Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
File:                     68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json)
Hash identifier:          XaxSUxx8JGBZPRpxc7t6eH2v8BSNQMWHsrSC/RAMYSI=
Subject key identifier:   BA:E3:25:FB:88:DF:53:14:69:78:CD:AA:CB:DB:E7:D6:63:FE:D3:6A
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       16AC56CA74FB618883B9E4D2D667A009BC3BAD53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
Manifest number:          0139
Signing time:             Thu 12 Jun 2025 23:14:49 +0000
Manifest this update:     Thu 12 Jun 2025 23:09:49 +0000
Manifest next update:     Sat 14 Jun 2025 02:04:49 +0000
Files and hashes:         1: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: A0xY8FQpNJ+Dmu/PZSKbDs05Sg3vxalRRBfAWO03pMk=)
                          2: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: nobsaRnwApEhUvMK13zNAeGE9vZGLSfrojwmGK4bDgM=)
                          3: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: qvIMK685FSdFyB1oJt5aRMfVxCvrfR5JXAjYLXbC+4w=)
                          4: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: 2INq3xE6upAmDztTdWwtjePXTuQOj2MAyDG9knhJelM=)
                          5: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: NBE6K6zJ/FotRliNVDb8nUAwWjiBFGRk7f5Lj9E98Xo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 01:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ac:56:ca:74:fb:61:88:83:b9:e4:d2:d6:67:a0:09:bc:3b:ad:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Jun 12 23:09:49 2025 GMT
            Not After : Jun 14 02:04:49 2025 GMT
        Subject: CN=BAE325FB88DF53146978CDAACBDBE7D663FED36A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:0b:92:e6:8b:73:c3:f1:0e:a3:46:34:60:
                    03:74:20:08:49:06:bd:17:f6:a8:ee:2e:98:39:56:
                    18:75:dc:86:28:9b:7a:6b:06:db:2d:c7:06:6b:67:
                    cd:79:32:f4:f8:ac:72:0d:c1:ad:6c:cd:0b:76:07:
                    2f:3a:59:bb:59:41:e0:02:88:bd:f3:4b:46:c4:c7:
                    c5:68:cc:78:ce:9d:27:f6:bf:32:33:09:13:d3:c8:
                    d3:22:9e:33:e2:f6:57:34:88:97:0d:a0:3a:45:ca:
                    00:53:91:e6:73:bc:13:62:55:81:7e:2d:db:16:b5:
                    97:03:11:0b:0a:9d:22:dd:56:cf:f4:82:95:3e:82:
                    e3:08:8b:fb:fb:36:c3:bc:a2:1a:7b:df:fd:da:ca:
                    2b:e3:55:b0:53:eb:19:7b:53:bb:91:28:23:ad:c7:
                    3e:4b:0e:58:d6:63:b8:2c:1c:4a:3c:3f:19:e2:04:
                    bc:e7:4e:7f:ce:83:e8:12:a5:41:42:10:97:74:d3:
                    f0:88:e9:71:e9:11:61:0a:63:9f:a4:4c:50:f9:3b:
                    c9:f7:0d:c8:d6:00:e3:8f:c9:bc:d6:49:6d:18:56:
                    37:bf:df:6a:18:ec:ec:56:83:a6:7e:5b:bc:43:4a:
                    84:15:5b:3c:5f:ac:c2:df:78:ed:76:09:39:67:d1:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E3:25:FB:88:DF:53:14:69:78:CD:AA:CB:DB:E7:D6:63:FE:D3:6A
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:de:08:d2:35:0f:8a:a2:d3:d7:70:ec:69:ee:8c:1f:10:
         8a:2d:f6:89:e2:b8:5f:23:f6:90:b6:78:d2:c6:5f:ff:a2:db:
         7a:29:a5:fe:32:e5:1e:68:74:aa:f0:9a:85:ed:38:93:fd:7f:
         44:ee:a5:c6:5b:ef:6f:0d:82:ab:0c:92:f5:86:92:3a:a6:08:
         9f:cb:61:c2:8d:0c:10:28:e5:4d:ee:b3:16:9b:d6:86:0e:d7:
         4a:dd:ae:aa:23:a7:2a:6b:21:fb:0d:76:12:a3:01:44:67:44:
         3b:88:95:34:85:20:29:c3:6a:ae:ed:d3:11:35:1c:50:45:10:
         fc:b4:e8:e0:be:5a:bc:15:24:a1:79:7a:95:d9:62:e5:e1:fe:
         c2:30:a6:4f:9b:91:61:01:72:20:37:db:bc:e8:41:1b:58:9b:
         ea:ed:2c:06:5b:62:2f:f4:1e:cd:38:ee:68:ec:2e:79:72:5b:
         68:bc:47:90:dc:8a:0b:f8:1a:b6:2d:49:a6:d9:f1:23:6e:b3:
         d3:98:9e:d2:25:42:7a:e3:92:c7:5e:11:22:1e:de:25:8b:d7:
         ae:91:6f:91:8c:09:d0:ba:00:84:73:85:e5:57:32:37:12:b9:
         f7:d4:da:97:b8:c2:5f:8c:3a:03:eb:48:73:fb:47:92:db:7d:
         73:86:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:42:20 2025 by rpki-client