Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft
File:                     8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json)
Hash identifier:          s44rzuk6cg2mSoZR4rKXRz0o/mfndseJ5vsbhviimog=
Subject key identifier:   5C:DB:27:4D:48:9B:C7:E1:93:22:88:44:B7:D0:76:09:8A:1A:2A:EC
Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F
Certificate issuer:       /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F
Certificate serial:       71457E87C2733217835EAC8A789A4D2344F76E13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft
Manifest number:          0240
Signing time:             Tue 10 Jun 2025 14:17:27 +0000
Manifest this update:     Tue 10 Jun 2025 14:12:27 +0000
Manifest next update:     Wed 11 Jun 2025 14:55:27 +0000
Files and hashes:         1: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: P1a8+zNmPoNV87lU1gPo9XyXRrpLc9cUorv71O21VUA=)
                          2: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: EOg/hM1DxnfBQMJLRQ41kPRgUah10XE4r5WsOtjys1w=)
                          3: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: Kk+gO6SkASZcPrfQvJja01OjLQlKVeEymTz0dpAB/oo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl
                          rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 14:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:45:7e:87:c2:73:32:17:83:5e:ac:8a:78:9a:4d:23:44:f7:6e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F
        Validity
            Not Before: Jun 10 14:12:27 2025 GMT
            Not After : Jun 11 14:55:27 2025 GMT
        Subject: CN=5CDB274D489BC7E193228844B7D076098A1A2AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:ad:b5:29:19:c1:dd:e1:7a:11:2c:49:4f:
                    4b:ed:97:0d:bf:f1:65:2a:d7:36:5f:8a:8c:c2:d4:
                    20:73:c0:79:77:82:4d:c8:75:0a:31:c0:05:2c:97:
                    33:fe:93:c8:13:04:07:c1:da:74:c6:ad:89:ef:01:
                    07:f6:f1:80:aa:78:8b:ff:3b:0d:12:2c:04:b9:e6:
                    c0:c2:7f:ea:94:34:c1:c6:4d:9b:8c:ec:fb:0e:60:
                    2d:d2:b4:4b:dd:84:b1:0f:56:4f:30:93:8e:97:be:
                    07:3e:34:7b:87:77:19:3e:d8:64:b9:23:e5:72:da:
                    f5:b5:5a:11:50:20:a4:3a:c9:4e:64:aa:b7:f7:27:
                    11:15:59:2d:ca:c4:6f:8a:6a:b1:5b:21:4d:f7:82:
                    0d:d3:ed:64:08:f9:35:ce:d9:35:aa:6a:b5:06:08:
                    05:9f:78:8d:92:e1:91:be:fc:ec:e6:26:ed:ca:be:
                    b2:ad:14:bb:4a:60:2c:d5:1e:b3:d5:55:87:ef:39:
                    b5:b3:fa:d9:f7:62:57:46:dd:cb:13:c0:c1:a6:9c:
                    27:26:da:77:2b:84:23:39:80:3b:9c:de:ac:93:c7:
                    f7:2c:7e:eb:ef:90:e1:60:49:f8:65:5e:92:a8:d7:
                    fd:30:d0:b5:28:16:38:1e:a3:39:62:de:bf:b7:77:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DB:27:4D:48:9B:C7:E1:93:22:88:44:B7:D0:76:09:8A:1A:2A:EC
            X509v3 Authority Key Identifier:
                keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e3:d7:93:b1:20:39:85:8f:2d:2a:b1:ca:1e:fb:32:1f:a8:
         d9:d6:c7:ec:d3:1a:8f:ab:b0:fa:7a:f9:ee:a9:f9:f9:a2:f4:
         02:a1:cb:93:a2:35:f4:82:a9:ca:a5:72:7d:6b:0c:95:a8:3a:
         09:ed:38:2b:bf:4a:26:7e:81:84:d2:6b:90:7a:9b:c2:f2:56:
         3a:7a:42:a4:6a:93:0e:1f:e9:53:2c:c1:59:17:b7:cb:4f:b6:
         41:e4:b8:3e:1b:08:f8:f9:6d:3c:fb:34:6b:29:1d:93:d2:59:
         f3:33:e0:cc:e9:e6:f5:bd:dd:c5:12:46:02:ef:d3:ff:91:7a:
         99:b8:89:8f:54:66:30:04:72:e5:d0:ec:99:5b:ac:12:60:9a:
         03:cb:88:d6:d4:50:84:d2:be:88:aa:f9:65:ba:e1:aa:c6:50:
         82:03:7f:40:53:af:b7:33:bc:ce:a1:e5:8c:13:fe:ef:a7:f8:
         19:78:23:7e:84:c6:39:b5:c9:55:ef:85:6c:48:30:17:14:b3:
         ee:cb:eb:6b:51:9a:f7:1c:8a:d3:1a:a3:30:2d:8b:50:79:50:
         70:f8:c6:47:c1:85:55:f1:fa:ab:81:d0:a4:c3:b8:b8:64:95:
         57:f4:98:64:49:a3:be:10:26:6a:15:0a:33:73:b2:54:88:f6:
         71:ae:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:14:39 2025 by rpki-client