Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
File:                     23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json)
Hash identifier:          DQeaaX2aZCFGgYEGZyoCfmNIWEJ73p/9lldSrtzmAPo=
Subject key identifier:   AC:1F:3D:0B:F2:0F:02:A7:CB:F0:05:3C:17:0C:B3:08:8F:39:88:4F
Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Certificate issuer:       /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Certificate serial:       535D870E04CF978520F57600601A973487770393
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
Manifest number:          0288
Signing time:             Sat 07 Jun 2025 23:20:00 +0000
Manifest this update:     Sat 07 Jun 2025 23:15:00 +0000
Manifest next update:     Sun 08 Jun 2025 23:20:00 +0000
Files and hashes:         1: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: e/hc6La8Q0CLtQAwv9qP+/oUYseMnViQmwfCm8e3uO8=)
                          2: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl
                          rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 23:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5d:87:0e:04:cf:97:85:20:f5:76:00:60:1a:97:34:87:77:03:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
        Validity
            Not Before: Jun  7 23:15:00 2025 GMT
            Not After : Jun  8 23:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:2a:0a:fb:18:57:19:d3:a7:61:0d:11:2e:f9:
                    96:82:39:e7:47:d4:a6:c2:fe:4d:39:02:04:19:a8:
                    f7:90:16:dd:c0:90:fc:84:ce:dc:66:ed:49:f4:17:
                    34:8a:5f:85:ef:20:69:7c:fa:ae:27:63:66:08:d1:
                    0b:a3:16:93:c3:2f:d4:ee:62:40:22:c9:74:9f:5b:
                    45:c0:2b:6e:7b:ab:fc:1f:d3:32:a2:28:ec:3f:53:
                    87:17:f9:f7:6e:1d:f4:1e:c2:b4:1e:ad:d0:42:90:
                    71:5f:10:53:59:75:9e:54:0d:c6:22:a0:3e:6e:72:
                    ff:16:77:6e:45:37:5d:aa:99:51:24:f5:97:9f:4b:
                    fa:28:86:20:b8:04:ac:8d:4d:b9:12:ff:1f:8b:0c:
                    e3:8d:32:46:b8:9a:e2:cc:a1:ce:a5:be:7e:77:88:
                    3b:03:93:e6:af:c8:39:dd:5d:e0:f6:a5:b6:10:63:
                    bf:67:e1:3c:4f:5c:82:9e:ba:2d:6a:33:99:d8:50:
                    cd:c8:88:7a:ea:0b:46:37:c3:8b:ca:59:ef:a9:45:
                    9f:84:29:09:9f:51:85:80:23:5c:af:c3:dd:5a:87:
                    46:96:23:78:0e:f0:d8:e8:8a:17:a4:32:cd:12:fd:
                    b2:10:87:1c:b2:1f:30:90:4e:45:db:e3:69:79:2f:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:3D:0B:F2:0F:02:A7:CB:F0:05:3C:17:0C:B3:08:8F:39:88:4F
            X509v3 Authority Key Identifier:
                keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:48:89:4c:2d:87:20:7c:e6:b5:15:6a:79:20:6c:f6:74:24:
         b2:9f:1b:5b:d8:27:2e:aa:c3:8b:77:18:44:6f:a4:79:c5:48:
         89:64:bc:c7:23:8e:16:28:03:25:95:a6:dc:9e:4f:99:e1:69:
         64:dd:85:f2:20:d7:7d:d6:90:c3:5e:31:25:bf:ef:fc:4e:53:
         96:bd:66:35:be:5a:3c:47:0e:e9:7c:b1:27:d0:e8:1a:0e:5f:
         99:13:17:48:0a:0e:6d:7b:a6:cf:7b:73:1e:25:1d:8f:a2:ef:
         9f:81:58:2b:fe:ea:dd:a8:bd:5e:1a:68:d9:41:2c:f6:54:ee:
         0d:0d:a3:6e:12:33:47:7d:38:92:c6:84:d7:7b:7a:a2:fa:61:
         1a:b3:ff:6f:4b:0e:8b:81:1a:c8:61:ab:41:19:a6:59:64:5a:
         56:61:c8:67:37:2a:b8:a1:2f:5b:86:91:85:fb:e3:87:29:1d:
         06:ad:7d:2f:df:3a:bd:d9:0f:2b:ac:25:ff:d8:bd:6d:0b:12:
         76:1f:c0:0b:6f:f6:00:fd:aa:32:61:ff:cc:ca:1d:34:de:f2:
         b8:c1:d6:e6:7e:79:78:b0:b0:6b:f7:bd:dd:e3:d1:8b:16:da:
         42:49:0b:87:77:e0:4f:b2:a1:0e:ba:4d:66:7e:d7:89:6f:f7:
         d0:9d:ce:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:39:21 2025 by rpki-client