Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
File:                     D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft (raw, json)
Hash identifier:          PczGRHcJmDHnsubzqs5G7Sr3TsJ+rGjWUa+XHvHEBwA=
Subject key identifier:   F1:76:D0:81:BF:FA:2F:AB:F2:A7:45:C9:93:7C:E3:6B:7C:DC:CC:44
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       04A5724B778E2D0BB166F88EEBCA9E960D3F5BAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
Manifest number:          0239
Signing time:             Sat 21 Jun 2025 10:57:29 +0000
Manifest this update:     Sat 21 Jun 2025 10:52:29 +0000
Manifest next update:     Sun 22 Jun 2025 13:14:29 +0000
Files and hashes:         1: 3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (hash: 1EPG9j2IFN7RdrK+OBQg1vA1qlOU4uWKrh0eWi6f4z0=)
                          2: D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl (hash: hNAXvK1wyZW8PJ1NJ9KbsN15EB9DgAdqw6+sSZuXHac=)
                          3: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (hash: l+1vkNbJX9FznsoCq04IQdf645yMO+XY7naPC5k2nAc=)
                          4: 3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (hash: jjJjT28GywBLjygGVXWL4ZlLuMuD46UXs8EBIkhnFL8=)
                          5: 323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (hash: yuUN7yiHWs923bHitB6dyQ6w+MoW439QGWA0xRQoCEY=)
                          6: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (hash: 7GQpIb7eN0gEhjMCm8bJJo8/053mAvBMK769o/t1ImA=)
                          7: 323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (hash: qIqXFF+EFAPY9WZVD0mrTRtSZpbvEDWHAOrmv/e83ZA=)
                          8: 3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (hash: QsO1DL8JBb7HVDv32XyDE5mIRhLWooOEuQSlsQhv0nA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 11:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a5:72:4b:77:8e:2d:0b:b1:66:f8:8e:eb:ca:9e:96:0d:3f:5b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Jun 21 10:52:29 2025 GMT
            Not After : Jun 22 13:14:29 2025 GMT
        Subject: CN=F176D081BFFA2FABF2A745C9937CE36B7CDCCC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:08:b4:06:3c:ae:26:36:04:7d:e6:45:75:
                    c7:cf:30:af:78:a1:88:d4:17:7d:bc:58:99:6e:4c:
                    5f:db:4c:65:d3:18:13:8f:ac:08:85:f7:07:aa:42:
                    f5:d2:66:53:83:bf:2d:2c:57:37:71:60:8d:91:04:
                    0a:9e:19:3d:34:7c:e3:77:7f:b3:79:ce:07:4a:a1:
                    33:9a:de:fe:1b:b1:cc:e1:f4:bf:9d:be:37:89:2c:
                    30:b7:d6:31:b4:ee:b4:7c:cf:df:88:e0:a5:33:e6:
                    ce:f4:a9:8b:63:69:cc:37:ab:23:1a:ea:46:a0:c8:
                    98:35:e7:8c:84:d2:6b:1b:90:e4:02:b6:a9:28:5a:
                    8b:e3:12:f4:80:93:b2:c2:9f:e7:ae:ca:8c:a5:dd:
                    ce:73:b9:77:e7:5a:96:00:8a:dc:c0:e4:ea:ae:7c:
                    57:09:18:10:ac:50:d4:26:ca:b4:65:1b:35:81:de:
                    2c:e4:e9:54:7d:48:3f:3d:f4:e8:9d:cd:e1:0b:c1:
                    ba:88:c9:37:c3:48:59:7a:5e:c0:6c:82:7e:22:0f:
                    6d:66:69:e5:8a:39:b4:d1:2b:b3:65:26:4c:e1:b1:
                    f3:dc:94:19:c9:40:e7:43:1c:0c:8e:9c:66:e0:3b:
                    3d:0e:ec:51:02:93:f1:95:ec:6f:ba:40:54:6b:62:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:76:D0:81:BF:FA:2F:AB:F2:A7:45:C9:93:7C:E3:6B:7C:DC:CC:44
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6f:fc:c9:f5:0a:8a:6d:aa:dd:30:cb:40:56:9f:15:4d:44:
         a5:38:81:11:cb:cb:7c:74:69:d5:76:f6:70:03:f8:99:fa:32:
         34:1d:eb:ee:ab:63:f5:c7:9e:9d:da:26:de:aa:bb:64:8b:91:
         36:e8:4a:23:97:9b:01:df:0e:aa:9a:85:31:9a:72:f1:bc:3d:
         df:0a:9d:ac:15:e5:98:ec:fb:64:cc:6d:ea:17:42:a0:ff:78:
         4c:1f:b0:8b:d5:9e:8a:15:e6:bd:03:e5:72:61:4e:02:09:d7:
         bb:bc:10:f6:20:3f:66:b3:72:23:ff:3c:d4:f2:c0:c1:b9:8c:
         78:e7:d1:06:03:f1:f6:5d:e0:80:7a:f3:88:87:4d:fc:e5:29:
         98:d4:d4:12:7b:1f:59:94:5c:5a:88:c9:97:4a:a8:16:b5:65:
         0f:7a:62:2c:97:b1:d1:c0:b1:5f:29:67:03:37:74:82:bd:ee:
         58:62:b6:fd:3b:1d:6d:63:8b:8a:01:16:22:1b:c6:8f:6a:21:
         19:a4:51:57:ee:b3:62:66:b8:9f:e3:4e:93:5a:56:02:e6:e2:
         5b:a0:43:b7:26:5e:c2:af:a4:4b:49:25:e0:2b:1c:06:ee:79:
         d5:a0:89:22:64:5c:88:b6:83:72:bf:8a:30:d9:e6:42:5f:c4:
         0d:5e:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:34:39 2025 by rpki-client