Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
File:                     9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft (raw, json)
Hash identifier:          G4n2Nx3TmFMqCMrYKZYbBjteaKHTGhXxiXMU6eRfiPA=
Subject key identifier:   91:E3:A0:24:A4:0B:53:62:DB:03:F1:92:8A:8A:C6:36:FA:09:7A:85
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       48F36F12E45BDCECE91E1EC8AB811FDEEED96706
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
Manifest number:          0248
Signing time:             Thu 12 Jun 2025 00:26:09 +0000
Manifest this update:     Thu 12 Jun 2025 00:21:09 +0000
Manifest next update:     Fri 13 Jun 2025 01:52:09 +0000
Files and hashes:         1: 3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa (hash: I/zMkl825iiNPzx7DySyScRiyB7PG+Sehcz9/ZpNoIo=)
                          2: 323830343a373332383a3a2f33322d3332203d3e20323730383939.roa (hash: 0og7mHAg1cs/CXfLP5YKWtxvT1kRb6ab0ut/ca04ON0=)
                          3: 3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa (hash: 2PNhElcg7Mx6AzGTJNJzEeoiimZImJMyssS8EtLNr8M=)
                          4: 9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl (hash: FZit6werxoVhQmoqoS3Uq+mN9bPSsccZ6ECwJEtIjRE=)
                          5: 3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa (hash: UMqTK9reUzNNnwRwMXBy/vvN20ODpBYMLm+4Fschui4=)
                          6: 3137372e39312e3232382e302f32322d3232203d3e20323730383939.roa (hash: qblvyMsP/0q623/AR9T2qt6Q+iQZ5E9cP+jioV2MfYc=)
                          7: 3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa (hash: 4ahpbqrbVjoNhJ6suC152xt5nvpn2qTcWWJstS6xu/w=)
                          8: 323830343a373332383a3a2f33362d3336203d3e20323730383939.roa (hash: Hgb0YznLAEtDoYv49I8u6RBseazG2W8a4vF0eGCxlqM=)
                          9: 323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa (hash: vkXUxHuNfUCti1NDkT/pFbATg8NcGqlxLavMso/cYt8=)
                          10: 3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa (hash: hITh7h70/ARvvMfkHTgRXHtN3zrRnC9UNIMEPc5H8nk=)
                          11: 323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa (hash: KaDD1B9L/1YgiBrcyRisFVWHKeCqMc0d/T1zrCbZrlk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 01:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f3:6f:12:e4:5b:dc:ec:e9:1e:1e:c8:ab:81:1f:de:ee:d9:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Jun 12 00:21:09 2025 GMT
            Not After : Jun 13 01:52:09 2025 GMT
        Subject: CN=91E3A024A40B5362DB03F1928A8AC636FA097A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:c0:de:f2:a5:fa:2f:52:d2:58:0a:78:30:
                    3d:96:3b:5c:a5:77:03:06:6f:cc:f0:67:99:2c:92:
                    bc:53:d1:7a:50:93:bf:bd:ee:6d:6b:a6:c2:9c:ad:
                    32:ed:10:26:2c:bc:bc:8f:29:64:d8:c9:cc:12:13:
                    97:fb:b5:03:b4:bd:dd:32:a3:2a:f5:9d:d3:5a:3b:
                    89:7c:7b:a1:04:98:2e:d4:7c:6d:f1:dd:0c:48:39:
                    b9:df:46:b8:e5:e3:16:09:15:03:51:e8:fe:d8:57:
                    1b:5e:61:c9:90:e5:b8:2a:79:9f:6f:39:1c:22:eb:
                    d7:0e:e4:87:e0:84:6d:26:56:77:7b:37:8f:ce:88:
                    52:31:54:00:80:78:84:80:2d:47:a5:8a:0d:ea:41:
                    3e:9c:13:08:0f:f6:bb:4a:96:70:79:b5:89:ca:54:
                    56:1e:c3:9d:86:b1:55:56:95:05:e1:25:50:fd:44:
                    3d:a6:e8:c9:52:c0:a5:3f:68:0f:f4:a7:ca:7f:74:
                    e2:d0:f1:be:12:c9:ea:e8:cc:72:f7:99:cd:05:46:
                    ba:2a:48:88:24:65:57:fc:4d:78:c1:f5:48:21:5f:
                    d3:1b:52:56:9c:b3:f6:1e:bb:c5:2f:12:c1:3e:45:
                    ba:8b:11:2f:be:2f:4f:08:64:f6:ef:e4:0f:f6:c3:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E3:A0:24:A4:0B:53:62:DB:03:F1:92:8A:8A:C6:36:FA:09:7A:85
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:0f:4f:26:c1:b7:4a:ad:b3:57:f6:74:70:7c:b2:02:01:
         1e:69:79:36:d6:4c:c4:1a:4c:aa:5b:a5:1a:bd:47:fc:0a:7a:
         66:d3:71:b7:a0:02:02:b7:af:de:22:50:86:bc:e4:71:ec:3f:
         29:a5:c9:7f:61:df:8c:2e:f0:48:11:e7:23:91:4b:52:30:e4:
         47:c4:8b:f5:91:b5:ff:09:46:11:cb:8f:1e:3e:e8:9e:59:35:
         71:3b:5d:3c:3b:17:09:61:b7:f1:3b:43:b3:cc:ee:f2:85:5e:
         28:ea:71:c2:03:41:15:2f:af:c9:e0:7a:48:e5:14:88:31:17:
         4c:c8:9b:e6:d2:12:3f:02:46:01:b2:aa:1a:63:ff:88:d8:0e:
         25:d9:7e:1e:c6:ab:4e:d3:0c:96:3a:66:e5:0c:d7:5d:68:3b:
         e2:ec:a6:6d:34:9c:c0:0e:b1:02:ca:51:03:20:dc:2c:ae:0a:
         c9:ae:20:85:7c:05:2c:39:eb:c7:ec:19:92:b7:12:d7:4e:7e:
         b4:21:7d:8f:8a:44:f4:58:e7:b9:66:ea:49:a6:98:11:e3:a3:
         83:01:9f:6f:d3:18:7d:c8:e7:43:0f:ca:83:b9:df:fe:1a:c6:
         98:2b:4d:23:3d:45:36:4e:e8:9c:e1:4f:8b:61:bf:27:52:18:
         76:0f:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:38:26 2025 by rpki-client