Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
File:                     D1FFDF44055E16082D529730642377D751467152.mft (raw, json)
Hash identifier:          JIOiPOxdvAag8NHl83UmIrbrzlZZ7mO+WBpcsO5grPM=
Subject key identifier:   DF:A3:3F:27:DB:2C:A9:C0:DB:38:66:0D:05:CB:1E:1B:99:31:06:77
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Certificate issuer:       /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial:       488648A211F00870C0B5DEE47DE9BB902884D176
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
Manifest number:          F3
Signing time:             Tue 17 Jun 2025 09:19:59 +0000
Manifest this update:     Tue 17 Jun 2025 09:14:59 +0000
Manifest next update:     Wed 18 Jun 2025 11:50:59 +0000
Files and hashes:         1: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: 8CQrF34soBwXu1YRdamnxb0gJeOCBly8lfmNOKaeNCU=)
                          2: D1FFDF44055E16082D529730642377D751467152.crl (hash: sFXgDx0dYbA+MnlPKRnOjMRcDLuluYJS+vz3lI8vJwE=)
                          3: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: +J/bMMv2VTnAcenJxSzOTld7FO4bilmUXcdCfBnX9eY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
                          rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 11:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:86:48:a2:11:f0:08:70:c0:b5:de:e4:7d:e9:bb:90:28:84:d1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFDF44055E16082D529730642377D751467152
        Validity
            Not Before: Jun 17 09:14:59 2025 GMT
            Not After : Jun 18 11:50:59 2025 GMT
        Subject: CN=DFA33F27DB2CA9C0DB38660D05CB1E1B99310677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:a9:39:69:5a:ed:8b:da:a8:c4:14:ef:62:
                    90:28:4d:db:82:8d:e2:1f:7f:50:ce:f5:13:12:5c:
                    7d:00:f4:e9:5d:36:ed:5b:af:8c:97:83:af:da:87:
                    f3:e7:3d:d9:35:47:32:4a:15:13:5c:a1:2a:9e:e2:
                    9a:6f:ae:53:01:b3:f1:0e:ab:69:fe:5a:8b:fb:a0:
                    8d:d0:5e:a7:bd:67:06:ee:ef:d9:80:4d:cc:43:94:
                    b2:d1:22:5c:bf:a9:0f:c5:dd:52:ec:13:8b:b4:05:
                    a1:f3:59:12:9c:d3:31:1e:02:e1:c0:91:57:f9:cb:
                    cf:5f:c3:a5:81:ee:10:86:8e:4a:aa:fc:0e:5c:5f:
                    6b:b4:87:6c:2f:0a:b0:d4:f9:70:31:55:e7:57:8c:
                    ad:5b:ee:f2:ec:90:c2:62:00:2c:03:66:24:98:07:
                    00:61:e2:51:09:1b:7b:b9:71:b3:8e:95:a4:26:a0:
                    30:99:b1:6c:5b:9f:3a:39:dd:bd:01:30:ac:6c:57:
                    8e:54:66:d3:4a:87:12:27:e2:0b:43:34:d4:5f:dd:
                    d4:91:f5:d8:95:05:a4:e2:51:5b:57:e8:93:8b:c5:
                    33:d6:9c:68:7d:0e:8f:fe:b3:3f:0d:57:c9:c3:d2:
                    1f:9b:04:d4:e9:14:3e:df:5b:e4:6d:19:96:dd:27:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A3:3F:27:DB:2C:A9:C0:DB:38:66:0D:05:CB:1E:1B:99:31:06:77
            X509v3 Authority Key Identifier:
                keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:59:45:2a:ba:a3:d0:20:30:37:40:4d:bd:f1:7a:ea:5a:4c:
         dd:0a:2f:8f:86:cd:3b:11:34:ec:ac:8b:91:24:98:ae:74:90:
         51:c0:b4:6d:b1:ee:fc:3f:e1:3d:40:4f:0e:df:03:ef:08:e3:
         76:78:7f:61:c2:95:c0:b5:36:fc:d8:f6:ef:f6:b1:11:bb:ed:
         56:c8:06:3c:0d:8b:8b:17:2a:27:d5:a5:45:52:37:27:e8:d3:
         79:8a:5c:07:c3:82:f2:f0:a7:ab:05:fe:df:50:67:83:94:f0:
         e8:95:29:92:f0:cc:83:ba:a5:b8:71:d2:3e:fd:db:a6:1c:4e:
         3b:43:5e:2b:98:82:41:20:3d:f7:9e:b1:ca:72:a5:40:5c:f2:
         5e:49:c4:af:1a:70:f2:de:c6:15:23:5e:b1:28:df:af:19:24:
         22:b7:ea:b8:db:89:0f:61:05:f8:f8:06:1f:27:88:4e:94:4c:
         37:89:94:11:65:7a:0f:3f:3c:79:bc:65:6b:55:ca:f2:7e:b8:
         27:83:40:d9:8f:39:0c:17:2d:8b:a4:68:8f:db:b2:61:6c:7d:
         b0:9d:5f:8b:c5:6e:0f:6c:48:38:44:27:76:34:f9:ca:4c:d5:
         95:4d:27:29:92:fc:a6:be:9c:af:4f:3b:1e:a1:fd:f6:61:6e:
         00:91:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:40:20 2025 by rpki-client