Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
File:                     D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft (raw, json)
Hash identifier:          JAViRt7m3rYzDirfLtznyvBDF4Fo+EkgsDMvHiz77h8=
Subject key identifier:   B1:2F:B1:7F:B2:B3:FB:0C:F0:0A:60:0C:16:BF:24:DB:20:9A:F4:D0
Authority key identifier: D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
Certificate issuer:       /CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
Certificate serial:       15BBD5D80020F43A7AC318923101AA000A577C41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
Manifest number:          016F
Signing time:             Fri 20 Jun 2025 02:00:00 +0000
Manifest this update:     Fri 20 Jun 2025 01:55:00 +0000
Manifest next update:     Sat 21 Jun 2025 02:00:00 +0000
Files and hashes:         1: 323830343a393134633a3a2f33322d3332203d3e20323734363332.roa (hash: /bhQhhnNkSdylYIjekpV2fl5RiGMi+gaxVptDvsQhiI=)
                          2: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl (hash: SVr8J08sAuZlIdnpamnau3pFaEZz0CLOkjKvNASEVL8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl
                          rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bb:d5:d8:00:20:f4:3a:7a:c3:18:92:31:01:aa:00:0a:57:7c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
        Validity
            Not Before: Jun 20 01:55:00 2025 GMT
            Not After : Jun 27 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:c3:84:7a:a1:61:db:a3:54:ec:61:82:55:
                    c8:8b:2a:35:8f:99:cf:2b:15:47:e8:27:23:08:19:
                    1d:df:94:d0:66:c9:50:bb:a8:ab:c2:e0:ae:a7:c2:
                    57:16:10:44:7a:08:2b:03:2d:1e:66:d4:72:97:e3:
                    77:59:f5:df:f5:bd:94:00:1b:ce:63:79:86:38:c2:
                    a2:ce:22:d7:14:49:91:0e:a9:b7:3c:77:2a:dc:a4:
                    a0:b1:40:61:da:b9:7b:a2:f2:d7:50:7c:fd:d9:72:
                    92:85:f7:10:c5:dc:64:07:e6:85:4a:e5:99:6f:ed:
                    ba:2c:76:16:1c:79:e2:e7:08:a8:61:ec:c3:0f:96:
                    6c:ab:e1:7f:50:f3:ff:24:1c:c0:e2:b2:9b:1d:98:
                    07:ef:37:00:52:cd:e6:81:a9:25:5a:ef:e5:73:9f:
                    bf:a0:49:dc:23:2d:d1:6e:ad:cc:a1:e6:c6:80:58:
                    42:59:49:65:04:84:f0:5b:01:90:94:73:a1:0e:ab:
                    a6:e8:8c:7c:d5:fd:ab:bc:b2:2c:c7:eb:72:3c:cb:
                    a5:6f:37:cf:32:34:21:c9:9b:4a:50:5d:0c:ca:7a:
                    e6:1c:39:74:bf:a0:f7:49:55:90:b2:1c:d1:0e:3a:
                    c6:5f:1f:16:6f:ae:78:d7:61:50:fd:e3:fa:1a:3a:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2F:B1:7F:B2:B3:FB:0C:F0:0A:60:0C:16:BF:24:DB:20:9A:F4:D0
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:a0:74:f8:74:4d:09:c2:ca:d5:d8:37:92:57:95:c3:35:
         eb:5a:fd:aa:ce:07:95:37:d4:c5:72:db:14:26:fc:14:d6:03:
         02:c3:c7:b4:ec:11:87:ca:6c:33:f4:b3:a3:81:f5:95:38:d3:
         18:3c:61:e1:c7:0e:9b:a6:d5:85:3a:9a:03:c1:58:fc:f6:b6:
         ab:2a:f7:70:eb:75:e0:9a:90:c2:ab:58:11:4a:7e:ba:d3:dd:
         42:2a:a3:8f:a8:02:58:68:17:68:99:19:1f:c0:c4:1d:28:da:
         98:fa:5a:9a:14:a6:82:56:c2:ff:23:1b:64:14:2b:ac:12:6e:
         d9:69:01:75:74:5a:52:d2:f2:41:1b:db:8e:b6:a1:00:1a:6e:
         b9:71:b7:30:39:6e:36:2f:8b:91:05:5f:c1:a1:fb:87:7e:2c:
         be:c8:c5:2a:58:f3:cb:77:93:c3:05:85:40:04:3f:51:08:3f:
         f2:d2:6a:d6:9e:89:07:0c:0b:7c:28:e5:3e:69:6b:b3:dd:71:
         cd:c0:3d:47:24:0e:0a:4e:e4:23:95:a0:94:0f:d9:ba:8c:8c:
         f3:ef:0b:90:de:8d:62:72:4b:44:1a:9f:35:45:12:8f:18:0c:
         96:44:6a:dc:56:72:bb:68:f3:c1:f0:b0:13:53:6e:e0:f7:47:
         bd:3c:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:45:19 2025 by rpki-client