Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
File:                     806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft (raw, json)
Hash identifier:          MeP5yKOCaA61vk2JbTZxmgVEaKbq5sXKcTeCf1GUEO4=
Subject key identifier:   61:4E:A5:CB:77:F1:3A:90:04:18:69:1E:5F:8C:E8:9E:00:4C:FD:CE
Authority key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52
Certificate issuer:       /CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
Certificate serial:       7220F6D5207B80C468B636C193F1C23EBDE9D030
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
Manifest number:          0247
Signing time:             Thu 19 Jun 2025 11:50:40 +0000
Manifest this update:     Thu 19 Jun 2025 11:45:40 +0000
Manifest next update:     Fri 20 Jun 2025 15:17:40 +0000
Files and hashes:         1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: aJepNlwBajDAqgc6KneJ78CpKDsJPHnN/0pqAA8sjeQ=)
                          2: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl (hash: qQ6wGtYDLhm6cS1HO76MmpvYVm3s4rC5apJEMGtPpKA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 15:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:20:f6:d5:20:7b:80:c4:68:b6:36:c1:93:f1:c2:3e:bd:e9:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
        Validity
            Not Before: Jun 19 11:45:40 2025 GMT
            Not After : Jun 20 15:17:40 2025 GMT
        Subject: CN=614EA5CB77F13A900418691E5F8CE89E004CFDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:9b:4a:80:c6:d1:97:e4:2a:aa:ae:d2:38:
                    c3:b4:03:e6:a2:63:3c:f5:54:27:66:eb:91:5f:98:
                    4b:37:91:87:99:35:f1:e4:78:79:bb:4f:72:88:1b:
                    95:42:3b:3d:5e:23:ef:d0:e5:94:43:86:e6:f5:28:
                    d2:ef:da:b7:f9:4d:3f:bc:20:69:82:6e:95:a0:3f:
                    82:bf:ab:ea:24:b9:56:04:02:cf:1f:97:b0:60:cf:
                    35:5f:ef:9d:f1:f4:aa:02:cb:42:e4:ee:71:e0:9e:
                    22:f8:79:65:f8:c3:db:a7:21:00:d7:00:77:35:97:
                    f1:c7:e4:86:50:28:c6:91:40:d4:93:80:f1:5e:bc:
                    d8:b7:07:b0:ea:42:61:c7:7d:6b:12:83:d1:f5:85:
                    d6:03:f0:46:6b:3a:0b:4a:7c:db:58:71:30:45:6f:
                    09:38:52:9a:3b:b4:f1:8a:82:a2:d6:95:ef:47:6c:
                    42:94:5a:eb:05:6a:53:33:42:46:be:a1:df:30:7b:
                    01:65:2b:a4:41:2e:83:fc:66:61:21:2a:56:b9:e6:
                    6b:0e:e6:f4:52:db:ba:7b:67:28:9d:3e:6f:fe:5c:
                    f5:7f:15:85:62:fa:80:c3:fb:30:0f:18:07:18:5e:
                    0f:1d:d3:92:b4:b9:d2:cf:f4:88:9c:71:df:66:03:
                    e0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:A5:CB:77:F1:3A:90:04:18:69:1E:5F:8C:E8:9E:00:4C:FD:CE
            X509v3 Authority Key Identifier:
                keyid:80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:74:02:1d:75:6d:67:fc:64:1c:2c:5f:da:27:29:df:b4:97:
         9a:02:cc:15:93:1a:27:ba:06:9c:e6:e4:bf:7a:50:f4:36:1d:
         cb:4f:c8:9d:40:1a:40:f9:45:71:cd:e2:1c:4b:ac:b9:53:a2:
         da:c9:31:c6:c3:63:76:01:3d:78:df:8c:ec:a9:e0:13:34:8d:
         93:94:df:46:9d:8f:76:bc:4d:9d:d8:10:04:3b:e5:0a:a0:8e:
         97:f9:34:9e:be:66:d3:f2:5d:7d:47:ba:55:17:cc:0a:9e:70:
         68:fb:54:e6:37:87:0c:1d:9d:91:34:09:06:a5:9c:99:9d:f4:
         87:87:cc:79:7d:0d:b0:2a:6c:de:92:c9:3f:18:f7:e4:40:85:
         25:cb:d8:ec:86:8d:64:22:ab:39:1a:00:8b:ed:d3:92:bc:df:
         13:f1:1e:39:4f:66:49:10:ad:be:38:d2:86:02:f2:76:48:a4:
         52:ef:aa:dd:b5:16:85:cf:3f:27:40:81:4e:24:bc:ea:29:01:
         f4:3c:c1:ed:eb:50:a9:df:a9:ec:20:d5:56:4b:1c:de:33:6a:
         ff:65:ce:81:c0:be:6b:9f:7a:cf:7b:78:36:78:8f:8f:cf:b9:
         7c:0a:84:d5:90:ce:c3:5b:a4:b2:d4:a7:3b:de:be:f3:09:c7:
         c1:16:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:03:59 2025 by rpki-client