Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
File:                     254C729A5155256E1BAF89E48E06C4EBA96761EA.mft (raw, json)
Hash identifier:          R9cQB0+DgpfAAZhDZ75v9EGVJvyRCiEAacmUZD7VR2o=
Subject key identifier:   64:86:1A:63:21:03:E6:5D:EE:18:33:E1:D1:76:4E:5C:59:95:06:81
Authority key identifier: 25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA
Certificate issuer:       /CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
Certificate serial:       76C76C9098CF65D86E46D09E244299FEBD99D356
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
Manifest number:          0221
Signing time:             Mon 09 Jun 2025 00:20:00 +0000
Manifest this update:     Mon 09 Jun 2025 00:15:00 +0000
Manifest next update:     Tue 10 Jun 2025 04:04:00 +0000
Files and hashes:         1: 254C729A5155256E1BAF89E48E06C4EBA96761EA.crl (hash: 9yXyDZMFbjHWgLVXhsZ4kxIEahwptPh+Vnm9AK7nofc=)
                          2: 323830343a383030383a3a2f33322d3438203d3e20323731373235.roa (hash: 4rSv5X1Lyr+dKBZWL1W04oXbgppBiMkeed8Lk/UsDh8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl
                          rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c7:6c:90:98:cf:65:d8:6e:46:d0:9e:24:42:99:fe:bd:99:d3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254C729A5155256E1BAF89E48E06C4EBA96761EA
        Validity
            Not Before: Jun  9 00:15:00 2025 GMT
            Not After : Jun 10 04:04:00 2025 GMT
        Subject: CN=64861A632103E65DEE1833E1D1764E5C59950681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:b0:95:59:69:d9:66:97:18:e9:e0:92:39:
                    c4:15:57:9c:a5:6d:ef:5e:06:14:3a:61:1b:ee:42:
                    78:a2:0c:98:d4:21:8a:fb:ce:9d:b7:5a:11:7a:51:
                    ca:7c:ed:59:b6:37:d6:9b:63:dc:20:4d:5b:62:3b:
                    37:4e:91:af:c6:71:b0:54:c7:77:9f:8b:d1:b4:4f:
                    e5:78:fc:f1:58:00:5b:23:27:1b:88:cd:02:37:30:
                    cd:a6:8f:20:7b:55:73:96:d1:a4:83:0c:2f:f6:45:
                    42:6f:6f:8b:0f:7e:d9:b1:da:ff:e5:ba:5e:b2:ec:
                    5c:de:5b:61:4e:00:ea:b7:0b:10:a7:f4:1e:37:6c:
                    b5:19:30:d4:2c:55:de:6f:9f:24:53:13:c7:eb:59:
                    a8:04:de:2e:a8:10:df:0c:6e:10:a1:19:c9:b5:42:
                    cb:c3:9c:97:2b:ec:74:7e:75:86:81:73:9f:5d:a8:
                    a0:dc:90:12:c9:6d:8d:62:24:54:d3:57:2e:4d:51:
                    9b:b0:c6:88:ee:61:ea:95:6f:4b:64:4f:fb:70:21:
                    71:d7:14:6a:91:e5:41:bb:30:60:2c:13:99:55:f0:
                    14:35:a5:79:25:67:43:be:7d:c3:ef:8b:bd:b7:ff:
                    29:c3:c6:66:da:58:04:9c:f9:fd:89:6c:d5:72:5c:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:86:1A:63:21:03:E6:5D:EE:18:33:E1:D1:76:4E:5C:59:95:06:81
            X509v3 Authority Key Identifier:
                keyid:25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:af:95:f5:5c:7c:24:e7:e2:0a:91:f3:05:1c:45:84:c1:
         78:f6:c4:e1:67:1f:66:73:58:3f:15:8d:19:45:fe:df:f1:4e:
         b1:68:3e:c9:59:7d:6a:1c:f5:bd:1e:97:59:90:b5:76:ba:aa:
         5c:b5:8a:d8:23:0c:1c:23:c0:cb:59:d2:f0:ed:cc:5b:79:d1:
         50:30:ab:c5:f9:14:af:00:d1:16:d5:e8:ea:71:9a:ab:98:59:
         1e:c7:fb:6d:11:40:c4:99:7f:31:8b:5f:6f:a5:44:e9:ca:6d:
         0f:1e:55:f4:22:90:7c:f0:31:85:ba:df:bd:af:14:3c:a4:51:
         73:31:ed:a0:69:7c:f4:fe:51:9b:71:ab:5d:64:06:b9:4d:99:
         e4:e8:e7:52:42:81:db:2c:d7:63:75:92:7e:95:1f:8f:80:09:
         ce:4b:14:29:e8:16:a4:a0:42:25:b0:e1:0d:56:27:2c:cb:e2:
         73:e5:46:dc:ae:2b:73:e8:4f:1b:0c:fb:3e:ef:59:0e:72:15:
         31:b3:5b:0f:6e:e1:59:98:1a:dc:4b:95:2d:ac:ad:26:2b:b1:
         a5:da:1d:a9:7c:4f:de:56:5a:6a:80:1a:f5:89:90:cc:94:6c:
         db:a7:68:06:4b:a2:4e:68:42:75:b0:92:6b:94:eb:89:fe:5a:
         8b:d2:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:21:43 2025 by rpki-client