Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
File:                     020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft (raw, json)
Hash identifier:          7vAUms2/The9i71IZzbisYVNVP8WlrudjHWX8pesH2I=
Subject key identifier:   6C:7D:90:99:44:A3:E5:88:78:F2:32:69:BE:E6:AE:76:C8:B2:1E:34
Authority key identifier: 02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03
Certificate issuer:       /CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
Certificate serial:       7E94F9A65BD7D4D007D5A8E86EDE2EC98E627449
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
Manifest number:          5A
Signing time:             Tue 17 Jun 2025 11:34:24 +0000
Manifest this update:     Tue 17 Jun 2025 11:29:24 +0000
Manifest next update:     Wed 18 Jun 2025 12:12:24 +0000
Files and hashes:         1: 020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl (hash: H6KvnHVXyfR4elji8P2ib1EWjy/9QDQz81TFV3RcCWM=)
                          2: 323830343a376462383a3a2f33322d313238203d3e20323731353738.roa (hash: QV4bak4yJbutgIlmji9b6+UXVDaNSeP7XojS+orZIb4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl
                          rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 12:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:94:f9:a6:5b:d7:d4:d0:07:d5:a8:e8:6e:de:2e:c9:8e:62:74:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
        Validity
            Not Before: Jun 17 11:29:24 2025 GMT
            Not After : Jun 18 12:12:24 2025 GMT
        Subject: CN=6C7D909944A3E58878F23269BEE6AE76C8B21E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:aa:07:fe:bc:2e:e0:b7:3f:b7:33:1c:f6:
                    69:6f:3f:39:99:fb:b6:c6:3d:74:c7:f3:92:76:18:
                    54:81:fe:f7:38:a5:a8:ff:c8:82:0f:6a:21:b1:b3:
                    1d:4b:4d:ee:0e:cf:cf:bb:7d:e0:4d:da:12:bb:bc:
                    63:53:a3:5a:11:22:80:1e:3f:1e:60:23:56:3e:c3:
                    ad:3f:b2:88:35:d2:cc:94:36:5e:07:b1:4c:e1:5f:
                    ae:00:1e:2e:cc:97:f7:97:5e:9d:d1:de:a3:b0:7e:
                    a3:5e:b5:3f:b8:a2:b1:cb:3c:af:fd:1f:93:4d:71:
                    5d:5a:22:c1:ab:58:1b:3d:70:c4:98:93:3e:b5:b4:
                    cf:c1:02:d9:15:72:57:4b:55:30:7c:f3:ab:53:28:
                    0a:08:f1:86:32:95:a1:86:e5:5b:80:13:69:29:15:
                    c8:6a:4c:6b:54:ca:5f:00:bd:2a:7d:e4:1e:2d:f7:
                    9b:fd:08:89:9d:cc:ee:32:79:62:6b:17:e1:dc:e6:
                    87:be:0c:7d:32:ea:d6:b7:f3:87:38:a7:21:6e:3d:
                    47:7c:dc:1e:de:10:2d:ba:de:89:8f:68:9f:85:7e:
                    44:7f:ae:fd:80:ad:aa:05:29:de:24:90:80:e6:e2:
                    79:fd:03:47:7d:2d:d3:7a:22:48:66:f9:ee:92:f9:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7D:90:99:44:A3:E5:88:78:F2:32:69:BE:E6:AE:76:C8:B2:1E:34
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:09:33:a3:16:eb:98:cc:ca:01:31:1a:46:60:00:d4:00:99:
         99:d5:ad:4e:2a:55:68:2a:e0:ea:48:a5:a2:8f:80:cd:01:1d:
         53:56:55:88:83:c5:66:cc:12:2b:89:63:58:ee:52:b4:7a:88:
         d5:3f:ef:7e:84:17:4d:b3:a8:c1:a3:b5:18:23:e2:16:b8:db:
         4b:40:24:91:17:34:fa:6e:47:75:1d:86:7d:77:67:26:1a:af:
         6e:6a:b2:4e:59:07:52:e8:ef:5f:a8:0a:76:53:b9:d3:8c:17:
         0e:44:27:2a:66:33:fe:ac:30:10:ce:53:6a:88:25:42:4b:85:
         93:82:00:a6:77:0d:f7:72:6c:77:cc:90:85:6d:80:e7:e6:51:
         ed:82:6c:e2:04:b1:3a:29:f9:f4:ca:71:3f:0a:e1:57:74:3c:
         4a:bc:1b:c3:1b:98:39:57:94:af:aa:b2:8e:8f:3c:85:66:1f:
         9e:52:33:d8:37:68:dd:9a:6a:b1:8d:cf:75:36:a2:06:19:41:
         0a:2f:5a:bd:09:77:5e:8f:f9:2c:bb:79:f0:91:6c:cb:bb:58:
         ee:d7:c7:30:7c:7c:1a:4f:14:59:71:be:c9:02:a1:88:3c:a9:
         81:dd:ce:19:30:62:9e:94:a5:9d:2a:08:c3:ed:7f:61:10:ae:
         28:2a:78:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:21:15 2025 by rpki-client