Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
File:                     CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json)
Hash identifier:          tUEQKEsl1h/1oZJhpU9lTgjNBDq3l8B9DWhILsafZgo=
Subject key identifier:   AF:36:29:64:5D:3F:E3:21:42:39:22:AA:57:D6:DE:5C:5D:F0:20:95
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Certificate issuer:       /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial:       5596030B01C4BAC88D4A537AA7A4F83A9FF677CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
Manifest number:          024C
Signing time:             Wed 18 Jun 2025 09:58:50 +0000
Manifest this update:     Wed 18 Jun 2025 09:53:50 +0000
Manifest next update:     Thu 19 Jun 2025 12:49:50 +0000
Files and hashes:         1: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: VJdH/xHpD6ecg3kwn9yL7bslKKlhAKJoZBYlUI+LMxk=)
                          2: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: Bhu/eGNOOWFc2ep8aUehLXvNs4ymREZ2pdLGTh+BKL4=)
                          3: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: 5ulXTd+pcIqDBM3kpaCJtvflQ2MJQWgOnAwgTIXXyjw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
                          rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 12:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:03:0b:01:c4:ba:c8:8d:4a:53:7a:a7:a4:f8:3a:9f:f6:77:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
        Validity
            Not Before: Jun 18 09:53:50 2025 GMT
            Not After : Jun 19 12:49:50 2025 GMT
        Subject: CN=AF3629645D3FE321423922AA57D6DE5C5DF02095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:a3:b2:52:e2:0f:07:2c:4a:ed:3c:af:04:
                    a4:8f:4d:63:26:8b:22:b9:79:56:3d:dd:09:21:e4:
                    0b:c2:ed:0e:7d:d4:c3:7e:17:0b:1c:ec:58:65:71:
                    90:21:12:ea:9d:2c:26:45:5b:c1:1a:4d:f4:aa:65:
                    20:4a:6d:2f:46:ac:ad:88:29:75:89:35:8e:71:a0:
                    ad:41:b2:36:c8:3e:c3:97:88:82:f1:cd:1e:d5:99:
                    89:ae:cd:14:f7:29:de:f8:48:aa:1d:08:a0:ee:7e:
                    ad:01:a8:cf:c2:28:a3:1a:76:d6:49:29:90:01:32:
                    4b:7b:42:a1:77:e4:f9:6c:7e:01:83:e6:c6:a6:88:
                    66:32:9e:70:b7:44:1a:ab:bd:67:7a:bb:74:02:71:
                    2d:65:25:b4:7f:14:4d:de:be:be:0e:3e:ce:68:28:
                    97:05:e6:dd:80:d5:1c:82:79:54:fd:f3:bf:2d:2c:
                    74:84:05:12:86:bd:9a:6a:f8:a5:35:4a:b9:48:6b:
                    80:33:0d:fc:5d:34:31:5c:f9:87:71:26:8f:56:80:
                    91:28:62:3c:94:cf:50:bd:c2:67:43:e5:ac:1d:3e:
                    39:b5:ec:ea:c8:44:13:2b:8d:ca:e4:b5:5a:cd:0f:
                    a9:c8:14:73:4c:30:8c:83:6c:9f:88:1f:92:b2:72:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:29:64:5D:3F:E3:21:42:39:22:AA:57:D6:DE:5C:5D:F0:20:95
            X509v3 Authority Key Identifier:
                keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:49:38:cc:56:47:d3:af:fa:87:d5:9c:75:ed:b7:95:9f:83:
         10:ba:77:59:ab:2d:51:f5:87:0a:ae:2a:f9:e3:26:85:b8:37:
         7b:c9:df:17:97:93:dd:8d:42:a1:cd:81:cf:61:18:54:c7:a9:
         e2:62:7e:af:2f:d6:8c:1e:4d:ea:6e:aa:94:dc:a3:de:8f:6b:
         33:3e:f2:11:8d:38:12:f3:c3:79:23:32:d6:11:0c:da:ed:50:
         df:20:4a:44:c6:8d:d7:e2:36:d8:aa:66:79:49:3f:a2:22:a8:
         f7:69:f6:18:1a:56:b6:f4:af:b5:d6:e8:23:c2:9e:89:5d:c9:
         f3:2a:02:a8:3b:4d:a3:ba:5a:3a:fb:23:13:b1:4b:f2:b8:2f:
         0e:ae:50:e8:24:dd:5c:f5:b5:e9:d6:df:6a:1f:a1:e0:6b:0f:
         0b:19:cc:ac:53:d2:67:2b:cf:21:f5:98:a2:19:dc:30:bc:a4:
         19:20:43:73:76:33:8b:8c:0f:94:8d:4f:56:ff:35:00:31:c6:
         83:f4:fd:5b:a5:52:98:70:36:37:14:c9:4c:c5:64:8b:93:4f:
         d6:1c:4a:71:6a:97:ca:46:12:35:40:23:bb:31:c1:99:41:5b:
         2c:30:3a:e4:14:2c:2a:7b:17:18:16:c7:99:bc:fb:91:62:ff:
         2f:2a:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:19:56 2025 by rpki-client