Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
File:                     406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json)
Hash identifier:          In42Zf1G9p77mBDsqAFy//IZqZ7AW8M9lS0GjfTd5hg=
Subject key identifier:   31:67:15:64:F2:56:94:FD:E3:1F:55:71:7C:74:04:B1:8A:77:33:BC
Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3
Certificate issuer:       /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
Certificate serial:       5FAF27D18761CC817B6188099FA7778602EE8CD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
Manifest number:          023F
Signing time:             Tue 10 Jun 2025 02:42:56 +0000
Manifest this update:     Tue 10 Jun 2025 02:37:56 +0000
Manifest next update:     Wed 11 Jun 2025 03:08:56 +0000
Files and hashes:         1: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: cijZiORTQj8pw+Vial1gPDZ9Wbm7UefB7xwRnVBMG3A=)
                          2: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: FjNXFVRMof5J3VRuL8LSwyRj6pSCBnrNnR1ryZd+kmQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl
                          rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:af:27:d1:87:61:cc:81:7b:61:88:09:9f:a7:77:86:02:ee:8c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
        Validity
            Not Before: Jun 10 02:37:56 2025 GMT
            Not After : Jun 11 03:08:56 2025 GMT
        Subject: CN=31671564F25694FDE31F55717C7404B18A7733BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:14:a9:a1:b4:7c:c0:a7:ef:2f:b4:be:35:
                    8f:37:d2:55:71:e8:c6:3e:c7:f9:e0:f3:8b:e1:0b:
                    46:58:a2:61:b6:b3:75:2a:bc:ce:8b:ba:8c:b2:f7:
                    f0:55:a4:85:43:9b:e3:f7:83:dc:dc:6f:67:90:4b:
                    87:98:eb:fb:fc:dd:be:e5:fd:b2:0a:05:65:81:e8:
                    d6:cd:bf:30:d3:e0:65:47:21:4c:7b:e8:2f:6e:e2:
                    ca:70:26:20:23:a2:89:b7:cb:29:6f:31:89:32:2b:
                    e9:04:b8:91:e3:c0:54:6f:f7:32:64:01:a4:99:03:
                    e1:bb:11:fd:65:29:2a:e7:dc:ec:4e:8a:64:4f:bb:
                    48:e2:ca:90:fa:ac:a0:69:3c:c1:33:f6:25:0c:18:
                    cd:18:e5:8f:94:ce:f1:81:53:56:0f:6a:ac:d5:89:
                    f9:38:e9:28:1e:2d:b6:24:6a:50:b6:4d:27:2e:18:
                    b3:58:2a:a2:35:d1:b2:17:d4:d9:c5:28:52:64:bf:
                    0a:a0:dc:b9:66:88:59:28:b0:eb:0a:67:2e:12:d4:
                    c2:04:7a:c2:38:cd:d9:e9:5e:92:01:5e:69:fb:d3:
                    92:ab:fc:87:a0:d9:17:b1:4a:7a:ed:d8:94:d6:71:
                    6a:f1:88:cb:6e:9e:c1:b2:07:87:64:04:5c:d2:4f:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:67:15:64:F2:56:94:FD:E3:1F:55:71:7C:74:04:B1:8A:77:33:BC
            X509v3 Authority Key Identifier:
                keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:02:ad:cd:08:2c:92:b6:bb:3d:ba:51:52:6f:5c:ba:44:
         a9:f9:4f:f3:d2:b5:e3:0f:71:22:00:ea:18:71:78:a0:86:f0:
         56:9b:08:2f:f6:c8:24:da:c2:e0:83:07:19:2a:47:5f:ca:e3:
         a3:0f:eb:bd:db:d6:63:6c:95:d3:90:4c:a1:c8:fb:92:45:10:
         6c:e0:20:49:b9:00:00:40:50:15:42:43:8d:3e:dd:0f:03:b9:
         5f:fa:b1:d2:5d:7c:91:65:d4:8b:24:1f:d2:16:92:63:9d:bf:
         dc:d2:8e:7b:6c:e7:98:1b:3e:c8:f5:11:da:42:2b:66:bd:09:
         22:29:00:68:40:4a:44:90:1e:f9:88:e7:dd:c5:5a:b7:3e:bd:
         66:20:91:80:91:9a:5d:6e:a8:96:d0:97:5d:8d:ea:1d:3a:70:
         51:2d:12:10:40:83:e2:78:54:00:57:e7:b0:a2:37:1c:72:ba:
         8a:73:d0:8a:8e:44:a4:25:e7:c6:47:85:ab:62:23:bd:0e:9e:
         d3:8f:84:29:cd:1c:11:51:6a:4e:44:fd:81:7f:ff:a2:c7:6f:
         83:38:31:38:08:b7:24:f6:47:4c:bd:2a:f3:c0:24:20:9b:4c:
         c3:77:6e:ec:f7:9b:67:f6:cd:62:ba:01:a7:45:fc:59:bc:6e:
         aa:60:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:54:24 2025 by rpki-client