Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          NekaQDiObXf8CTUZ/zjpHlTmK6O4R3lLIEapSJlj/n8=
Subject key identifier:   9A:12:49:A7:D7:1D:81:AC:08:6B:04:26:63:46:4C:CB:92:9A:4A:B2
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       0E2B779243ED8873AE43EE98B4A56AD13E72A3E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          4C
Signing time:             Thu 12 Jun 2025 00:14:36 +0000
Manifest this update:     Thu 12 Jun 2025 00:09:36 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:36 +0000
Files and hashes:         1: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: 7pFJZg33ygAxlXjIYUNjCPDcdVIiaggt4kaSJ8atORw=)
                          2: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: Fgdb2V1ajEjSs5A7+TBCGITRfBcAfDTtdOenlLw9X2g=)
                          3: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: pVYTDtKIwEPErOqEGAxTC17UiiZyOr8zRm73AdHH6KE=)
                          4: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: kH3S536BXFFRY3Ukkc9PPKI4LEkvpGJ3fV00M/ofsag=)
                          5: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: F+mot+FSQP0fE+UXpORQq/D2rcEErdSMSnaWMURftDk=)
                          6: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: 19y9suZg81aWvWRGbanLF5MDE0/A6R29ASgcaolBFdk=)
                          7: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: z12jWJsYAgf4Q8uXIp9romFVhEVrF2GPUQ954Q/vCIg=)
                          8: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: QjQ/yyVQv2uxmmhRZBChKE1+s6/o+mVGouOXTDtxGgI=)
                          9: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: SalagO4BMzv1/knGQHz2yAYQVYHEcDvMZE/ItLwvu20=)
                          10: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: nPvlApQHq682NNJsbh8dkSCIG7wF3PneEPHVSQXHVHs=)
                          11: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: lUtz7MKekr+hul63UNYZ6gl3ng1S5V5Tq0UmFue47Dc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2b:77:92:43:ed:88:73:ae:43:ee:98:b4:a5:6a:d1:3e:72:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Jun 12 00:09:36 2025 GMT
            Not After : Jun 13 02:00:36 2025 GMT
        Subject: CN=9A1249A7D71D81AC086B042663464CCB929A4AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:27:42:f7:c7:db:d9:6a:94:e0:8a:d1:82:ed:
                    a1:1f:37:13:50:93:4f:50:33:6f:b8:c0:d2:4d:1a:
                    c6:70:00:06:e9:4f:cb:4c:b9:88:f4:5b:7a:02:6e:
                    64:40:02:53:02:2b:4b:a9:84:5c:a3:2c:0b:2e:03:
                    9b:3d:84:8c:1d:17:99:b0:a3:2b:97:61:fe:5b:e2:
                    64:cd:10:f6:38:13:4c:46:84:ee:42:f6:8d:1c:6e:
                    25:3b:dd:b7:f0:f6:36:be:7f:b1:af:ec:91:2f:b4:
                    8f:24:4a:a4:20:d0:a3:cd:68:80:7e:05:89:e6:68:
                    ea:61:13:9d:34:45:3b:b1:bb:6d:82:9a:20:27:86:
                    28:8a:69:63:ae:11:a2:5d:f5:7e:ea:42:da:93:59:
                    64:08:23:27:4c:8d:64:c3:72:23:77:a4:2c:60:83:
                    f5:b3:92:22:33:b5:8d:b1:26:f3:62:ab:47:e4:97:
                    2a:2a:77:fb:82:b7:85:7c:3b:b9:15:26:bb:8a:6f:
                    0a:80:1a:7a:44:26:d9:2a:85:c7:53:f4:bf:66:a4:
                    fb:77:94:2c:35:a4:0a:0d:dd:20:6b:71:66:e6:d3:
                    6e:f7:4d:d3:e9:fb:fa:7e:e4:a1:8d:47:4b:36:e6:
                    2b:23:35:51:58:ae:b1:8f:ab:e5:3e:3b:32:ee:0d:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:49:A7:D7:1D:81:AC:08:6B:04:26:63:46:4C:CB:92:9A:4A:B2
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:10:5b:15:36:39:aa:a4:85:f4:8e:79:8a:8e:c4:ab:9e:63:
         13:f1:cf:f4:1a:38:2b:9d:59:29:dc:6f:1b:e6:83:d2:1e:96:
         98:73:93:1b:6c:e6:93:d1:76:9d:97:10:69:15:34:44:14:c9:
         3e:25:a9:ba:03:24:bd:3b:b8:b9:81:05:84:96:7b:e7:2d:ec:
         98:39:14:f6:de:87:79:2c:bb:03:06:96:84:f8:40:41:50:e0:
         3e:f0:69:03:dc:b4:b3:5e:ba:a0:77:b7:1a:c2:98:1f:97:b0:
         5d:ed:a1:2f:bf:c3:fe:4a:d4:7d:d4:ca:89:b3:94:53:88:1c:
         e2:3d:8e:24:43:4e:09:35:43:d2:98:69:81:a1:0e:02:c3:9a:
         1c:3b:a4:26:48:87:94:bf:bd:e2:d7:cd:39:ff:46:dd:4a:aa:
         a8:be:28:4a:32:f7:d1:42:73:1c:24:08:47:59:31:52:ae:ad:
         e9:64:f4:33:25:2f:b6:f6:ad:a9:20:f7:c4:62:97:58:1e:64:
         d3:36:07:e2:7f:ac:36:f1:c8:35:1e:60:ef:2b:68:23:e1:7e:
         c4:ea:08:a5:19:94:13:b2:fe:7f:35:7f:ad:d1:06:28:a3:55:
         5e:e1:ee:98:3f:cf:7e:0c:5c:d8:c8:d7:74:0a:37:cb:f5:a6:
         63:dc:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:06:56 2025 by rpki-client