Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
File:                     E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft (raw, json)
Hash identifier:          gKT0n97Zd4OcJMvuKsZ8YZXay39cShM2ACPpWg9ZN1Y=
Subject key identifier:   DC:C5:13:46:1C:25:29:42:03:99:16:95:F9:B3:7E:B5:12:1D:FA:53
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       134F20AD70FB3A54E8E70FA685BB8145188893CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
Manifest number:          0250
Signing time:             Thu 19 Jun 2025 23:40:00 +0000
Manifest this update:     Thu 19 Jun 2025 23:35:00 +0000
Manifest next update:     Sat 21 Jun 2025 00:09:00 +0000
Files and hashes:         1: 3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (hash: 1RVO1BwgXdSM2bftm7wMF4hlkwNFkTw5yTtBr+ti2xw=)
                          2: 3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (hash: KuJaichzw2NzPyx1P41olphXNBe8KWCNtBYJumHvfYo=)
                          3: E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl (hash: jxdNm3LgRiXJWFjG794kXsnsNllDvKk8P8l3CA77ddM=)
                          4: 3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa (hash: /jZiQCgrjd3LZOoQiP3ggz/S/Het+nICwp/be9sdYOU=)
                          5: 3136382e302e3234382e302f32322d3234203d3e20323632373535.roa (hash: JHOjZZUGBlYXmHbNLaRVEDiQdvVCR00FHcE5zE2VR1o=)
                          6: 323830343a3139633a3a2f33322d3438203d3e20323632373535.roa (hash: 3VrZ71GugeVAb3Hc1/0M6jmimLVihUgj0EPI6ULcAR4=)
                          7: 3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa (hash: pHqGjv8poyAQEmt3KTrMjCwYjnOhITtASkvmz+Z7/Hk=)
                          8: 3133382e302e33322e302f32322d3234203d3e20323632373535.roa (hash: 26VP2I7LpoCAHTt32QK9IDHLKHd1mS0OHJLBS3eYfQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 00:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4f:20:ad:70:fb:3a:54:e8:e7:0f:a6:85:bb:81:45:18:88:93:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Jun 19 23:35:00 2025 GMT
            Not After : Jun 21 00:09:00 2025 GMT
        Subject: CN=DCC513461C25294203991695F9B37EB5121DFA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:db:b1:3c:e0:06:84:68:09:16:cd:96:a1:
                    a3:06:2f:e6:4b:c7:f9:13:77:a8:d0:d2:3b:e0:be:
                    f5:e3:14:48:3f:f4:1d:e6:bc:5b:f2:35:3f:dc:c9:
                    a5:c8:b2:32:9d:0d:e6:f8:19:b9:a7:0c:d7:dd:71:
                    bd:36:5f:20:3f:0f:ad:97:ff:14:df:b3:52:11:80:
                    b3:c1:08:59:4a:bd:f9:dd:ae:bb:9e:2e:f1:a0:9a:
                    53:36:08:22:25:f0:4d:5c:eb:1f:1f:67:1a:3c:72:
                    1d:48:72:7b:b4:e8:ee:9a:ae:5b:b3:c6:7e:ac:e2:
                    72:60:b9:04:6c:90:dd:c1:dd:78:c2:0a:1f:58:0b:
                    ff:16:d8:0c:bc:89:7f:67:d0:55:0b:34:eb:92:14:
                    45:d0:74:fd:47:c8:64:95:d6:d9:73:48:b0:73:a6:
                    59:03:55:5c:c2:19:a9:3f:a1:ba:ac:52:f9:2d:2f:
                    3d:bd:64:6d:eb:9c:1c:37:45:aa:4a:d4:7e:62:7c:
                    a4:fd:f7:06:21:67:9d:68:73:6c:58:b3:c2:1f:2e:
                    8d:25:14:ed:00:95:78:8a:f5:6f:f8:fe:e2:dd:77:
                    00:3a:d1:9a:7c:a8:9d:60:f5:a6:77:04:49:64:7e:
                    f4:7f:c6:31:24:8c:f1:ea:61:c2:da:c0:e6:32:19:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C5:13:46:1C:25:29:42:03:99:16:95:F9:B3:7E:B5:12:1D:FA:53
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:1b:32:8a:57:81:3a:37:26:aa:b3:44:d2:9c:22:c0:1e:
         f1:68:f0:1a:8e:9a:6e:0f:7e:05:6b:f0:bf:f6:0a:46:42:7e:
         1a:eb:97:56:f5:95:cf:6c:de:ce:4d:e7:c5:d2:2a:21:d5:a5:
         9f:ed:1a:1e:f2:99:f8:21:a5:e9:ce:ee:92:a0:5c:2f:37:e9:
         85:66:90:73:8d:98:e1:d7:d9:77:a4:d2:ba:93:a7:d8:15:67:
         95:3c:73:ec:11:4f:9a:e6:fa:4a:d4:15:cb:50:10:f8:6e:4e:
         83:0d:04:b2:dc:42:36:6f:00:97:97:20:e5:eb:75:61:a3:ee:
         d6:22:d5:50:c1:2b:8e:50:cf:f7:4f:6c:c4:ca:3b:25:ec:66:
         83:6c:a6:c1:bb:29:f1:7d:7b:63:f4:d2:77:43:0c:da:07:5b:
         81:d5:1d:1e:82:b6:a5:2e:9c:50:49:9a:b2:69:fa:9d:81:f4:
         de:ce:f4:b4:c3:64:1f:5d:59:b4:23:62:5c:6f:a6:ef:85:a8:
         64:40:f7:15:72:0d:9d:6e:c1:8a:a0:6e:dc:8a:33:25:de:33:
         59:6a:f9:ce:2b:f9:7a:74:68:26:55:cf:84:5f:23:b8:97:61:
         26:59:e9:fe:31:fc:68:6a:a6:42:e0:11:71:1b:94:82:a4:75:
         e0:bf:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:08:15 2025 by rpki-client