Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          RvZxGPh3JbEIJG+NTM+qkFuZ5IWGVvid3yXgyTZmp/0=
Subject key identifier:   6D:DF:9D:FD:00:21:19:F3:C0:C4:EC:AC:48:B1:44:72:43:D6:25:17
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       247B17D72029B18D124CDA6C2836076F6DF73422
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          0253
Signing time:             Mon 23 Jun 2025 07:04:11 +0000
Manifest this update:     Mon 23 Jun 2025 06:59:11 +0000
Manifest next update:     Tue 24 Jun 2025 07:17:11 +0000
Files and hashes:         1: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: kaDPMddMKzmpOwcHctIanWBDb1hhEhu3LNdC8dXLP+M=)
                          2: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: D79Proem/bRQyc86m2qXOgzXG+Le+wRfKE8/rmQC/Bc=)
                          3: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: 2kKEiyTFiOmhUk0aoZqeJVMh2uxvNnJbR4TxG8nWgwc=)
                          4: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: q9OFt52pKHYnsvzXcp8W3XnmsiOr61XLM4BMY1KTMCs=)
                          5: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=)
                          6: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=)
                          7: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 2kHxoCoNMOLdsEOn78MgqhL8NJMeIOhz6G4LF6z6Yww=)
                          8: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=)
                          9: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=)
                          10: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: 1MKusdigpWk5QQQ86qXywT2udsQeU+7YGML7EztTMhQ=)
                          11: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: su0CPdgh4j15+QZYJ3glN4zH+LKnLBKJd31VpjKxIZI=)
                          12: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=)
                          13: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: XAeZAlHHGTAFSQdNTZQkUE7Ut2Dth7OFbzyQ41Xih2E=)
                          14: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: kiTTa3qSeZm6Ez/C0voSfREyJzRwnxlQD6XZmjTuwT8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 07:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7b:17:d7:20:29:b1:8d:12:4c:da:6c:28:36:07:6f:6d:f7:34:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Jun 23 06:59:11 2025 GMT
            Not After : Jun 24 07:17:11 2025 GMT
        Subject: CN=6DDF9DFD002119F3C0C4ECAC48B1447243D62517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:c4:d0:9d:67:f2:50:09:bd:0f:66:49:d7:
                    76:91:95:60:bd:be:91:47:ac:67:6c:d8:79:ed:3a:
                    36:c7:af:5c:8f:3a:c6:1b:34:4c:3b:c3:03:ea:40:
                    58:77:38:7b:e3:23:72:ea:45:30:57:93:1f:74:fc:
                    90:af:16:67:b1:b5:56:b5:17:5e:19:65:3c:08:0a:
                    36:3d:a4:2e:ec:e2:21:3b:0b:5a:9b:3f:32:24:2b:
                    44:4e:c5:f8:1b:73:cd:86:af:b7:dd:b9:70:bd:4a:
                    d8:f9:a8:84:6b:e9:20:b0:85:99:fb:a8:4b:d2:08:
                    8e:6d:0b:c3:28:15:23:7e:f7:c3:94:f8:b3:bf:90:
                    63:aa:c2:26:54:26:b1:93:83:c3:46:c8:b2:05:43:
                    af:67:7c:17:7b:1d:d6:0f:11:95:1d:18:14:b8:8d:
                    f3:6f:71:c5:a9:af:bc:2f:a3:e2:bb:4a:24:69:0e:
                    80:b5:36:38:28:d9:d9:32:a1:d9:1c:91:a7:4a:bf:
                    26:45:47:b9:4a:6a:8a:3c:f4:94:b4:a7:65:47:7e:
                    88:0a:51:70:65:6d:6d:c7:3c:71:8d:7b:56:14:46:
                    87:99:51:35:4d:9c:ac:22:2d:06:30:5f:63:1d:ea:
                    f3:a8:bd:75:40:28:a5:fe:b2:6b:3c:bd:3c:f5:b5:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DF:9D:FD:00:21:19:F3:C0:C4:EC:AC:48:B1:44:72:43:D6:25:17
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:c4:11:ee:f1:24:f2:11:c6:b0:9a:7b:77:70:f5:57:c4:
         ba:e4:be:43:d1:22:3a:62:70:de:a5:cb:70:d4:87:d3:c8:8d:
         9d:0a:d3:77:ed:23:b8:1d:dd:00:31:58:6c:51:79:42:40:60:
         b7:1b:0c:5b:c3:02:fb:c7:45:87:a8:13:0f:af:1d:c3:87:a5:
         ee:41:db:5d:37:c5:87:5c:18:4e:83:bf:fe:f7:a3:08:fa:90:
         73:bd:87:86:83:ca:da:32:d4:d5:fe:10:2d:ca:75:a9:af:8a:
         46:e7:a0:8f:81:9e:e7:77:36:b9:04:ea:65:7c:d5:10:e8:55:
         9c:71:1d:80:4a:c6:ce:07:53:e5:1b:36:5c:81:5a:7c:3a:fb:
         ab:d4:4b:4d:f6:8a:b7:48:ac:5a:2a:3a:bd:1e:9a:99:bf:43:
         77:40:b1:70:4c:34:de:a2:ae:65:b1:b8:e7:b1:50:da:82:a4:
         de:81:9e:00:b3:0b:cb:ea:f4:f7:39:93:b1:80:b8:d7:94:9a:
         3c:c2:99:ed:3d:0a:57:f6:fd:da:38:2a:19:d6:37:19:a6:d1:
         60:9b:41:fc:66:33:e1:cd:0f:68:ea:b9:12:6e:9b:5a:fa:02:
         a5:26:98:32:fd:28:e8:02:39:3c:3d:11:aa:c6:e4:90:48:ec:
         b0:d8:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 08:33:03 2025 by rpki-client