Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
File:                     DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft (raw, json)
Hash identifier:          P2OL35xCLg/dHwfg+e08tsxh+8UAdHcTTshLYvEwb3o=
Subject key identifier:   F8:55:FF:89:8F:CF:D9:D0:8A:EA:4A:2C:C2:F6:A6:73:98:7C:86:0B
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       6D9E25AD2AED84E989941991C8B721FAADBCA594
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
Manifest number:          0202
Signing time:             Sun 27 Apr 2025 02:35:21 +0000
Manifest this update:     Sun 27 Apr 2025 02:30:21 +0000
Manifest next update:     Mon 28 Apr 2025 04:07:21 +0000
Files and hashes:         1: 34352e3232372e3131322e302f32342d3234203d3e20323637303234.roa (hash: NbuMp6zwIPF0O7p39k96W67CEvlo0InSX/oh1MCa9MM=)
                          2: 323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (hash: DWL3wU1j9/tLvHYS1dyFWxVgwqL+A2vsmPkeTD1xNuA=)
                          3: 323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (hash: GNGQttzmJcudreL/5tnOmzIRIQeCdkDFJkbGS5ZFna0=)
                          4: 323830343a343666633a3a2f33322d313238203d3e20323637303234.roa (hash: L9M53YB4o7JNc7dDg3XjTGRgx6YePRqEVkPp8+b2wk4=)
                          5: DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl (hash: ggC9UctaYVL9iRtE/UoSZ4KaaMpzCkHkc7Z0F0B4UgY=)
                          6: 323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (hash: 7gX4nW50jeu8Gj9fE88BAIsPqLu+xcmsC18pJl1XV/Q=)
                          7: 34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (hash: abY2ZiwLus4Y0y8kU8Bbk1j9YGW0GJGomWVx/NV1F0s=)
                          8: 34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa (hash: Ev7k/0Z/euV4Q2GhoimUlecZQe8xwwzmeRYzoYIJnXA=)
                          9: 323830343a343666633a3a2f33342d3334203d3e20323637303234.roa (hash: JmbvOjVKbR/XYJut5SHfgiOn1lqjtci9jd0EVLJXXL0=)
                          10: 34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa (hash: oVjQhgspeltuV28tjxBz4iFQBhqnc2zEoJwPptISWck=)
                          11: 323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa (hash: ZpGbXyZPQV1RAhEmtqOTxYMrUDE2M/wfiHPg1NwBBUg=)
                          12: 323830343a343666633a3a2f33322d3438203d3e20323637303234.roa (hash: 0NBW+l9oQvgut+Wpp8Bb1HAjDdw9+mIwXXr8N5HctTA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:25:ad:2a:ed:84:e9:89:94:19:91:c8:b7:21:fa:ad:bc:a5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr 27 02:30:21 2025 GMT
            Not After : Apr 28 04:07:21 2025 GMT
        Subject: CN=F855FF898FCFD9D08AEA4A2CC2F6A673987C860B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:33:4e:1d:33:57:ab:b1:08:0c:39:d3:8a:
                    47:b8:4f:00:dc:06:eb:2a:7b:e5:81:a2:e8:da:02:
                    ab:b5:33:90:83:b5:4b:b5:31:7d:c7:85:5b:4d:9f:
                    4b:12:1e:00:4a:6f:94:ce:05:d0:c5:49:3c:da:f5:
                    8b:e6:76:29:99:d0:fd:39:f2:7f:41:63:0e:8a:f1:
                    7a:aa:5d:59:5a:b2:52:e2:ac:c1:a7:7f:eb:86:cb:
                    5f:cc:96:9b:3e:10:85:fa:ec:22:e2:15:0a:b2:52:
                    04:06:21:e1:16:3e:97:9a:b7:25:9b:a5:32:47:76:
                    a8:c1:49:68:b8:3a:18:1d:4d:b5:af:75:35:6d:04:
                    8c:3b:b8:0c:1b:93:20:19:2d:c8:2e:d1:52:a5:25:
                    1e:c1:0b:9f:c8:5d:8b:2e:36:62:9a:41:8e:d6:74:
                    b6:46:ba:44:74:85:e6:63:f4:15:13:ad:3b:10:e0:
                    73:0e:3c:c3:02:ce:68:10:5b:2d:ff:eb:bf:92:c0:
                    26:92:ef:f7:55:c5:e8:59:cd:36:f5:2d:c6:23:29:
                    b7:7b:1b:83:ff:76:dd:4f:2a:d2:b9:12:38:81:4f:
                    07:b6:4a:ac:77:c2:16:eb:cc:55:ac:66:e2:70:7f:
                    68:50:66:01:13:19:9a:d4:c3:c0:09:b6:1e:8b:45:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:55:FF:89:8F:CF:D9:D0:8A:EA:4A:2C:C2:F6:A6:73:98:7C:86:0B
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fb:3a:2e:9a:4a:d7:b4:fd:bf:b2:df:ff:05:03:a0:d3:bc:
         dd:34:7b:58:fd:f5:55:f7:b8:1d:65:38:90:9a:b7:8a:e5:6c:
         0e:58:7b:b7:de:c0:68:ef:1f:64:ef:03:c2:9f:5b:a7:56:92:
         34:57:c6:e5:1c:5d:4d:50:be:11:09:8e:af:b1:d0:10:9b:ff:
         a3:f6:23:79:ef:a2:a9:05:98:f2:3e:14:bb:b1:d6:8e:22:46:
         85:cb:6d:3b:44:57:e7:67:8b:cc:2c:a4:e0:bf:0e:72:d4:3b:
         35:e3:7f:29:1f:ef:2b:4b:61:af:94:3e:7d:c9:f7:62:b0:68:
         37:9d:78:8a:ea:67:1b:cb:76:55:07:20:2a:a6:58:58:89:75:
         e3:30:70:bd:24:ed:a3:f2:53:3b:78:11:a5:b0:38:aa:16:43:
         7f:50:61:60:7c:ab:7c:6f:4a:17:e6:69:9b:9d:4c:aa:f9:80:
         3a:b6:4f:a2:9e:29:ab:6e:e1:22:59:42:b1:7c:1c:b1:26:72:
         31:27:29:06:0c:ea:52:56:4c:5b:8d:3d:fd:23:a4:21:f2:ab:
         71:81:f5:5a:38:06:76:d9:d7:d5:da:f8:59:fe:71:8f:db:08:
         38:a5:0d:65:ad:f2:1d:48:ee:53:bc:cf:47:07:5d:6b:3f:8d:
         8e:d9:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:53:34 2025 by rpki-client