Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
File:                     F61AA6D04968E2222C81499C46D03813F1070400.mft (raw, json)
Hash identifier:          Cn0m5PkHPeITnAgQuHmlDnYQs4Ahe8iMRTt0uayeqn4=
Subject key identifier:   29:8D:46:86:84:BD:BB:8D:91:80:2A:8E:58:A9:30:BD:F9:01:69:0A
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       7BDFC5E11AF5DE5F8615170FC217A7437D07CF0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
Manifest number:          0112
Signing time:             Sun 27 Apr 2025 14:10:13 +0000
Manifest this update:     Sun 27 Apr 2025 14:05:13 +0000
Manifest next update:     Mon 28 Apr 2025 16:10:13 +0000
Files and hashes:         1: 3138392e38342e3136302e302f32302d3332203d3e203238313731.roa (hash: 9cCHxisrQbcvqgrXYb1FMnOR1opLT5/3gLcwgpJUiMU=)
                          2: 3137372e3133372e3234302e302f32312d3332203d3e203238313731.roa (hash: C2DRBYLwQ2ccRNhVyPuOjzMp87KdmEZ6vL8rvFgjzj0=)
                          3: 3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (hash: LSjMHoE69qWqnpzVzyyj7h0wlVYndHxXSlQXW5zHZ84=)
                          4: 3137372e38342e36342e302f32312d3332203d3e203238313731.roa (hash: QGs4i+u1Fp781xTRBZuVf9Sbpy4p+Uveo96HgjsMvDA=)
                          5: 323830343a6438343a3a2f33322d313238203d3e203238313731.roa (hash: fFWlkw4VgGZKIM3JMaVwB2wGQVwKvg1CcuwKadWJSlU=)
                          6: F61AA6D04968E2222C81499C46D03813F1070400.crl (hash: atQksG/L1ls9WqZqqgtiaXtk5EKk8qzBV5OPdIj9Efg=)
                          7: 3137392e3130372e3132382e302f31392d3332203d3e203238313731.roa (hash: yhjpZ/3yeOya0YdscNdzwhmDLQucI5LPtbVEA2kspkI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:df:c5:e1:1a:f5:de:5f:86:15:17:0f:c2:17:a7:43:7d:07:cf:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Apr 27 14:05:13 2025 GMT
            Not After : Apr 28 16:10:13 2025 GMT
        Subject: CN=298D468684BDBB8D91802A8E58A930BDF901690A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:29:4a:94:09:e1:6e:ac:b2:18:43:fd:92:
                    d6:55:9d:f4:93:f7:b6:dd:31:89:1f:20:ff:ce:33:
                    1a:f2:3b:48:f5:ac:ba:ce:84:50:75:a2:51:0f:4d:
                    31:c8:a8:c2:98:86:b6:a0:0b:d5:24:8d:a8:b2:8a:
                    cd:d5:e4:f7:39:51:e1:aa:f8:2c:ef:5f:fd:2a:72:
                    04:9d:6f:e4:49:4e:90:ef:a7:a5:e6:91:6e:1a:57:
                    fa:c5:0f:fb:17:5c:94:2c:96:16:9a:9d:bf:fa:39:
                    9f:73:d6:ce:1b:2f:9a:17:15:69:d7:46:e5:ac:26:
                    b4:ef:97:ec:f9:61:5a:00:97:f4:52:d3:a3:89:51:
                    80:23:ec:d7:5b:27:65:c4:1f:03:b0:e4:5f:2c:c1:
                    76:0e:d9:91:89:e0:20:7f:79:ae:db:1e:e5:fa:52:
                    8b:b2:49:0d:b3:8e:1f:19:49:c5:4e:16:58:8a:71:
                    e1:3d:0c:4f:a7:ac:bf:1c:c1:22:cd:47:d0:81:93:
                    47:2b:6a:75:ea:06:5e:04:74:aa:74:a6:29:31:fd:
                    73:cb:8a:99:2f:ec:f0:65:26:bf:ba:3c:03:9d:2a:
                    40:35:48:e1:29:e0:97:e9:53:c7:35:63:a0:7f:e6:
                    89:78:35:2a:42:9a:f3:2e:15:00:f8:c2:e4:e1:5e:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8D:46:86:84:BD:BB:8D:91:80:2A:8E:58:A9:30:BD:F9:01:69:0A
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:72:48:16:32:d9:70:87:41:f5:21:b4:f5:ba:c9:b6:d9:
         f2:d0:8c:54:d8:77:01:53:04:50:ef:bc:c3:89:e0:ff:91:d3:
         15:d8:49:f5:18:57:81:c6:79:56:00:97:61:1b:52:56:1d:2c:
         22:9d:5e:a3:6c:bc:f3:55:39:90:1d:2e:f3:e5:63:d0:e6:a3:
         07:19:56:73:e0:86:fe:f9:70:94:d1:e9:9f:b6:dc:ae:64:22:
         b8:02:7e:87:62:36:9d:a3:ae:4e:a4:c6:ef:28:1b:5b:72:ff:
         14:60:bb:87:d4:1b:59:85:ee:0d:d6:fe:c7:70:94:6a:a5:59:
         6e:e0:03:7d:06:25:57:09:d7:c3:f7:4b:8f:c4:7a:6f:e6:bf:
         a1:63:73:a7:1c:d5:b8:ee:89:5a:ab:75:d4:50:97:47:68:42:
         c0:71:e0:b8:57:18:5c:79:51:1b:b6:c7:02:30:f5:41:49:69:
         f6:31:7c:82:46:70:52:c9:26:ee:73:15:48:5b:1b:cb:fd:d2:
         a0:25:1f:9f:f6:7d:dd:a2:b3:79:20:b8:1f:f3:b6:2b:99:ca:
         0d:8f:c8:ed:63:32:fb:c5:ab:4e:af:e1:fd:ac:f4:de:64:2e:
         b1:ba:87:bb:64:e8:61:f2:67:b8:0d:33:57:3a:63:cb:fd:38:
         09:a2:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:53:32 2025 by rpki-client