Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
File:                     2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json)
Hash identifier:          gQ5Bf1C8dShi6j8yR+Aq4zsxvxJyHW8uoprU7TUYhWY=
Subject key identifier:   0D:44:D7:7C:BA:71:2C:70:CD:CE:4D:7F:3F:F3:86:F8:55:C1:F0:16
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       6066DB6527BB9ED7B776F21D76AAFE99F0C8D96F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
Manifest number:          01FB
Signing time:             Sun 15 Jun 2025 19:25:21 +0000
Manifest this update:     Sun 15 Jun 2025 19:20:21 +0000
Manifest next update:     Mon 16 Jun 2025 22:30:21 +0000
Files and hashes:         1: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: cexwvQVo5HooQieHGBIwzXZEIQLA1g0ov7qJ1ITQWNQ=)
                          2: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: 1IV3WY/QEAW1n1IWjg0tOjW5dO+ggc66oTNHEIV7TWI=)
                          3: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: Fwqae6D8qJ/tl3u9If0yyfxS9bcz0H12LpdImMqKgz8=)
                          4: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: z6AxAeBvuZkF2Hv3TgcmR5cniDfzlrMjmqRXv6n3fBs=)
                          5: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: Vp+ej4dQx+65lyUdgAHuPgBaf+ucorRNSBDiDndfVME=)
                          6: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: KleVsHAqtvWr8k2742HawWCdXqH/hhdJzyliz+AilX4=)
                          7: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: 3Ffp5JJCiBJxBl96vfAKZjO3HJm6sYK5tARVTWZSBow=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 22:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:66:db:65:27:bb:9e:d7:b7:76:f2:1d:76:aa:fe:99:f0:c8:d9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: Jun 15 19:20:21 2025 GMT
            Not After : Jun 16 22:30:21 2025 GMT
        Subject: CN=0D44D77CBA712C70CDCE4D7F3FF386F855C1F016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:9a:01:5b:3b:d7:eb:48:dc:d0:c1:b6:ba:
                    25:6b:f9:f3:21:d6:3c:bc:ca:46:36:39:9e:85:a8:
                    3e:19:54:7a:d7:cf:74:3c:42:ea:c7:fc:2d:dc:a8:
                    14:80:b3:ad:a0:9b:f5:c7:db:9c:34:29:04:46:bd:
                    e3:c8:9e:c2:77:f9:26:c4:2f:15:da:ce:4c:6b:78:
                    17:3e:3f:5f:4d:4a:27:c1:f2:0e:2f:d3:b4:19:0a:
                    8e:b8:c7:fb:59:3f:af:09:b1:98:9a:73:7b:0f:f6:
                    e3:0e:97:ba:5d:92:76:49:bd:1c:fe:92:00:36:d1:
                    ec:da:f1:e3:aa:92:f7:88:28:47:06:d1:88:69:3a:
                    9d:13:ee:23:6e:00:3e:4b:3c:04:bf:e6:34:96:1d:
                    c4:aa:74:02:fe:c6:98:05:6a:37:87:06:52:a7:e4:
                    10:66:06:a8:cb:75:31:02:19:c4:2f:0d:64:1d:fb:
                    89:e4:6e:1b:42:2f:bf:f5:2c:e6:a8:c4:9f:e8:75:
                    61:66:a5:6d:46:75:6a:90:4a:9b:36:6e:77:dd:ea:
                    12:61:4b:2b:5b:03:d3:52:e5:87:5a:c9:6f:cd:14:
                    4b:a0:b7:42:fb:41:98:da:61:31:64:27:68:2f:d0:
                    f0:6d:c3:2f:46:80:8a:84:22:8a:dc:bf:15:40:d9:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:44:D7:7C:BA:71:2C:70:CD:CE:4D:7F:3F:F3:86:F8:55:C1:F0:16
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:ca:e8:59:c4:5c:dc:3b:5b:e5:f5:e9:93:00:6d:9c:81:
         8e:18:1c:c4:2c:23:13:e7:7a:c5:b0:59:37:32:7b:83:ad:04:
         97:49:10:68:f6:9a:03:f7:c8:dc:4b:a9:e4:ce:4e:68:a7:08:
         be:d6:ed:1d:d2:fd:96:72:a4:e5:4a:57:89:04:15:f8:7a:fc:
         6f:0f:55:f7:d1:60:ff:8d:9e:e5:94:81:63:61:eb:04:c4:c7:
         d7:31:ee:d7:58:da:66:c8:61:2c:e5:ed:d3:f0:26:46:31:ee:
         e9:eb:c5:a6:3f:7f:30:5b:6f:b5:1f:20:c7:17:cc:91:ea:14:
         65:c2:8b:b3:c4:65:1b:48:f2:e8:24:94:91:33:76:26:eb:5b:
         d8:f0:d3:2b:70:4f:c7:a2:28:e8:ff:3a:31:b5:e7:45:c6:f2:
         75:7b:e0:02:ea:16:d4:49:e2:f1:c7:e5:03:94:40:31:cb:1d:
         1d:67:14:e1:de:ea:81:b4:83:60:89:36:fd:9a:35:b8:0e:0e:
         90:ff:66:01:aa:01:c6:ac:6e:da:ab:3f:14:0b:dc:0e:0c:27:
         06:e2:9a:78:76:0d:6c:45:70:16:20:8c:2e:a0:f3:9f:0e:2b:
         f6:0c:c1:39:13:07:97:37:d3:e8:7f:d3:d0:15:81:93:a1:fc:
         82:4a:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:29:07 2025 by rpki-client