Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          ZD/sHEiZNtu11YMujJ3P7xGquziiz6Dg94doyRFovoc=
Subject key identifier:   5F:24:3D:21:BE:12:11:B3:44:6B:F5:18:B1:FC:09:B0:28:CA:C9:9C
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       1CAB1C20F6AB1026220CAA02DF431F771CA2CC07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          024B
Signing time:             Thu 19 Jun 2025 01:28:16 +0000
Manifest this update:     Thu 19 Jun 2025 01:23:16 +0000
Manifest next update:     Fri 20 Jun 2025 03:02:16 +0000
Files and hashes:         1: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=)
                          2: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=)
                          3: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=)
                          4: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: jd4CpRhnJcazlC/ImqchN0RFunOP8kIO0e+aIzfYB/M=)
                          5: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM=)
                          6: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: MszXxChKZIxqO1H76aI8EC2vVoyHxziN2kG99kubgms=)
                          7: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: CfOnRF4j6DfohH6BFHRKC5zu5+rSa0Rfv661CHSNmXE=)
                          8: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: o/aOBYWzoNM2ezTPVUmL9FfbjqSHXnYykvoAEekZKlg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 03:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ab:1c:20:f6:ab:10:26:22:0c:aa:02:df:43:1f:77:1c:a2:cc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Jun 19 01:23:16 2025 GMT
            Not After : Jun 20 03:02:16 2025 GMT
        Subject: CN=5F243D21BE1211B3446BF518B1FC09B028CAC99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:42:86:ea:83:63:68:e6:56:46:de:93:d4:
                    84:fb:b1:ab:e6:bc:b0:98:77:7f:dc:bf:ab:a2:2b:
                    c0:63:c5:47:73:90:35:a7:e6:fe:48:2f:a9:8e:7b:
                    15:8a:f7:cc:81:92:79:09:d0:08:e2:f4:dc:c4:d1:
                    85:dc:1b:56:80:5f:28:c8:fe:2e:3e:35:c8:e6:c4:
                    d2:a5:c9:5e:8e:19:50:40:4b:7d:b9:ef:59:2d:33:
                    d1:c7:67:db:ab:f6:e3:af:40:19:b7:7d:b1:b9:94:
                    a0:e1:c4:54:a8:d4:bb:47:5c:d7:93:2b:60:cc:03:
                    eb:23:3f:2f:ba:40:94:98:eb:f1:a4:17:bc:dd:f3:
                    39:98:38:89:44:be:4f:d4:59:dc:ca:63:44:cf:22:
                    62:de:62:fc:40:4c:f0:dc:b5:dd:4a:91:a4:71:80:
                    b6:a4:23:09:0f:91:05:5a:63:e2:fb:fd:0f:19:6e:
                    71:89:91:a6:de:3f:80:11:2c:d8:cc:87:22:0c:6a:
                    07:f6:e2:bc:fe:1d:1d:3c:fd:1f:50:ef:51:2c:4c:
                    45:13:c8:24:75:9b:c1:8f:fc:aa:ad:9b:09:83:cc:
                    00:4a:46:9e:53:b8:9e:0e:91:86:37:10:b2:e8:65:
                    f9:8c:96:6d:4d:23:f4:af:1e:e4:e8:67:67:b1:62:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:3D:21:BE:12:11:B3:44:6B:F5:18:B1:FC:09:B0:28:CA:C9:9C
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:d5:c4:17:55:b2:1f:43:1c:79:b1:6f:e0:b7:c3:3f:de:
         b3:3d:6f:9f:78:fd:dd:1b:31:85:46:df:b5:af:b1:48:3e:2c:
         de:f7:70:4e:7a:06:ef:74:54:6b:55:f4:ab:aa:b3:fc:7c:79:
         86:65:67:0c:c7:17:e1:fb:64:d6:c4:3f:fd:31:c3:45:9b:9d:
         66:b5:ed:03:fa:f3:24:ee:fc:06:40:bb:1e:d4:52:71:9f:52:
         cd:cb:1d:f0:fc:95:4f:30:36:07:11:89:f2:46:23:d3:78:71:
         48:6d:07:1f:6f:f5:e5:c6:f4:21:5a:d5:63:9a:5e:5e:f9:d4:
         50:1e:fc:07:ce:cc:b5:cd:a8:3e:aa:69:d8:85:09:41:52:1f:
         7b:c1:38:6f:a5:b4:ce:5e:9a:3c:29:e2:73:93:36:50:ff:9b:
         a0:e3:b6:6f:75:61:1a:d4:05:6a:5a:1a:de:43:15:97:02:c5:
         fc:84:11:a4:04:ad:44:b2:5c:95:d7:d8:97:9f:4a:c7:e3:df:
         ba:e7:b8:f3:25:9c:0e:a8:a1:5f:c6:7d:ee:80:f9:67:bd:ad:
         c5:99:71:ea:de:c2:5f:3f:cc:37:3b:05:2c:9f:fd:f5:08:90:
         5b:60:9d:da:b4:41:81:fe:ae:1f:e0:7e:cb:41:80:58:67:e0:
         ff:25:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:30:06 2025 by rpki-client