Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          CAqLbjfJg+ZhE66j/ukgSuC8+Pady6arBDTrRx+kkHg=
Subject key identifier:   FD:3F:44:92:47:E8:00:B9:14:CD:56:87:F8:CB:05:C3:EE:EE:85:10
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       1D7C7D275D57169D51BDC5CD6B90DA6BD7819FBD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          0E
Signing time:             Tue 22 Apr 2025 01:19:39 +0000
Manifest this update:     Tue 22 Apr 2025 01:14:39 +0000
Manifest next update:     Wed 23 Apr 2025 05:04:39 +0000
Files and hashes:         1: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: sDn+4Uu4m4W5bslIPmCXR04C2X/8MTPWAS8yBpOzj8A=)
                          2: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=)
                          3: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: a6f42d45bxiLHIMWETpqkEcBoAgdph66Eltfz5OsBcc=)
                          4: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: ZERYrnFJWeHTyBx70wUynNKB/aGw9nIjjcnTrPWtpEw=)
                          5: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: 3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=)
                          6: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=)
                          7: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: jHEp77ey3eYInyX7NnipiftUAAgDp3GkFWmhML9L1Yg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 05:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7c:7d:27:5d:57:16:9d:51:bd:c5:cd:6b:90:da:6b:d7:81:9f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Apr 22 01:14:39 2025 GMT
            Not After : Apr 23 05:04:39 2025 GMT
        Subject: CN=FD3F449247E800B914CD5687F8CB05C3EEEE8510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:6d:d1:e1:4f:2c:50:e3:59:67:cc:1e:4a:
                    8e:af:ba:2a:5a:20:57:a3:1a:cd:73:d9:f5:79:33:
                    3c:f9:1a:d0:3b:98:c6:5c:bf:5b:08:ba:d0:62:c0:
                    aa:b2:7b:e7:d2:5a:6d:e9:d4:1b:de:3b:db:6e:6a:
                    05:50:3f:cd:29:2c:cf:6b:5b:7f:26:e5:35:4f:c8:
                    ef:c2:e5:e6:cd:af:9d:94:49:2a:78:4c:fd:d3:de:
                    6e:0f:90:7b:2c:b4:6e:9f:eb:7a:c2:d1:c2:ff:71:
                    8d:aa:3f:22:bc:93:bb:72:ed:4c:a8:e0:31:c8:33:
                    85:11:61:05:6d:6b:92:4f:e1:81:c0:c3:a6:78:1d:
                    74:24:a5:ce:b4:1c:00:ad:8a:e2:2a:14:52:fc:17:
                    0f:46:79:52:f1:0a:69:bb:7f:fb:80:5f:17:42:a8:
                    2d:74:09:ea:a5:44:5e:f6:6e:e0:2b:ee:32:b1:f8:
                    d0:04:61:9d:94:2c:c9:c1:30:b6:e1:bf:e8:62:4d:
                    37:36:6c:18:96:98:99:22:27:60:8c:c9:25:3a:52:
                    4d:90:d1:c1:1f:b2:f0:85:5c:35:d9:78:b9:d8:6e:
                    c6:e1:68:0a:c4:0c:00:d8:f9:54:2a:20:c6:0b:34:
                    8e:29:3a:97:31:0f:f0:c4:68:9f:50:45:8e:6b:9c:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3F:44:92:47:E8:00:B9:14:CD:56:87:F8:CB:05:C3:EE:EE:85:10
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:d2:54:1c:01:d1:99:90:87:f0:0c:53:34:65:a3:79:b2:
         4d:b0:e0:f3:0b:13:8e:78:d4:e7:5a:32:ee:63:90:3c:da:3a:
         b3:b3:d1:18:0c:13:81:f0:13:20:de:d8:6a:30:2e:13:26:d9:
         7f:15:0f:f5:ac:a2:c6:6c:b2:bf:61:26:fc:e9:a8:c1:47:0c:
         06:a4:48:a4:95:88:f2:87:cc:af:35:5c:8b:f9:30:b9:fb:44:
         e8:e3:73:76:60:60:83:7b:66:e8:34:b5:f5:06:8a:21:79:69:
         33:ac:3f:3b:cc:39:5b:85:6f:4d:d4:7d:b2:48:f7:c1:80:c4:
         7a:c3:b2:23:99:17:50:19:1e:6f:ad:08:f7:63:4f:15:c0:24:
         b5:32:71:18:4c:8f:e4:d4:3e:c2:13:6d:8c:31:d7:0c:3c:6d:
         b0:e0:0a:5c:84:2e:27:b4:7c:bb:83:19:1a:5f:45:a5:b6:b2:
         70:3f:d2:df:3b:83:ff:b0:41:64:3b:a3:42:45:11:b7:95:df:
         29:d9:84:e8:46:4d:af:db:50:2c:f9:c5:8d:36:26:09:37:bc:
         68:31:4e:4f:4d:1d:d5:00:62:c4:de:20:e8:67:02:de:12:11:
         1d:c7:3d:b7:16:b7:96:6a:82:e1:ca:52:25:aa:a7:86:5e:b0:
         10:c7:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:09:30 2025 by rpki-client