Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
File:                     DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json)
Hash identifier:          MPQGyTbBVrsLnrbWAESqalgpnM3LLwLpEssinrsmFko=
Subject key identifier:   B0:4B:4F:76:A9:3B:EB:0A:4A:59:2B:6C:55:B7:5D:B1:E4:96:B4:24
Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Certificate issuer:       /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Certificate serial:       5A992405BC93897C4F85EC40CCB71C500B5CC01C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
Manifest number:          024E
Signing time:             Sat 21 Jun 2025 01:18:54 +0000
Manifest this update:     Sat 21 Jun 2025 01:13:54 +0000
Manifest next update:     Sun 22 Jun 2025 05:04:54 +0000
Files and hashes:         1: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: D5Kh1u0vUQX58zC8K3kTptsTZXCjTHtVrMtIC/ORziw=)
                          2: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: Col+LRGc/1lk9nvkTe3TytJA4agsIFfCWd9IIiNQBxI=)
                          3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: JzqfGwcnYFgPZQ+mMmAZphOmA8KHEQ7roqe9x2gU8Uo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
                          rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 03:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:99:24:05:bc:93:89:7c:4f:85:ec:40:cc:b7:1c:50:0b:5c:c0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
        Validity
            Not Before: Jun 21 01:13:54 2025 GMT
            Not After : Jun 22 05:04:54 2025 GMT
        Subject: CN=B04B4F76A93BEB0A4A592B6C55B75DB1E496B424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:32:d0:ab:64:a3:7e:32:bc:15:0a:54:8e:
                    84:22:46:6e:98:e7:94:68:40:04:5e:07:0f:c6:6e:
                    b3:f3:1e:25:84:e8:bd:c7:be:44:c0:ed:24:96:08:
                    4b:18:1d:62:fc:be:de:6e:14:bd:81:fc:e3:a2:a8:
                    3a:0b:97:b7:b0:68:59:9d:eb:9f:fd:6f:aa:dd:55:
                    fa:c1:61:ee:54:9e:b4:84:77:b3:83:b0:77:09:73:
                    b9:66:7e:27:56:31:cc:d3:56:1c:0f:f0:db:87:fd:
                    a6:e9:1b:f9:4c:a7:12:af:67:76:cb:4c:e3:57:4a:
                    95:90:56:a5:a7:14:34:ae:3f:9c:dd:e0:88:3c:a2:
                    c9:23:bb:e4:7d:b9:7b:f0:18:e6:0a:4b:7e:78:89:
                    c8:cc:27:b5:23:26:c3:2d:90:68:8c:d9:35:3d:31:
                    8f:a0:3a:af:b9:0e:77:13:46:71:de:1c:03:59:61:
                    80:06:ca:ce:98:03:30:ac:ce:ad:3b:87:e3:3f:69:
                    1c:af:89:54:6e:98:bb:da:bc:98:5e:1c:41:c4:b1:
                    6c:67:bb:34:91:d1:53:9b:26:07:24:6f:d9:c8:21:
                    5a:b5:34:9a:99:ae:9c:eb:f8:5c:2f:04:16:43:2b:
                    3c:b4:f8:b1:3e:93:2f:92:54:a8:7a:c1:4b:e2:09:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:4F:76:A9:3B:EB:0A:4A:59:2B:6C:55:B7:5D:B1:E4:96:B4:24
            X509v3 Authority Key Identifier:
                keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:5f:65:67:37:9c:12:ff:f3:c9:53:4a:c3:d5:2b:10:e9:
         1e:86:9b:38:65:23:84:08:82:1b:76:76:66:28:30:14:d9:a0:
         4e:81:0a:c8:14:d2:f5:81:21:81:7b:28:cc:99:57:6c:d9:99:
         71:bb:24:8b:16:a5:0f:9e:d3:5c:38:5f:36:a8:b1:98:e5:65:
         44:05:39:4c:5b:89:db:0d:e8:5c:8d:d8:e4:1d:bf:e2:ff:b8:
         cf:5f:6a:82:13:32:bf:5c:6b:17:27:17:2c:f3:ec:32:c3:e5:
         89:40:3e:ec:70:0d:e5:1a:c1:5a:5a:49:ff:0f:5e:cd:19:d0:
         90:ab:b2:d7:d4:1a:96:5f:f7:11:a9:02:76:0d:21:00:11:e6:
         7f:83:6b:7f:d4:95:15:3f:85:4f:b3:68:fe:38:54:3c:3d:2c:
         b8:f7:be:23:fc:12:12:3a:f1:0e:cb:ed:ef:e4:4b:34:12:1b:
         67:43:c5:c2:65:10:62:64:f6:78:24:31:e0:ae:91:0e:31:ba:
         fa:99:83:bf:4c:79:86:35:fd:28:bc:e7:d8:75:c6:48:93:04:
         95:38:75:cf:bd:ad:75:09:61:cb:09:88:78:1e:a4:af:0b:69:
         d0:9c:be:d8:fa:46:c1:f6:7e:c0:14:8b:59:89:a6:b4:5d:74:
         68:73:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:34:42 2025 by rpki-client