Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
File:                     CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json)
Hash identifier:          PuaoDV5E6CpnPD5E7BUE6Y3xcnZ18lOHkpP/Z+dhimk=
Subject key identifier:   52:16:66:80:56:5E:71:BB:46:63:7F:5D:7A:88:90:A0:B6:F7:94:1C
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       58033BC5F5718A4B5F28FE3740048D441378802B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
Manifest number:          0245
Signing time:             Tue 10 Jun 2025 13:58:21 +0000
Manifest this update:     Tue 10 Jun 2025 13:53:21 +0000
Manifest next update:     Wed 11 Jun 2025 16:37:21 +0000
Files and hashes:         1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: XV5XX9PLzNBv/P4girhHwL5IoFqlM9HITg6T91PfpPE=)
                          2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=)
                          3: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: lSV/o4YOc33lWUDRl1YfEXFloffiS8CE/b74ZMOG18A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
                          rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:03:3b:c5:f5:71:8a:4b:5f:28:fe:37:40:04:8d:44:13:78:80:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Jun 10 13:53:21 2025 GMT
            Not After : Jun 11 16:37:21 2025 GMT
        Subject: CN=52166680565E71BB46637F5D7A8890A0B6F7941C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:04:2a:86:d3:e2:19:e6:34:8e:a8:69:33:
                    f0:6c:b9:8f:0e:45:b1:9d:c7:4e:19:c9:8a:da:b7:
                    83:b7:9e:2f:9d:9a:34:e0:58:e8:b3:ab:77:50:08:
                    9a:2a:57:a7:20:44:60:60:9f:9f:cd:ca:6a:d6:47:
                    29:77:9c:40:4a:a1:e7:ae:5c:e1:af:86:8b:96:6c:
                    50:93:19:51:60:19:6a:0c:cb:10:c0:dc:29:ed:6c:
                    21:5f:d3:2a:98:ea:24:2d:e9:ff:9f:dc:22:33:3b:
                    8e:89:5c:6d:e3:1f:19:66:a2:a5:43:1b:c9:08:5c:
                    52:a2:bf:f5:19:ba:97:2e:dc:de:a8:1e:f0:89:02:
                    cb:c3:98:a9:34:4e:95:a0:9e:35:f7:7a:4a:10:4e:
                    79:2f:d5:25:f4:5e:c6:d0:38:25:4b:f2:3d:7b:f2:
                    93:eb:7a:ab:bd:f9:0a:6d:67:77:4d:c3:98:8d:51:
                    ac:e4:4e:09:12:b2:ac:49:4c:7c:51:0b:9d:91:9f:
                    05:cb:e2:59:7e:18:60:10:09:20:ad:5f:56:b0:7b:
                    55:97:2c:02:f0:4a:6b:d8:92:26:ca:85:08:c4:8f:
                    a5:95:51:f3:53:0e:0e:46:4b:a9:b2:1c:45:bc:5c:
                    d9:43:9f:db:2b:dc:97:0d:92:6a:5a:3f:f9:13:2c:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:16:66:80:56:5E:71:BB:46:63:7F:5D:7A:88:90:A0:B6:F7:94:1C
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7b:6d:56:ac:e4:61:04:20:d1:3d:64:68:95:aa:b3:8d:74:
         ed:5a:fc:4b:d2:3c:94:01:90:34:1e:3a:05:3c:39:34:5b:19:
         fd:95:0d:29:09:bd:6d:60:19:1c:43:60:36:09:1f:6c:13:87:
         9c:f9:fc:91:ae:ac:b6:ee:b3:87:4e:31:84:68:f1:26:44:90:
         e5:5b:41:84:ce:b5:b9:98:e9:2f:79:3b:ed:45:0c:78:63:bf:
         dc:bb:55:c3:99:d0:3d:a6:07:48:35:a8:db:13:12:7b:d0:46:
         7f:f2:39:ea:2c:0e:cd:11:d0:44:42:fe:76:70:59:5e:06:54:
         54:b0:5b:42:42:e4:01:54:36:95:f6:7a:5f:16:ca:33:94:82:
         95:7f:45:3d:24:f6:b9:90:1a:75:b3:6a:5e:d8:98:de:14:4b:
         44:9a:87:b7:ee:2b:93:a9:dd:7c:e2:61:5b:9d:3d:7b:ce:d1:
         ff:88:bc:3a:0d:81:e9:95:29:e7:61:9f:91:13:3f:3e:bc:5c:
         6e:f0:6c:c3:b0:37:bb:96:e1:7c:fb:8b:62:c9:b4:74:8a:54:
         34:e1:29:78:22:7d:d4:eb:f9:4f:4d:9c:c9:87:4f:d6:35:41:
         77:1f:73:bc:52:e2:47:e1:97:aa:91:23:53:47:19:28:7c:4e:
         a9:f9:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:02:30 2025 by rpki-client