Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
File:                     2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json)
Hash identifier:          pAVVDvf0D213eHn8Q8ywcQZU1UvJtrVM0oWQGsLTPF4=
Subject key identifier:   BF:3D:D1:56:3C:73:FE:E9:A7:66:09:61:81:46:08:98:9E:34:DA:70
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       787276259BFF9D3B0E01090F44F0F2663B775D8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
Manifest number:          0242
Signing time:             Tue 10 Jun 2025 21:13:33 +0000
Manifest this update:     Tue 10 Jun 2025 21:08:33 +0000
Manifest next update:     Wed 11 Jun 2025 22:05:33 +0000
Files and hashes:         1: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: CBOxuxYW+Pvhe8SjdSm0UnOmq5KJnjAG8o2/uL40hzU=)
                          2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=)
                          3: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=)
                          4: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 22:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:72:76:25:9b:ff:9d:3b:0e:01:09:0f:44:f0:f2:66:3b:77:5d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: Jun 10 21:08:33 2025 GMT
            Not After : Jun 11 22:05:33 2025 GMT
        Subject: CN=BF3DD1563C73FEE9A7660961814608989E34DA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:d9:2a:9c:d3:eb:2a:47:f6:80:70:05:44:
                    f9:99:54:fd:3d:16:12:30:38:e4:fe:0b:ed:4e:6a:
                    3a:8c:29:1d:d2:fb:f7:76:44:b3:e9:47:a1:5c:cf:
                    44:15:d5:54:5f:18:a7:c2:08:5c:cd:06:ac:6d:11:
                    9a:9a:87:01:79:87:47:38:a4:04:30:a9:eb:a6:79:
                    51:f6:98:5a:ba:05:b0:9a:f2:cc:69:08:f5:32:5b:
                    1e:42:01:1e:2e:27:62:eb:26:e7:de:10:c6:b2:14:
                    25:f9:fa:3b:77:fe:07:3f:16:f4:51:ec:48:88:a7:
                    80:a4:c9:7f:8d:b4:01:7f:88:3b:58:bb:8d:c8:b0:
                    6a:80:9f:01:ab:71:6c:28:59:04:a4:2b:71:33:23:
                    c6:40:21:b7:c5:57:c5:af:87:0a:6c:49:a4:36:94:
                    c5:12:35:ad:53:07:31:6c:79:ec:7c:87:f4:b3:86:
                    66:f9:89:50:7f:ed:13:a4:81:d3:10:80:08:92:73:
                    8f:8f:2e:81:c4:8c:1d:24:c0:fa:78:c6:2b:71:86:
                    59:88:35:2c:d2:8c:46:75:f8:fb:d0:7e:1f:81:c4:
                    3a:26:74:ee:e0:26:e9:82:ce:0b:83:0c:54:ba:70:
                    0d:96:45:b2:2f:e1:0b:60:8d:5c:b0:0e:8b:4e:00:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3D:D1:56:3C:73:FE:E9:A7:66:09:61:81:46:08:98:9E:34:DA:70
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:f6:59:fd:f8:8c:1f:cb:d6:af:35:f1:cf:f8:8d:03:4a:
         f1:9c:8d:c3:93:b0:9c:a2:e0:53:8e:6d:74:d9:9f:3c:37:b0:
         c7:cf:cc:0d:a8:fd:63:f6:40:67:4f:76:3e:e2:d7:d6:24:4e:
         4a:27:8e:70:95:20:76:f3:a7:bb:65:b1:17:ea:43:4c:68:5d:
         0d:c6:60:42:11:52:0c:f8:9f:1b:a1:45:a2:02:af:b6:2e:1d:
         8d:62:47:88:e0:13:4c:de:71:a8:fa:80:97:97:ea:5a:dd:b1:
         7f:fe:2d:c7:ee:42:9c:f7:54:63:03:7a:95:a7:86:78:8f:90:
         08:dc:2c:d9:22:57:61:f7:0b:5e:0b:9a:68:79:26:07:7c:69:
         d7:50:db:cb:94:38:eb:0e:9f:fe:40:21:eb:2e:53:42:ee:ab:
         93:66:55:57:0a:27:7d:b7:4a:06:24:2a:fd:2a:d9:99:62:a0:
         b7:c2:ed:7d:ac:93:d6:db:5a:a0:59:2e:4b:f0:05:66:14:37:
         9e:1d:d7:4d:52:83:4c:88:4c:bb:44:25:19:c8:e9:08:42:c9:
         02:2d:6b:07:48:bc:de:45:be:e7:10:b9:f0:aa:af:ad:23:0e:
         f9:69:8e:8a:12:52:de:ea:dd:9c:29:14:f8:21:98:fa:7c:fc:
         dd:3a:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:41:41 2025 by rpki-client