Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
File:                     CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json)
Hash identifier:          2wa+Z4CP4bUTLUpQZ0Z+2WtMF8vqT41rR8XeBPdm0Bs=
Subject key identifier:   B6:B3:C9:4E:60:A3:0F:7B:86:E0:7C:4E:45:59:9D:D4:BC:3F:14:BF
Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
Certificate issuer:       /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
Certificate serial:       5F8296EA0EAF5078987A8F3C10B691450F91D43C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
Manifest number:          0245
Signing time:             Wed 11 Jun 2025 19:58:34 +0000
Manifest this update:     Wed 11 Jun 2025 19:53:34 +0000
Manifest next update:     Thu 12 Jun 2025 22:29:34 +0000
Files and hashes:         1: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=)
                          2: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=)
                          3: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: u3A3P3RjnoQdPGj2Rn+rq2sgA/YANZcFLH3NtNnaKjk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:82:96:ea:0e:af:50:78:98:7a:8f:3c:10:b6:91:45:0f:91:d4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
        Validity
            Not Before: Jun 11 19:53:34 2025 GMT
            Not After : Jun 12 22:29:34 2025 GMT
        Subject: CN=B6B3C94E60A30F7B86E07C4E45599DD4BC3F14BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:f6:71:31:40:2e:79:25:d2:4b:29:f6:87:
                    aa:94:ac:88:d0:5d:c9:08:b5:43:50:b0:fd:da:42:
                    ca:b7:b8:36:d1:03:07:25:6c:0d:6a:26:c5:ed:e8:
                    00:1f:6b:7c:39:bc:bf:d7:1a:89:cc:f3:6a:71:3f:
                    53:ef:59:3f:86:b8:b5:66:86:35:ca:b6:f6:94:70:
                    7d:e3:f1:3a:41:e0:ae:52:ae:0e:cc:32:56:45:69:
                    05:45:26:81:eb:49:16:c0:ee:b6:28:1b:30:3d:3c:
                    1a:6f:e1:52:78:ae:51:0f:a9:fe:b3:88:58:06:f0:
                    86:65:89:0e:4a:e6:a3:9d:9c:60:d6:84:88:f4:4f:
                    eb:ed:bb:25:87:0c:51:8f:99:3c:ec:75:65:d2:a3:
                    95:24:41:7d:82:2f:fb:82:54:70:ed:70:a8:77:b8:
                    f6:7c:83:96:e2:63:a8:0d:cf:39:88:4c:4b:af:6d:
                    a9:6c:6c:94:7c:5f:bd:a0:e2:fc:00:55:ad:f7:3c:
                    f7:c0:23:6c:6d:40:17:8b:3d:fc:67:0d:70:ac:ee:
                    76:28:8b:ba:db:85:7a:5a:61:db:7d:81:4e:ed:9e:
                    9e:98:9e:f1:21:8f:40:96:f8:d8:01:67:dd:34:b1:
                    27:78:59:53:31:e3:cd:06:7c:65:7c:7c:7c:31:e1:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B3:C9:4E:60:A3:0F:7B:86:E0:7C:4E:45:59:9D:D4:BC:3F:14:BF
            X509v3 Authority Key Identifier:
                keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:57:50:81:6f:6e:4c:72:33:6d:17:b6:82:15:ac:7a:f0:
         d8:95:7d:90:09:41:dc:7b:ae:6b:ed:10:00:94:1b:e6:33:78:
         d1:6f:d2:1a:aa:bc:c4:19:e6:4a:16:d2:90:55:89:ed:86:6a:
         cd:0e:75:63:8e:c9:66:bb:80:cc:87:ab:8f:6b:b3:18:74:45:
         1f:ec:b8:7d:4b:f6:da:04:9a:fd:98:87:71:87:20:bb:23:b8:
         a1:ab:73:64:85:0c:7c:68:b3:5c:46:2b:1d:41:2b:35:9c:72:
         16:a9:c5:0e:10:f6:79:f5:6d:b8:e6:8f:41:ad:60:61:04:39:
         91:29:68:65:68:82:8f:cf:0f:85:c5:fb:aa:f0:fc:55:39:39:
         e3:72:ec:f8:65:65:ec:8b:6c:69:f2:bc:0c:1d:ec:a9:ac:25:
         4c:46:cc:b3:53:84:cc:34:83:b4:e8:f5:3e:69:be:60:dc:b3:
         2c:23:13:99:34:5e:1c:12:ca:bc:e7:b9:f1:6d:7c:90:33:df:
         88:f1:f1:e0:86:a8:ef:52:7c:e8:40:eb:60:e9:93:4d:8d:2b:
         b3:7f:6d:3f:f6:ed:17:db:8a:15:5a:61:9e:5a:10:ef:c5:47:
         8b:ef:c4:c9:09:5d:0b:a9:39:55:7b:62:3f:43:7a:c7:d2:34:
         e4:92:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:57:37 2025 by rpki-client