Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          4vD7XLbiHBcTnPdXS+6ijgMYODPU+ci8iXcN5pDjOck=
Subject key identifier:   13:96:F8:CF:6B:B0:B2:77:6A:6B:FC:7B:30:FB:6E:94:F3:23:3E:2A
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       53A60E2013EA97DBE6FCE82A74097AECB4716F18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          4D
Signing time:             Thu 12 Jun 2025 18:04:36 +0000
Manifest this update:     Thu 12 Jun 2025 17:59:36 +0000
Manifest next update:     Fri 13 Jun 2025 20:20:36 +0000
Files and hashes:         1: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: WRQ88kDJzKDR5Rd+9ZD+PedWqL336NL02+p+p7xpIFI=)
                          2: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: z12jWJsYAgf4Q8uXIp9romFVhEVrF2GPUQ954Q/vCIg=)
                          3: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: nPvlApQHq682NNJsbh8dkSCIG7wF3PneEPHVSQXHVHs=)
                          4: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: F+mot+FSQP0fE+UXpORQq/D2rcEErdSMSnaWMURftDk=)
                          5: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: 7pFJZg33ygAxlXjIYUNjCPDcdVIiaggt4kaSJ8atORw=)
                          6: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: lUtz7MKekr+hul63UNYZ6gl3ng1S5V5Tq0UmFue47Dc=)
                          7: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: pVYTDtKIwEPErOqEGAxTC17UiiZyOr8zRm73AdHH6KE=)
                          8: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: Fgdb2V1ajEjSs5A7+TBCGITRfBcAfDTtdOenlLw9X2g=)
                          9: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: SalagO4BMzv1/knGQHz2yAYQVYHEcDvMZE/ItLwvu20=)
                          10: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: 19y9suZg81aWvWRGbanLF5MDE0/A6R29ASgcaolBFdk=)
                          11: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: kH3S536BXFFRY3Ukkc9PPKI4LEkvpGJ3fV00M/ofsag=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 20:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:0e:20:13:ea:97:db:e6:fc:e8:2a:74:09:7a:ec:b4:71:6f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Jun 12 17:59:36 2025 GMT
            Not After : Jun 13 20:20:36 2025 GMT
        Subject: CN=1396F8CF6BB0B2776A6BFC7B30FB6E94F3233E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0e:e8:b9:07:71:26:33:90:ed:c5:97:41:cc:
                    7c:81:34:9e:cf:b1:59:9a:13:92:9f:2c:21:92:54:
                    10:48:6d:62:cf:23:cf:be:36:16:9b:74:85:99:03:
                    40:fe:dc:9c:0d:8d:f6:1a:07:42:65:d0:c7:62:5b:
                    43:61:e9:a7:38:39:ec:2c:67:62:d9:88:1a:5b:2f:
                    ba:d0:86:dd:e4:62:f4:79:e4:43:c6:bb:a7:5b:42:
                    01:4b:0c:33:a5:1b:e4:ed:a6:45:31:61:60:46:81:
                    80:20:8d:67:17:63:e9:cb:39:f5:38:48:12:04:5b:
                    3d:7b:fd:07:ec:01:20:f6:e1:0a:c1:96:42:2b:65:
                    80:f7:c6:90:13:67:e0:bc:48:4a:13:fe:5c:c1:ff:
                    3f:e4:83:bc:fc:fe:1b:45:a7:08:4c:36:f6:7b:63:
                    74:72:da:c8:ca:48:a4:d0:ae:30:9e:31:84:6e:2b:
                    6e:b5:d1:0d:34:a8:09:7e:b6:81:2c:e9:5e:b9:56:
                    03:d8:be:c0:ab:d2:71:a1:d8:ad:dd:99:b2:49:7d:
                    f3:f2:76:33:4c:02:69:36:ff:02:58:9d:f8:27:79:
                    eb:d3:5d:e7:bd:e6:90:a4:33:ab:76:2a:89:2f:04:
                    47:b3:45:a6:e4:e8:b3:b0:42:e9:f7:cb:58:86:b9:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:F8:CF:6B:B0:B2:77:6A:6B:FC:7B:30:FB:6E:94:F3:23:3E:2A
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:6f:86:70:09:af:c0:89:d5:b2:cc:b6:6b:93:e6:6e:53:
         68:fd:45:a1:20:fc:51:57:0e:db:71:ee:db:b0:25:ba:08:82:
         27:3d:09:2a:f8:16:9e:4d:dd:63:e7:cb:20:61:63:37:7b:a0:
         81:97:c9:b8:b7:59:50:6e:8a:35:39:13:7e:e8:09:4d:ce:a5:
         8d:20:1b:22:71:48:4b:bf:32:29:e4:f3:44:52:12:37:ef:00:
         ce:3b:ab:ff:64:bc:85:9b:ec:f6:2e:38:55:60:60:46:f7:47:
         87:95:a7:0d:3e:81:1c:75:62:e8:41:8d:37:af:4b:e7:59:7e:
         78:0f:91:a6:f3:3b:30:1d:15:c9:d1:8d:5e:2a:ec:2c:ce:0b:
         16:6f:e8:81:97:15:07:b9:ad:c7:be:e3:a5:49:51:1e:71:44:
         61:fa:69:dc:cf:d0:ba:3b:f5:6c:94:28:a2:88:1d:f8:77:b3:
         4d:95:78:e6:67:04:78:19:35:f1:6f:db:67:7d:e7:8d:12:ab:
         3d:1e:c6:16:f6:e5:2b:b3:01:93:1d:76:70:09:82:f9:3d:7a:
         65:6b:bd:4c:20:9d:71:4e:27:36:26:51:33:b4:9b:b0:11:0b:
         62:7d:24:11:3b:56:74:14:5f:6c:06:03:fb:1c:74:a6:93:95:
         49:3c:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:03:05 2025 by rpki-client