Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
File:                     0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft (raw, json)
Hash identifier:          CcZS5jMosSn+S1MSONIUkwtRdS3tWKgCBpklrWmW/Ts=
Subject key identifier:   28:B7:5B:2C:A0:BC:78:52:23:59:1F:88:14:B2:FC:BC:50:7B:7C:63
Authority key identifier: 0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58
Certificate issuer:       /CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
Certificate serial:       1CD26104B2574952B053FFD363C243CDC6B32C37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
Manifest number:          3D
Signing time:             Mon 09 Jun 2025 11:09:00 +0000
Manifest this update:     Mon 09 Jun 2025 11:04:00 +0000
Manifest next update:     Tue 10 Jun 2025 14:07:00 +0000
Files and hashes:         1: 0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl (hash: f2bPp7V4aVuJUDEoNoV09Vd+uBASTX91dLzNJwXm6Aw=)
                          2: 323830343a343230383a3a2f33322d313238203d3e20323637343733.roa (hash: sau3ZA+uFSmmFUIuKDRztWOtW+waliROsZZFvV4FudU=)
                          3: 3139322e3134312e3138342e302f32322d3332203d3e20323637343733.roa (hash: +HOrbWsIeWd5kgSYjNjFVYSR8P1o1dE9sv1nHGV2r60=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl
                          rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d2:61:04:b2:57:49:52:b0:53:ff:d3:63:c2:43:cd:c6:b3:2c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
        Validity
            Not Before: Jun  9 11:04:00 2025 GMT
            Not After : Jun 10 14:07:00 2025 GMT
        Subject: CN=28B75B2CA0BC785223591F8814B2FCBC507B7C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:a9:20:e5:9c:f4:d8:93:51:0f:5f:4f:92:
                    8d:87:fb:f5:e0:2a:09:09:f5:fb:5f:f1:84:74:65:
                    68:4c:fd:d7:25:63:61:84:03:5e:07:88:66:37:09:
                    a1:ef:68:e9:a3:41:89:7c:07:6a:d8:49:3f:17:83:
                    60:5a:93:47:a0:11:df:dd:88:2d:36:8c:34:9b:0e:
                    e2:4b:5b:b7:fe:11:56:2b:d2:c0:19:c6:ee:65:d6:
                    be:45:63:3d:39:d9:15:f5:7b:1c:8c:82:43:3b:38:
                    0b:f1:2e:08:8f:2f:a6:fc:01:bb:d8:92:2d:33:9c:
                    e0:2d:e8:eb:d0:6d:52:d3:85:f9:33:81:44:a7:70:
                    cb:bf:77:16:78:b8:fd:f0:02:f7:75:ea:82:86:3f:
                    78:82:16:e4:b5:61:cc:29:06:53:80:a5:b2:9a:b1:
                    92:8a:2f:64:cf:d0:dc:2e:5e:52:6a:67:62:35:03:
                    23:34:e6:c7:60:fe:6d:96:81:50:71:8f:19:6a:32:
                    b4:46:ef:e8:b6:07:78:03:e9:70:50:fd:a7:ee:16:
                    60:23:ac:b8:fb:10:65:c7:3c:ac:76:35:a4:bd:21:
                    32:16:1b:b7:df:9a:0d:e1:7c:b9:af:2a:46:91:3a:
                    80:d2:ad:ae:d2:06:39:d2:25:1e:5f:c5:94:2f:b0:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B7:5B:2C:A0:BC:78:52:23:59:1F:88:14:B2:FC:BC:50:7B:7C:63
            X509v3 Authority Key Identifier:
                keyid:0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:82:f1:14:90:98:d4:80:cb:13:a0:c8:3d:13:8f:4a:54:f9:
         bc:dd:a9:cb:d1:06:15:9e:a7:bd:1b:ca:05:3e:56:63:71:2b:
         02:c5:a4:e3:11:81:dc:89:e8:b0:a5:9b:61:38:97:54:97:df:
         c8:49:44:d0:aa:c5:f5:d3:01:e9:a2:b9:0d:00:4d:06:ad:52:
         ba:a4:a0:50:fa:8b:26:9e:bb:56:fb:66:6d:6c:a5:21:f0:3d:
         13:26:60:4b:4f:a6:a9:25:89:07:cd:32:bf:3f:fc:d8:12:c4:
         e4:66:31:7a:bd:0e:a7:87:ca:b2:83:14:92:9b:40:44:12:3b:
         6b:3b:ca:22:4e:1c:46:72:b6:ba:f1:03:66:23:12:43:39:de:
         7f:b5:22:bb:33:17:42:c4:0b:41:1f:cb:19:8b:3c:7c:5d:47:
         42:72:34:4f:44:2c:85:31:db:8d:84:8f:64:b1:bb:18:aa:fd:
         7d:cf:7c:a7:77:b5:9b:9d:37:51:c3:72:b5:ba:92:fc:41:66:
         3d:cc:72:cb:cd:59:c4:d3:66:8f:76:71:12:9b:cd:7d:c5:ef:
         52:1b:2e:3b:bf:43:6e:60:83:2e:74:f5:04:d2:48:5c:22:d8:
         65:6e:ce:c6:59:55:7d:a4:b4:bf:82:87:d9:c8:48:66:80:8a:
         1c:0b:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:36:03 2025 by rpki-client