Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft
File:                     2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft (raw, json)
Hash identifier:          TAc39gIbpxCgsJB6CkKjKDI2TOhGnjUCXFoDzYfAYX8=
Subject key identifier:   D0:B3:A7:75:96:59:15:BE:35:F0:A0:65:B3:53:D2:F5:A0:F9:47:1B
Authority key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6
Certificate issuer:       /CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6
Certificate serial:       19F4E4D5A03E2C160CB6BF55CDA28F511C388609
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft
Manifest number:          0211
Signing time:             Tue 10 Jun 2025 20:38:43 +0000
Manifest this update:     Tue 10 Jun 2025 20:33:43 +0000
Manifest next update:     Thu 12 Jun 2025 00:13:43 +0000
Files and hashes:         1: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl (hash: UPuLbHwfde3bFIqsJY+TwcUZP995XfislHtpXVCHQUM=)
                          2: 34352e3137362e3134342e302f32332d3234203d3e20323638393435.roa (hash: 81icqWDhCQ5V80cybeQHXgFbX2Iogys+OdUbZvWvCZw=)
                          3: 34352e3137362e3134362e302f32332d3234203d3e20323638393435.roa (hash: 7ZVR7VTEAxId3uH0BE8kESLLV++QhSgdU6a0PidruW4=)
                          4: 323830343a356430303a3a2f33322d3438203d3e20323638393435.roa (hash: /NSh8I/Rslc7iMVh1K0i0LpvmuhofwUNcvRYRGnVjho=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl
                          rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f4:e4:d5:a0:3e:2c:16:0c:b6:bf:55:cd:a2:8f:51:1c:38:86:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6
        Validity
            Not Before: Jun 10 20:33:43 2025 GMT
            Not After : Jun 12 00:13:43 2025 GMT
        Subject: CN=D0B3A775965915BE35F0A065B353D2F5A0F9471B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:ec:f8:d0:cf:9a:92:86:d6:23:9b:35:04:
                    3e:a2:ed:18:57:ed:7a:83:9e:ee:4f:86:a2:03:19:
                    95:13:2f:1f:6e:a7:7e:22:33:44:a8:91:c4:c8:5d:
                    47:e2:80:88:d9:13:7d:a0:29:01:1a:74:fe:9d:dd:
                    53:47:f9:b5:ed:cd:fd:ec:79:b7:a1:de:28:6e:a7:
                    ec:c7:87:b1:9a:f6:c4:5a:83:51:f2:b2:90:74:35:
                    7e:6a:45:ee:f5:2e:88:ee:85:a3:fa:f9:21:5d:3e:
                    8d:6d:39:c2:0f:5f:ab:f5:2d:74:2f:ef:4c:83:e3:
                    39:64:58:d6:91:34:f1:b8:47:0a:94:2c:08:ea:c2:
                    49:60:c1:6b:d4:42:35:0a:6c:8e:08:2c:55:a4:9a:
                    1c:f6:d8:ec:24:f1:a8:e6:3f:62:0d:a0:fb:08:32:
                    69:c0:b6:87:42:a9:d4:5d:14:9c:02:e4:95:a1:4e:
                    60:78:cc:c8:0f:d0:ac:57:d6:70:2e:22:13:0b:63:
                    d0:23:26:a3:b6:92:24:1d:3e:46:a4:c1:e6:e9:9e:
                    e3:cc:aa:44:4f:df:a2:12:8c:51:29:c5:3d:00:b9:
                    1b:9b:af:7e:bf:53:26:32:50:e4:63:f5:cc:1e:ef:
                    67:61:0f:39:82:6b:11:fa:94:d4:a6:1e:e8:ce:53:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:A7:75:96:59:15:BE:35:F0:A0:65:B3:53:D2:F5:A0:F9:47:1B
            X509v3 Authority Key Identifier:
                keyid:2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a7:ea:fd:c2:04:44:fd:d3:c5:62:86:6e:27:a6:15:e1:47:
         6e:1d:c2:ab:bf:df:aa:76:61:07:f9:0c:71:13:49:98:dd:91:
         1c:29:cd:37:3f:8a:2d:2e:2e:91:73:7e:2c:9a:d7:85:2b:a4:
         ce:69:5c:86:09:a4:4e:28:28:ef:9e:16:8e:e3:e3:e7:3c:19:
         35:e9:fa:2f:fe:1a:12:ee:11:c1:0d:8d:c1:91:d1:6d:04:35:
         c8:5e:f9:15:74:64:d5:c6:11:2f:7e:cf:79:33:25:1d:1d:1f:
         ae:cf:9e:12:d6:94:4c:ba:e0:42:e3:9a:5e:0b:b1:02:df:b9:
         20:cb:7c:71:cc:6f:86:47:2b:b9:19:74:44:09:3c:df:e3:79:
         78:2c:41:9c:2d:7c:94:e1:e1:d1:82:b0:32:f8:dc:f9:7d:90:
         8f:45:e2:6b:d7:7b:58:00:ad:3e:af:8b:02:64:07:8c:68:30:
         d2:74:5e:f1:d2:fa:57:79:67:22:a7:ec:4e:dc:d0:ca:28:93:
         93:d0:4c:55:5a:f3:36:03:a9:5d:be:60:d1:9c:b5:98:a6:77:
         15:f8:7f:a2:9a:93:85:79:ec:3d:36:9d:1d:10:dd:39:92:b2:
         91:5a:3c:b1:2d:dc:73:7e:f5:ec:21:6d:fb:40:0d:b9:00:e0:
         90:01:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:11:22 2025 by rpki-client