Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
File:                     6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft (raw, json)
Hash identifier:          sGX0Hwr0xLiqQoBCETNeYC+LIJM6e0uZGJPgRHxmsFc=
Subject key identifier:   23:52:D3:92:B7:A7:38:B4:40:7D:75:86:D3:10:50:7B:FD:61:45:32
Authority key identifier: 6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1
Certificate issuer:       /CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
Certificate serial:       3176576C1A68464455A73C4AE7D5A0A5165A6404
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
Manifest number:          0249
Signing time:             Wed 18 Jun 2025 18:59:37 +0000
Manifest this update:     Wed 18 Jun 2025 18:54:37 +0000
Manifest next update:     Thu 19 Jun 2025 20:59:37 +0000
Files and hashes:         1: 3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (hash: s2m/rSCGWtXFgQ0ZfdSHKZmWkAcKxBcAVuMFFal50mU=)
                          2: 6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl (hash: QpRsa2FzzgTYSe6ItEgfN3pfH1MXIp6AAi4gLmkgo30=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl
                          rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 20:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:76:57:6c:1a:68:46:44:55:a7:3c:4a:e7:d5:a0:a5:16:5a:64:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
        Validity
            Not Before: Jun 18 18:54:37 2025 GMT
            Not After : Jun 19 20:59:37 2025 GMT
        Subject: CN=2352D392B7A738B4407D7586D310507BFD614532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:d5:2e:34:6e:a8:87:11:e3:07:3d:d0:be:
                    18:7e:8f:43:5e:f1:0b:48:64:47:24:9c:e9:78:87:
                    31:d7:94:e2:b3:74:3b:98:8c:9a:26:e8:dd:a4:22:
                    e7:f8:5b:68:81:bb:d5:6b:eb:b0:b0:c8:d8:1b:40:
                    bc:cc:27:5e:ef:7f:61:75:44:e7:9d:31:89:27:0f:
                    89:a6:13:71:76:7c:e6:d9:03:a6:c6:6d:a7:3a:84:
                    af:07:bc:08:bd:22:d9:7d:02:08:ca:1b:51:f3:af:
                    46:52:0c:99:b4:ff:4c:23:42:db:a0:75:52:0c:d6:
                    60:e8:55:32:46:9a:ff:e9:5d:40:24:98:af:c8:8d:
                    aa:fa:7c:c9:30:07:53:f9:15:37:ba:06:43:25:aa:
                    bd:a8:80:da:69:da:56:73:12:b4:43:2c:a7:3c:a5:
                    fc:cf:dc:4a:fd:f0:15:80:cf:fa:0a:1e:a9:e6:a1:
                    48:17:da:5c:e7:c4:70:c6:44:3d:57:80:76:2d:16:
                    79:10:e3:ea:3b:d0:cf:c0:81:c1:f1:8b:8a:a1:99:
                    68:19:ed:93:fe:c8:cd:80:70:dc:14:d1:6a:ce:5a:
                    8f:39:e6:49:72:a4:e5:48:47:e7:ad:fe:6a:9a:41:
                    97:26:64:ef:f7:1b:f8:8a:a8:7f:d9:ae:32:02:38:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:52:D3:92:B7:A7:38:B4:40:7D:75:86:D3:10:50:7B:FD:61:45:32
            X509v3 Authority Key Identifier:
                keyid:6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:9e:a2:88:9d:2b:11:e8:b7:b6:42:ba:2c:20:dd:fe:b4:
         81:6e:64:2d:3a:59:f2:79:c2:e1:e1:39:89:3a:71:91:66:a9:
         d6:76:94:a9:f6:b4:ad:d2:72:cd:86:da:e9:25:cf:5c:50:b0:
         c5:19:44:7d:8f:77:bd:b6:c9:f0:5c:36:c5:6d:bc:a4:f5:3e:
         79:1d:c7:1a:6a:bc:b9:b5:86:eb:ba:d3:57:68:5c:21:5b:22:
         29:b1:4d:c9:75:f1:85:c9:ee:e8:9d:76:2d:83:d3:1d:0f:d4:
         5a:0e:9e:01:c5:8d:5e:99:aa:1b:ce:71:65:c1:a6:ec:1e:69:
         3e:65:3a:c3:01:44:13:96:e3:96:09:89:30:7a:d4:0c:6d:7a:
         1a:62:f9:8a:6a:7b:8e:ff:e1:26:fd:4e:91:11:af:31:20:62:
         fd:fa:df:dd:bc:c1:ee:9b:8d:c9:98:71:ed:ab:26:63:2d:19:
         f7:e9:f9:12:96:a9:98:5b:3b:7a:3e:f7:ab:7b:ac:39:43:3e:
         42:ad:11:c8:3a:61:ab:2e:3f:2f:f5:8e:80:7b:f6:4a:d9:07:
         80:7a:a6:85:48:2c:ba:de:a1:9b:8f:11:19:0d:03:05:9e:a9:
         53:5a:38:79:36:5c:e5:2b:f3:62:8f:15:35:0d:f5:88:ea:18:
         80:ea:93:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:46:20 2025 by rpki-client