Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
File:                     5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft (raw, json)
Hash identifier:          WTVeY6GlBl27lW4gg1b+RwJardg1USoVurmZbm1IyPg=
Subject key identifier:   46:1C:DF:97:5E:63:AA:6F:CF:EA:A6:14:5C:C6:90:8A:48:9F:54:A1
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       0C709B93E18915A69933384149BE899221F7751C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
Manifest number:          0216
Signing time:             Fri 09 May 2025 21:47:28 +0000
Manifest this update:     Fri 09 May 2025 21:42:28 +0000
Manifest next update:     Sat 10 May 2025 21:55:28 +0000
Files and hashes:         1: 5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl (hash: CzjeaOQyJF4PuXrt6pDQR5OQlg/efnARgvDW+tH4pCw=)
                          2: 323830343a323037343a3a2f33322d3438203d3e20323634343931.roa (hash: 0+yyYhzefzIILi0EAiz+ba5lOaT5HBHgqWt7VVeb80Y=)
                          3: 3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa (hash: qoIZEu1/WWy4s44he/lhY8Elf0Ze8PVUEg3vPzj5UoM=)
                          4: 3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (hash: d08Pl+W/dTWpZFlmMKe8w3cnyJqa/CScvBLfxR4G/Og=)
                          5: 323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (hash: RTx6CCPuW1lY1SE9RqyeFLKfpghK/ucENv3ATWs3J+g=)
                          6: 3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (hash: 9mykslR77fZ7xC9MLu79f7z8bzLyXOic2iyPtYgwpU0=)
                          7: 3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (hash: DavKGaLt8+OCiM0sr6n2fHGnv4su2dNtgMGBKD7OrZI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 21:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:9b:93:e1:89:15:a6:99:33:38:41:49:be:89:92:21:f7:75:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: May  9 21:42:28 2025 GMT
            Not After : May 10 21:55:28 2025 GMT
        Subject: CN=461CDF975E63AA6FCFEAA6145CC6908A489F54A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:6e:41:4a:0e:86:3b:7d:29:6b:fe:37:a9:
                    3d:99:6a:ed:75:ca:a0:97:fa:0e:7f:fe:80:f3:44:
                    ef:2d:4a:c7:17:ee:b1:8a:cf:6b:33:85:28:c4:67:
                    9d:cb:33:ce:5e:81:f5:b7:b6:b4:90:86:ee:8a:03:
                    8b:98:9f:db:73:f8:e1:d0:d3:de:f8:53:d7:49:2a:
                    65:7c:7b:76:50:1f:75:e2:aa:98:fe:7b:62:2c:25:
                    96:7f:93:f9:c6:7b:0c:05:a9:9f:61:14:e0:7d:0b:
                    39:ed:2b:62:08:24:34:2a:54:6c:70:5b:9c:65:74:
                    d0:61:ab:3c:9e:0a:7f:65:19:22:a0:df:92:08:51:
                    12:33:55:94:de:f9:4a:a2:f3:8a:aa:ec:2d:52:90:
                    40:9a:69:b8:3d:4e:75:7f:c6:40:95:b2:c7:21:72:
                    64:3a:54:83:f5:45:64:15:45:f0:be:a2:86:6d:e4:
                    32:6d:7e:64:d8:64:4f:ee:60:33:b7:7a:b2:40:94:
                    15:62:0f:bb:25:d5:23:00:0d:22:58:1a:97:2a:55:
                    bd:61:f3:4f:45:82:c0:d4:0e:0f:80:8a:76:99:d4:
                    5b:5d:2d:16:6e:2e:f7:2b:53:fd:1c:b4:6a:e2:e7:
                    08:22:57:9e:9c:29:55:05:c6:43:14:c8:62:43:ab:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1C:DF:97:5E:63:AA:6F:CF:EA:A6:14:5C:C6:90:8A:48:9F:54:A1
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:78:a1:2b:9a:31:67:cc:05:40:d4:3b:55:2e:30:d3:ba:
         9f:f1:26:10:6f:2a:78:52:6c:30:f1:a4:eb:aa:c1:0a:88:fe:
         a9:96:0d:d1:e5:58:23:ee:1e:7c:46:f9:53:6b:cd:61:55:79:
         0d:35:b4:a8:f5:6b:39:81:4f:23:58:11:7c:4d:ff:d6:ca:c8:
         b7:3e:cc:e3:86:ef:fd:fb:7e:81:05:77:39:8a:89:2d:30:e9:
         07:ce:26:de:02:d9:79:c0:63:37:28:9a:0d:ba:96:25:b5:57:
         81:0a:d3:32:ce:38:bc:63:9a:d1:6a:85:7b:59:0b:23:ab:98:
         71:39:f5:9a:bc:86:08:a8:05:05:8a:ff:4f:be:3a:01:f5:72:
         10:16:08:7c:82:8f:95:05:bb:aa:58:f0:44:98:de:fd:96:95:
         53:11:dd:de:3d:ee:aa:8c:14:15:3f:6f:3c:af:65:92:0c:5a:
         ed:78:86:98:08:0e:a0:63:04:62:3b:b7:e3:f6:42:15:bc:9f:
         5b:dd:4f:6a:70:cb:8c:43:04:82:71:42:8c:80:81:e0:1d:90:
         53:3a:85:40:16:fc:4f:42:25:53:23:0e:f9:f3:a1:dc:a4:30:
         74:91:f4:3c:97:74:72:97:f6:48:b7:8c:9a:d9:0e:95:ed:0a:
         84:ea:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:59:26 2025 by rpki-client