7:
         da:59:19:be:65:e8:4b:56:a8:c4:3f:5a:cf:a1:5a:09:c1:05:
         5a:cf:c3:0d:b2:2b:a8:38:e0:c8:44:7c:c9:26:50:dd:d6:ce:
         a2:6e:25:73:b2:ed:76:8e:48:b0:ec:8a:f0:c7:51:39:d5:40:
         38:c6:7c:27:7e:8d:69:a7:01:9b:da:56:bc:cb:79:2a:b3:c5:
         90:71:89:cf:4a:67:bf:36:a6:49:68:6e:e5:81:8b:7c:68:20:
         a0:83:b4:f6:57:d0:db:8a:d7:79:06:50:38:5e:ed:b2:d8:59:
         6d:ee:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 09:50:51 2025 by rpki-client