Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          92L35neotHSh8ERk5HsXhkEmJTTynFJ+vFdVCWs1PRA=
Subject key identifier:   2D:7E:96:C3:D5:4F:58:08:F3:B1:51:2E:2C:D2:96:3D:2D:0C:97:B0
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       684EBFFE0FD057509040B495D3A0232A13543E54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          4A
Signing time:             Tue 10 Jun 2025 12:18:45 +0000
Manifest this update:     Tue 10 Jun 2025 12:13:45 +0000
Manifest next update:     Wed 11 Jun 2025 12:39:45 +0000
Files and hashes:         1: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: XJNcgaKD6nyhLaVqZfOlyf9fPnH8nSNffAZHFq5Q6aY=)
                          2: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: SalagO4BMzv1/knGQHz2yAYQVYHEcDvMZE/ItLwvu20=)
                          3: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: F+mot+FSQP0fE+UXpORQq/D2rcEErdSMSnaWMURftDk=)
                          4: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: z12jWJsYAgf4Q8uXIp9romFVhEVrF2GPUQ954Q/vCIg=)
                          5: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: lUtz7MKekr+hul63UNYZ6gl3ng1S5V5Tq0UmFue47Dc=)
                          6: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: 7pFJZg33ygAxlXjIYUNjCPDcdVIiaggt4kaSJ8atORw=)
                          7: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: pVYTDtKIwEPErOqEGAxTC17UiiZyOr8zRm73AdHH6KE=)
                          8: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: Fgdb2V1ajEjSs5A7+TBCGITRfBcAfDTtdOenlLw9X2g=)
                          9: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: 19y9suZg81aWvWRGbanLF5MDE0/A6R29ASgcaolBFdk=)
                          10: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: kH3S536BXFFRY3Ukkc9PPKI4LEkvpGJ3fV00M/ofsag=)
                          11: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: nPvlApQHq682NNJsbh8dkSCIG7wF3PneEPHVSQXHVHs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 12:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4e:bf:fe:0f:d0:57:50:90:40:b4:95:d3:a0:23:2a:13:54:3e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Jun 10 12:13:45 2025 GMT
            Not After : Jun 11 12:39:45 2025 GMT
        Subject: CN=2D7E96C3D54F5808F3B1512E2CD2963D2D0C97B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:59:74:ec:78:16:c1:91:4e:39:cd:ff:05:
                    cc:6c:73:af:7b:dd:b6:f0:88:ac:54:b0:f2:2b:73:
                    e9:0d:78:ac:08:9c:c3:f4:05:c6:81:36:ce:24:09:
                    34:a5:db:b9:f7:6f:db:72:96:73:cc:63:33:d8:b8:
                    8d:3c:15:72:55:cd:f9:4c:5f:d8:ae:a1:9a:cd:6f:
                    84:27:f8:cb:e3:48:36:a3:9b:f2:06:6a:62:60:4b:
                    5f:5b:c4:45:f7:b6:02:15:06:19:a5:c4:ae:9b:62:
                    1e:84:78:12:c1:68:7a:0f:4c:5a:c7:73:44:43:eb:
                    8d:bf:3d:bd:e7:e1:6b:5a:94:86:74:59:ce:2b:01:
                    9e:38:4d:8b:77:0c:53:75:4f:dc:31:bb:be:8e:5d:
                    f7:da:2e:c2:bc:bd:39:72:4a:8c:75:55:68:ac:a5:
                    ae:2d:39:a4:0a:5d:e7:04:88:cc:38:09:ec:ce:3c:
                    c2:f9:1f:f5:bd:d4:68:84:13:72:d9:6e:b1:c8:e4:
                    2d:ab:a6:b5:d1:11:36:27:73:a1:bf:c6:64:42:e0:
                    b6:a9:52:75:db:6f:39:9f:02:c5:06:86:5f:74:23:
                    6f:de:2c:dc:ac:cd:46:4f:e9:ed:f1:d5:e8:e4:5a:
                    a1:f0:63:49:25:b4:46:ea:cb:b0:31:29:2d:56:77:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7E:96:C3:D5:4F:58:08:F3:B1:51:2E:2C:D2:96:3D:2D:0C:97:B0
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:ae:17:17:02:f9:83:f4:63:dd:2c:3d:2f:f6:89:b5:85:
         48:51:93:53:7d:29:5c:d9:03:41:05:bc:e3:9f:2e:3d:b6:6c:
         d0:c0:7c:62:89:d2:f7:12:e8:cc:c7:b5:7a:64:2b:5c:33:66:
         5b:3d:d8:15:69:0b:f0:dd:7f:5c:0d:56:b1:b7:19:29:da:53:
         6f:07:a1:83:b1:a0:63:38:fe:03:6b:2f:91:ff:c5:7f:40:b3:
         31:30:d1:2d:5e:76:7f:16:b1:66:e4:e0:d4:dd:5a:90:4f:28:
         62:6b:6b:db:c2:1c:f4:56:73:55:ad:de:e1:48:6d:21:d7:eb:
         4f:f6:62:99:a4:16:45:bb:8c:13:97:16:3c:96:93:62:7f:22:
         de:f5:8c:63:09:ba:84:6f:1e:e4:54:09:53:ed:09:ae:af:34:
         e5:67:1f:56:94:3b:b6:f2:17:6f:36:de:14:71:5c:0b:d7:06:
         ba:e4:e9:90:42:83:b7:29:20:7e:0d:a1:bf:c0:fd:95:50:f9:
         df:d6:30:e5:24:cb:6e:62:8f:68:ab:f5:fd:0b:80:9d:ce:03:
         f3:61:6d:95:cf:56:89:32:74:36:16:52:fd:f8:25:14:83:7e:
         1f:53:36:f8:eb:90:eb:69:9e:78:49:72:b7:b3:55:a7:d7:cd:
         a5:2f:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:41:19 2025 by rpki-client