Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
File:                     67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft (raw, json)
Hash identifier:          QmdLfig+d3LF6Yp/yIFldpJWPP1OkFEQ/1bB6FEU4tw=
Subject key identifier:   3A:D3:61:0D:96:FB:80:35:0C:92:5B:1E:26:32:DB:56:40:F1:84:0E
Authority key identifier: 67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
Certificate issuer:       /CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
Certificate serial:       4425ED2C3623C9584CF45E40906D9A6C65EA39B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
Manifest number:          05
Signing time:             Fri 04 Jul 2025 01:27:56 +0000
Manifest this update:     Fri 04 Jul 2025 01:22:52 +0000
Manifest next update:     Sat 05 Jul 2025 03:01:52 +0000
Files and hashes:         1: 3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (hash: JcmfPmpVMYSjiABXB2wmedmpymwinDaIZJseON+XBkg=)
                          2: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl (hash: n2GISY4GjYTz1qWll+q79MSHvJlhCuh3VfgWmJMQ/pY=)
                          3: 323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (hash: mjK/zjt4yzwTGIANGxBfkRBdXiLh2Sa/ZJrRKHITJgU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl
                          rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 03:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:25:ed:2c:36:23:c9:58:4c:f4:5e:40:90:6d:9a:6c:65:ea:39:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
        Validity
            Not Before: Jul  4 01:22:52 2025 GMT
            Not After : Jul  5 03:01:52 2025 GMT
        Subject: CN=3AD3610D96FB80350C925B1E2632DB5640F1840E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:63:dd:1c:ca:2d:73:7c:d2:64:c1:14:75:
                    7d:75:f5:7d:2b:a0:88:37:35:1b:ce:01:c4:75:fa:
                    20:dc:fd:f0:d4:2a:94:db:9c:6e:22:a4:8a:05:fa:
                    e4:2b:2c:ff:62:d9:69:cc:8b:d9:cc:fd:96:d1:e0:
                    97:2b:d7:f6:4c:4a:13:32:c9:6e:0b:12:ec:e3:2a:
                    b2:0a:56:fb:99:71:2f:21:00:6e:c4:ac:05:0c:a6:
                    f2:8b:69:22:d0:ff:91:df:b7:1f:eb:49:0c:07:bc:
                    1c:4b:be:47:cb:aa:fb:0c:04:f3:64:55:42:a9:04:
                    b4:8c:7c:84:09:4d:aa:b9:89:56:9a:ec:f0:1c:a5:
                    ef:3a:66:0b:b9:56:0b:1a:a5:f6:03:b6:33:71:da:
                    27:3d:de:d4:83:8b:b5:cb:b5:59:e3:a6:f0:91:dd:
                    0e:88:9d:78:15:a3:64:2f:58:ce:2b:e8:61:67:13:
                    15:92:53:94:0a:1b:3c:a4:04:36:7d:16:58:fe:b4:
                    43:5e:f1:48:3e:e9:c0:0d:9c:cd:ec:4b:d1:22:b4:
                    ca:e4:43:b2:e5:0c:f0:37:0d:9e:ad:5d:0f:89:ec:
                    a1:92:a4:3c:d1:b8:7c:b9:19:c5:e5:9a:01:2a:69:
                    a2:a2:bf:ec:76:e9:81:1b:50:93:8a:fd:e3:c5:65:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D3:61:0D:96:FB:80:35:0C:92:5B:1E:26:32:DB:56:40:F1:84:0E
            X509v3 Authority Key Identifier:
                keyid:67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:71:c7:55:01:97:3e:b2:99:df:dc:1a:c1:73:b9:a9:a8:
         03:10:3b:d3:e8:8e:c9:ac:70:cb:ee:59:6f:6e:0a:a6:85:1c:
         c8:10:d7:78:94:69:39:fa:29:98:25:15:9b:db:a4:3e:f9:ad:
         73:0f:bd:05:ae:d1:49:8c:19:2f:e1:9c:ea:c0:95:ba:19:f1:
         ad:61:bb:9e:dc:07:ad:22:7b:73:91:12:da:6b:7b:02:fe:92:
         70:71:2d:63:77:fd:a3:6b:a6:a8:f2:d4:dc:42:4e:8c:cf:f7:
         92:50:ce:0a:34:08:69:47:4a:8f:b8:9a:96:55:65:6f:a8:e6:
         7b:98:97:d5:45:55:b6:04:ad:13:b0:d1:25:39:03:e1:89:45:
         30:7d:0d:05:1d:5e:5c:a5:9a:1a:28:ec:e9:11:78:0d:9d:74:
         58:4f:87:e4:20:ac:c2:af:b5:08:a1:89:6c:75:d5:68:b9:33:
         a6:cb:7f:0c:29:ce:f7:f8:7a:f5:aa:71:be:e2:6d:fc:87:a8:
         93:27:e9:3f:ac:45:27:c6:2f:90:f5:de:83:64:0e:c1:66:21:
         5d:f8:5b:4b:b3:33:02:3c:d8:8a:46:52:d3:35:eb:2e:96:73:
         5f:aa:4f:f6:a9:92:9d:f0:ec:d1:a8:f6:f6:82:5a:03:63:6c:
         cd:43:ca:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:08:09 2025 by rpki-client