Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft (raw, json)
Hash identifier:          FsFJRwwGwZ9GovRhK77uSgRXTIoFTZ62+Ot9IQ43BbQ=
Subject key identifier:   9D:CE:2B:9F:79:55:E5:82:91:27:62:3B:08:63:35:EF:4D:BC:D7:2D
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       600A4A9EC01524ACAFEE5617ECE7123C2E81C1CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
Manifest number:          0259
Signing time:             Tue 17 Jun 2025 12:34:27 +0000
Manifest this update:     Tue 17 Jun 2025 12:29:27 +0000
Manifest next update:     Wed 18 Jun 2025 14:16:27 +0000
Files and hashes:         1: 34352e3233392e3232342e302f32322d3234203d3e203631383035.roa (hash: dCwgks9kz+PtKonoUYMuaJ/xBVsseEIveXSK48b+vek=)
                          2: 323830343a313939383a3a2f33322d3438203d3e203631383035.roa (hash: Qk7ja/D0UnEABlntWPvNXxeAnxQmmqTk79+LRpxGwiA=)
                          3: 3137302e3234362e33322e302f32322d3234203d3e203631383035.roa (hash: WnVJTcCQumCE9fQ7Vws90QAt2HsWCykqOp9Cx81XI8M=)
                          4: 3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa (hash: FbA7Md3FlU43upzx21RM/HOPJeIXcMSZyumJsm6sz8E=)
                          5: 3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa (hash: vICwpsDgzmHAq6d4aB9nm8j21S6Qzk2xwhEfVV+wbW0=)
                          6: FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl (hash: 21JwhiVzQ4NeYwS3Z2t5e9hQqsbgym5DYP8FeH8NsEc=)
                          7: 3137302e3234372e38302e302f32322d3234203d3e203631383035.roa (hash: yCzuLmb/Tt6KFd57YY2nX7jQhrMJcLtBuCJAgEPyWp8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 14:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0a:4a:9e:c0:15:24:ac:af:ee:56:17:ec:e7:12:3c:2e:81:c1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Jun 17 12:29:27 2025 GMT
            Not After : Jun 18 14:16:27 2025 GMT
        Subject: CN=9DCE2B9F7955E5829127623B086335EF4DBCD72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:1e:b6:69:57:49:0d:7f:dd:20:ed:57:7b:
                    6e:cf:25:fe:20:99:6e:24:84:e2:5f:74:e3:af:09:
                    df:8f:5c:1a:3f:8d:0d:0a:14:e5:60:46:f8:da:bd:
                    df:76:c8:5e:b8:aa:d7:5f:37:3c:1a:94:01:4e:24:
                    5d:dd:24:18:77:62:3c:9c:b4:f4:86:5e:32:3a:15:
                    20:f4:e3:6a:dc:06:d4:eb:31:56:42:aa:12:27:dd:
                    be:42:73:72:e0:a1:cd:e5:cb:fc:43:aa:8f:40:a6:
                    ee:c9:58:12:c3:4b:d1:3a:1c:29:b9:e2:7c:9d:a8:
                    b0:ba:d7:46:29:2a:ea:ec:e4:54:d7:e7:1b:a6:08:
                    c2:fd:44:f8:00:dd:be:b4:44:29:30:49:ae:1f:c5:
                    39:ad:a9:4d:95:e4:46:07:af:5e:42:e6:9d:eb:f8:
                    86:ee:b2:4c:d1:35:ac:b9:cb:27:de:98:61:6e:8a:
                    f4:f4:ab:5d:7c:b6:62:50:db:c3:e4:83:5d:44:8d:
                    9a:fd:b9:4e:54:e2:23:01:56:c9:26:ad:16:86:5b:
                    72:bf:ef:aa:21:16:bd:12:a3:aa:94:6c:4f:94:ba:
                    fd:f4:39:aa:79:d9:da:97:af:41:06:ca:f5:84:a5:
                    1d:5e:2f:6f:f0:6a:51:98:7e:e7:be:f6:22:b7:46:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:2B:9F:79:55:E5:82:91:27:62:3B:08:63:35:EF:4D:BC:D7:2D
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:f6:b7:64:a7:a7:14:98:f3:37:a8:04:50:fe:fd:dd:31:
         31:8b:dc:56:01:92:a1:b0:45:16:d5:24:3f:dc:22:48:3a:26:
         1f:5d:da:5b:97:9c:84:87:6e:3d:d5:70:65:b6:22:db:fc:04:
         b3:5f:9a:cd:a5:06:4d:5b:25:56:0a:b7:e5:5e:3d:42:d7:ec:
         e2:ed:ca:a9:1b:06:44:e5:73:8c:96:17:b1:db:9c:fd:a4:83:
         a9:2d:2c:f7:e8:97:d1:ea:ce:80:f7:0f:91:68:b3:84:a0:84:
         dd:19:e7:21:50:01:c6:f6:b2:6a:2c:1b:c5:8b:68:1c:d8:7d:
         d2:d6:b6:01:13:2d:46:dc:97:85:53:b3:79:b1:cf:c7:16:41:
         e1:62:3e:3e:9d:51:71:61:bf:89:aa:7a:4c:62:c0:f7:01:cc:
         32:5c:6f:d0:13:51:3a:da:06:00:64:48:9f:2d:a4:3b:ac:d5:
         bd:c5:c8:d5:58:16:d6:76:6c:be:c3:fc:9d:82:62:a2:fc:e2:
         75:ba:cf:3f:56:d2:5a:71:6a:2d:c3:a8:16:76:ea:05:c7:0a:
         7c:08:45:a9:74:d4:cc:43:5b:8f:c3:ed:dc:90:88:9d:8f:dd:
         58:e5:8e:93:36:72:63:a1:02:bb:4c:37:c1:0f:48:4f:65:d8:
         8f:9f:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:17:34 2025 by rpki-client