Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
File:                     06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft (raw, json)
Hash identifier:          1TiiSxBkk5Jl8YTddaVUwNlXgoQKSKFVk8xle+boHQk=
Subject key identifier:   89:D3:25:B5:AC:AB:9F:1D:A5:CE:BE:24:4B:EB:CC:C1:E7:81:4C:12
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Certificate issuer:       /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial:       719C89923E6F1698FC1A5FE794CAE0EAF971E247
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
Manifest number:          49
Signing time:             Tue 05 Aug 2025 17:49:42 +0000
Manifest this update:     Tue 05 Aug 2025 17:44:42 +0000
Manifest next update:     Wed 06 Aug 2025 20:44:42 +0000
Files and hashes:         1: 3133312e3130302e37342e302f32332d3233203d3e203631373536.roa (hash: 6FNuWOq1eHI5q3MgOqYyeE16Vv/YaJkuwv3MrFDS2IU=)
                          2: 3133312e3130302e37322e302f32332d3233203d3e203631373536.roa (hash: VVZyjmnPEhB4/UoqE4uR1WwlyjcIZU8B+HO+mEVFe+0=)
                          3: 3133312e3130302e37322e302f32322d3232203d3e203631373536.roa (hash: Kq1NYgqt7BBJXm6gv+qAVQNNtlsiDlad2EARZ4g408M=)
                          4: 323830343a316265383a383030303a3a2f33332d3333203d3e203631373536.roa (hash: Te1wIaLs970GrPtdJHvPfelk9mSSTu3aJper1pE/gLI=)
                          5: 06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl (hash: Q37byzqLYf1c5Fhil4h6sqarpmVg4G0xlzOObAY2dh0=)
                          6: 323830343a316265383a3a2f33322d3332203d3e203631373536.roa (hash: gjYR3lWRGiJJxuwH/+0i6Q87/18K+L4o4fePaKBOJ1w=)
                          7: 323830343a316265383a3a2f33332d3333203d3e203631373536.roa (hash: l78EKC9kkJuCz96yuwMWkw3iPI6l1+LN8zK/5aMvMYQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 20:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9c:89:92:3e:6f:16:98:fc:1a:5f:e7:94:ca:e0:ea:f9:71:e2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
        Validity
            Not Before: Aug  5 17:44:42 2025 GMT
            Not After : Aug  6 20:44:42 2025 GMT
        Subject: CN=89D325B5ACAB9F1DA5CEBE244BEBCCC1E7814C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:8e:84:77:34:2e:7a:99:3e:f6:18:6f:e9:
                    53:31:83:83:0d:55:12:65:35:b4:11:ac:5f:28:d2:
                    0f:25:80:b3:e6:49:23:9d:34:5c:a7:50:db:ed:a1:
                    b3:d9:f2:bd:fb:e0:f7:9b:41:47:bb:69:05:65:56:
                    dc:2c:fc:b2:53:7e:cc:c7:5d:a9:5c:92:0a:73:03:
                    ee:55:4d:43:8b:b2:0a:0f:c2:6a:fa:91:f5:1e:4c:
                    30:f6:50:0a:40:9d:b9:88:42:34:83:2b:58:52:f4:
                    ae:8b:0c:34:70:82:72:62:54:83:84:de:31:fd:12:
                    7d:1c:e9:e2:63:ff:6f:b1:a0:cf:c3:52:1d:fc:2a:
                    8e:5b:34:26:b2:8d:76:c6:93:2e:a2:70:98:66:cb:
                    ba:79:3c:86:4f:00:15:c2:d5:89:5b:95:2b:48:d1:
                    ed:28:8c:e0:ba:be:18:77:c7:f4:4c:59:d0:01:58:
                    b9:1b:87:b9:45:fa:70:c6:6d:ff:ad:e5:00:52:e4:
                    07:be:78:c9:e1:17:14:59:00:f5:0a:55:63:9a:a7:
                    76:de:be:15:d3:9e:06:09:33:9a:93:27:a1:a2:f3:
                    d0:a1:1b:44:c3:48:f0:3d:b4:d1:21:8f:b0:7d:a9:
                    01:30:25:2b:bc:5b:d7:ed:11:6e:4c:4e:ef:b0:6d:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:25:B5:AC:AB:9F:1D:A5:CE:BE:24:4B:EB:CC:C1:E7:81:4C:12
            X509v3 Authority Key Identifier:
                keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cb:fa:9d:3a:a1:d1:4c:cc:83:33:37:f9:09:55:16:42:77:
         b6:b9:df:fd:a3:13:2d:cb:6b:44:52:0b:bb:99:0a:63:d4:5c:
         19:db:fd:00:f7:8f:9d:ab:78:d0:d9:d1:8a:3e:6b:fb:4f:0d:
         07:df:ba:a1:0a:ba:52:c8:d0:e6:04:5b:df:3a:12:d2:31:c1:
         a9:01:18:ea:0a:e4:2a:25:71:27:f0:a8:73:f6:8b:85:19:bf:
         fe:ba:6c:a3:28:74:52:3a:e6:9a:e7:fa:2c:10:a2:9f:d8:36:
         f4:69:8d:ac:5b:58:c6:fa:5c:0b:cf:d0:43:d9:3d:64:47:49:
         5f:ce:c3:4d:63:f9:c4:06:61:aa:0c:9a:83:80:64:df:55:d0:
         d7:81:76:34:9a:3b:e8:b5:60:4d:1a:74:01:45:50:25:bb:45:
         19:f9:d5:e0:cb:51:20:39:61:e8:90:27:dc:08:f2:27:d0:00:
         bc:b1:22:ce:06:f0:8a:40:8a:05:48:65:e0:25:44:3e:12:3d:
         e4:1b:9d:6c:d7:2b:7c:0a:c1:1d:e5:2f:c4:ab:e7:e2:2b:c3:
         e1:87:e4:ca:c3:3c:8e:3e:54:be:df:f9:cc:46:c8:ee:67:0c:
         8b:62:fe:b3:79:14:b1:bf:e2:10:7d:02:0b:da:a8:e9:83:ec:
         54:2f:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:44 2025 by rpki-client