Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
File:                     DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json)
Hash identifier:          xf9BRvYNf3LFbcBmSaLksYxEXP+F02JXdUDqfzH6MiE=
Subject key identifier:   C3:53:B7:FA:92:60:0D:52:21:AE:B0:75:C5:FD:13:69:2E:2C:E4:DB
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Certificate issuer:       /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial:       786116A747E852286E90B3974F73D87A6535F0D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
Manifest number:          0234
Signing time:             Mon 09 Jun 2025 19:13:58 +0000
Manifest this update:     Mon 09 Jun 2025 19:08:58 +0000
Manifest next update:     Tue 10 Jun 2025 20:07:58 +0000
Files and hashes:         1: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: eq2AePVT8OEhv5iHy+y+sB+kP8N8xredK5qSWLmXxM4=)
                          2: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=)
                          3: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 20:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:61:16:a7:47:e8:52:28:6e:90:b3:97:4f:73:d8:7a:65:35:f0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
        Validity
            Not Before: Jun  9 19:08:58 2025 GMT
            Not After : Jun 10 20:07:58 2025 GMT
        Subject: CN=C353B7FA92600D5221AEB075C5FD13692E2CE4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:88:7d:18:d6:84:21:b9:a9:39:f5:b1:18:
                    5c:6d:d9:c1:ca:5b:b6:b4:18:be:1a:8f:7b:3b:cf:
                    78:cf:f0:7e:bf:20:a6:81:b4:5c:f2:b6:13:23:6a:
                    ac:ad:08:c1:b8:ea:b0:2f:35:b8:88:46:13:55:42:
                    ee:fc:e0:bd:d3:a7:63:ff:85:78:da:81:8a:06:bf:
                    3e:9c:02:50:a8:22:9b:48:ae:70:4c:09:7a:04:53:
                    b2:6b:1b:bf:e2:5e:b6:d4:4c:f2:58:50:80:3d:0f:
                    15:50:4c:98:50:53:13:c6:fc:6a:c2:be:e7:83:1f:
                    88:e7:f6:74:2d:ca:12:0f:f7:e6:fe:a9:73:e6:c0:
                    81:6e:4f:da:92:cc:54:64:fb:2e:d5:53:14:96:99:
                    cf:0d:0a:95:0c:69:a4:52:89:3c:62:90:a9:e2:f1:
                    54:31:9e:74:46:ef:34:28:b7:82:d5:52:43:e3:27:
                    79:bb:4b:e7:69:0e:2c:a1:82:df:d0:b9:20:2f:62:
                    03:c6:9a:1c:43:8a:9c:90:0a:c2:52:ab:3b:c1:40:
                    92:b9:de:fa:08:f9:d2:eb:02:22:66:79:f9:02:f9:
                    b7:16:cd:d0:0a:db:2b:f3:ba:0d:2c:b7:cc:ee:25:
                    bd:39:85:3a:94:00:74:42:68:9a:9f:f3:18:dc:ed:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:53:B7:FA:92:60:0D:52:21:AE:B0:75:C5:FD:13:69:2E:2C:E4:DB
            X509v3 Authority Key Identifier:
                keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2c:26:d6:01:a7:c7:41:bf:db:f8:cd:07:16:7a:6f:b1:c3:
         43:ca:cd:8f:db:c8:5f:60:5c:b4:d7:e4:17:fc:c4:c9:77:bd:
         39:77:2e:de:b7:b5:02:49:6f:01:63:a1:c0:12:07:28:34:79:
         83:78:16:31:e0:d3:07:48:b1:cf:b9:1d:0e:c4:f6:38:c5:08:
         05:0f:01:9f:43:60:92:16:aa:55:d6:65:e6:4f:d0:d6:2a:75:
         54:d4:ad:71:9e:e0:d8:3a:ac:65:36:4b:38:12:f2:f1:f6:7e:
         12:1c:cb:a9:c8:ef:59:65:60:02:bc:64:5c:89:e8:65:b6:fe:
         4f:d0:98:12:28:25:44:88:ba:22:9f:86:4f:9f:c3:31:03:b4:
         9e:1c:97:5e:f4:6c:a5:16:64:f8:c0:80:c8:4f:de:ca:8a:8c:
         4f:85:40:2f:99:a0:18:8d:15:27:65:1f:8f:32:ea:1e:ea:6f:
         df:23:2d:7d:a2:e7:70:bd:2d:22:1b:81:59:fc:4b:11:86:e0:
         b3:74:61:8e:97:7b:6a:c7:71:73:d7:8a:30:f4:f7:00:12:c2:
         8c:ca:9c:fe:66:cd:f4:61:3e:86:02:7d:20:50:fd:87:29:54:
         86:77:c7:43:15:a5:94:12:0d:fd:fc:47:b7:e6:7e:ca:67:1e:
         ee:66:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:54:29 2025 by rpki-client