Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
File:                     95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json)
Hash identifier:          hKkUqaipIkr7v8T24nhbWYvhgCRgcn5R8EolfnlDPyI=
Subject key identifier:   00:20:26:A1:07:44:D6:0B:29:5A:92:B8:35:44:CF:73:73:BC:19:9A
Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62
Certificate issuer:       /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62
Certificate serial:       5598E5885AC48EBD7AB4D68F9E55187452287589
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
Manifest number:          024E
Signing time:             Sun 22 Jun 2025 19:04:11 +0000
Manifest this update:     Sun 22 Jun 2025 18:59:11 +0000
Manifest next update:     Mon 23 Jun 2025 20:20:11 +0000
Files and hashes:         1: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=)
                          2: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: E0PAawAJP1M3Z9Jacqv3x688kqPIynKc+EkWXDbMfuM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl
                          rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 20:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:98:e5:88:5a:c4:8e:bd:7a:b4:d6:8f:9e:55:18:74:52:28:75:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62
        Validity
            Not Before: Jun 22 18:59:11 2025 GMT
            Not After : Jun 23 20:20:11 2025 GMT
        Subject: CN=002026A10744D60B295A92B83544CF7373BC199A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:7d:b9:37:95:f0:59:26:cf:cc:68:59:ab:
                    cd:ca:c9:da:71:9e:90:eb:b4:01:9e:bd:0f:2b:0c:
                    90:7e:f7:56:cd:56:1a:24:95:68:d1:ac:95:81:39:
                    b1:4f:e7:07:a4:8d:9c:fc:ab:4d:39:e0:5d:3f:e4:
                    fc:33:71:d7:73:68:d6:d1:f9:64:d3:b7:0b:2c:97:
                    be:d7:82:bb:80:21:a7:84:a7:ec:52:12:7b:ea:cd:
                    90:96:62:cf:9e:95:75:8a:78:a6:d6:28:a5:d9:fd:
                    68:31:e9:d3:35:94:23:b6:6c:26:1f:ff:a4:0a:7b:
                    96:32:1a:ac:00:b2:58:50:95:f2:e5:0f:e0:d6:e6:
                    dc:31:ba:6b:87:62:1f:31:78:b6:96:3c:52:ad:23:
                    de:7b:02:59:44:83:fb:4c:df:aa:90:52:f9:cb:f8:
                    09:e0:91:64:1d:48:1a:67:fb:e9:9d:5e:cf:69:43:
                    c3:bb:16:3e:45:df:b6:cd:dc:35:c1:33:5b:92:55:
                    b0:50:f2:d8:a1:7b:c0:46:a9:b5:0e:13:a4:90:35:
                    28:f1:13:0c:35:88:f4:b5:2f:2b:9f:1f:dd:c8:ed:
                    31:d9:dc:1a:9c:4d:9b:61:dc:e1:2b:04:21:dc:97:
                    fe:fa:f1:58:ad:66:ae:1d:b7:7f:94:7d:b1:67:40:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:20:26:A1:07:44:D6:0B:29:5A:92:B8:35:44:CF:73:73:BC:19:9A
            X509v3 Authority Key Identifier:
                keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:a4:03:93:40:be:0c:1c:7a:ea:91:de:1f:a8:c6:24:3c:
         73:56:8b:01:fa:16:a5:86:6c:f4:54:ca:cc:9b:72:cb:9e:cb:
         8b:d5:a5:65:53:1b:99:3a:55:0c:11:9a:bd:d4:d2:39:69:21:
         66:18:9c:17:3c:c3:50:c5:fb:18:4e:21:4c:e2:b4:98:32:47:
         a2:f4:68:a3:c8:d7:43:e5:b2:2f:57:af:d8:db:ca:f9:57:37:
         cf:d3:69:af:87:ad:48:2e:45:f6:7c:a6:c4:6e:8b:f7:35:2b:
         42:7c:fc:d9:7e:2c:d8:aa:df:c5:0d:41:8b:ec:a4:e7:54:21:
         30:8e:81:a8:d8:43:4f:34:db:da:ae:62:2a:02:5d:d2:9c:8c:
         85:84:43:46:b8:86:06:ad:c5:40:e5:6f:c6:f3:b8:a0:a2:95:
         4e:8b:e0:aa:1d:af:0f:41:32:d8:a1:4c:91:34:78:77:3e:86:
         53:37:75:af:be:78:0c:e2:f6:49:a4:99:e0:38:4e:33:0e:b6:
         b8:66:67:de:80:15:31:b8:dd:14:29:15:b4:f1:5a:52:46:60:
         12:d9:a9:51:47:7a:28:dc:28:5e:e6:8a:a8:2a:88:fd:4d:20:
         1e:31:eb:71:9a:88:02:c5:b1:3b:f5:d9:87:0d:74:e4:5b:a7:
         9c:62:87:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 00:29:47 2025 by rpki-client