Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File:                     86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier:          vyhQdDg1Ok4Y2B0jwC//6Kp6Jhe6jL8ZDSnnnVTax40=
Subject key identifier:   FF:31:EF:06:E6:7E:47:AF:0E:A8:E9:C7:82:EE:CF:56:97:54:A8:A7
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer:       /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial:       0480B9F0B98D29E30416CC2B5783174E0C3DF6A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number:          024C
Signing time:             Tue 17 Jun 2025 20:16:02 +0000
Manifest this update:     Tue 17 Jun 2025 20:11:02 +0000
Manifest next update:     Wed 18 Jun 2025 23:51:02 +0000
Files and hashes:         1: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: 1rpCROBmcv8c1/bqWisw0TSc8OKxX0XnmESA6d6w8qI=)
                          2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: vQ0dMTrCA6jpx16kB//vD14oqZm9i+cplJ6WKtUmRJA=)
                          3: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
                          rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 23:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:80:b9:f0:b9:8d:29:e3:04:16:cc:2b:57:83:17:4e:0c:3d:f6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
        Validity
            Not Before: Jun 17 20:11:02 2025 GMT
            Not After : Jun 18 23:51:02 2025 GMT
        Subject: CN=FF31EF06E67E47AF0EA8E9C782EECF569754A8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:07:b4:d1:ad:35:08:68:f9:2d:a7:35:5c:
                    b8:e4:e3:0e:1b:7d:9a:5b:1f:8b:3f:f6:30:96:e2:
                    3d:99:39:52:a7:d3:2a:0b:b0:85:1d:ab:d5:e9:30:
                    3a:34:c6:16:93:ec:7d:96:7e:5e:d7:8f:9a:48:31:
                    9d:be:e2:de:8b:87:59:e3:6b:e1:92:6a:b8:be:9a:
                    ac:1b:b2:9b:24:84:55:c2:e1:8e:af:b3:5d:a3:e8:
                    87:eb:a3:a3:dc:90:8c:be:5d:5e:c2:89:5c:ac:18:
                    1c:65:4d:bd:99:e7:75:4d:db:c3:85:85:82:87:c3:
                    17:11:52:27:b1:32:f2:cd:bf:ec:bd:a4:71:ce:b5:
                    f2:40:0c:25:a2:b5:f9:32:17:e3:09:d9:77:57:2c:
                    52:1e:59:9d:cd:ec:ab:a4:c9:c0:91:bf:71:aa:64:
                    db:48:33:ba:3f:8c:38:22:24:87:aa:8d:8d:c5:19:
                    4e:e0:50:ed:75:20:c7:c7:e3:f4:0d:ba:ca:dc:03:
                    74:6a:b4:93:b8:ba:10:a0:72:83:cc:2d:ea:f2:43:
                    f9:d8:1b:db:95:e2:46:0e:f6:0c:f0:ec:a5:33:1f:
                    08:7e:95:b9:b8:83:24:39:9e:04:d8:7d:38:ed:75:
                    7d:65:5a:67:05:22:bc:a1:4c:ce:e6:ed:f8:21:28:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:EF:06:E6:7E:47:AF:0E:A8:E9:C7:82:EE:CF:56:97:54:A8:A7
            X509v3 Authority Key Identifier:
                keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:39:04:76:02:1d:13:d2:29:2c:54:31:ad:bc:21:35:2b:
         4a:8a:49:e6:47:fb:58:e1:67:c1:a3:ed:b8:3b:f3:e4:57:57:
         88:cb:7d:52:db:af:f6:e3:5c:2f:b9:60:b0:87:fc:a1:71:35:
         0a:a9:0e:98:7f:66:8c:df:3e:bb:89:23:49:47:91:68:2a:9b:
         d6:8d:16:e9:ec:41:81:5b:1c:38:84:16:41:6b:d4:f3:1d:8a:
         54:54:e3:6e:e9:e8:27:c8:fa:57:c6:f2:90:71:d9:4c:ba:90:
         61:b3:b3:f1:32:6d:69:fc:a3:4f:90:8d:0f:3d:e0:0e:cb:bc:
         4c:4f:43:62:5a:68:54:5f:2f:db:52:f7:64:8e:fb:64:c7:17:
         83:c3:f7:f0:e5:34:7c:73:32:3c:29:2b:74:0b:c3:b3:d1:6e:
         50:5f:53:c2:e3:b9:98:3c:2b:a7:ed:b2:47:60:ee:5c:13:27:
         50:f5:b6:c7:6a:1b:4a:55:31:92:98:75:86:dc:88:18:2f:41:
         a4:08:ac:a7:5b:62:87:b6:ec:02:50:b7:66:10:46:16:0a:00:
         c3:e8:bf:86:da:25:28:95:4d:21:fc:43:17:2f:7a:60:59:68:
         1f:63:31:8a:d2:a8:9c:3c:2d:9b:66:7f:b2:24:c7:a3:b3:91:
         2f:8d:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:27:06 2025 by rpki-client