Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          Mufxl2vwIjWQa+rHN1lD2FTAzmNCJ+BLoHtR2xbxAXs=
Subject key identifier:   DC:F1:F8:9B:45:DB:62:E0:24:2A:71:AC:35:A0:6D:E7:31:8C:1D:B9
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       6A464429077FEB214FEA19928AF1242299611E5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          0242
Signing time:             Wed 11 Jun 2025 14:53:36 +0000
Manifest this update:     Wed 11 Jun 2025 14:48:36 +0000
Manifest next update:     Thu 12 Jun 2025 18:23:36 +0000
Files and hashes:         1: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          2: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: TiIWbKoT3wwsPau1A51jho+cCwPzMzfmvDgvHO/ENQc=)
                          3: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
                          4: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          5: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          6: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          7: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 18:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:46:44:29:07:7f:eb:21:4f:ea:19:92:8a:f1:24:22:99:61:1e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jun 11 14:48:36 2025 GMT
            Not After : Jun 12 18:23:36 2025 GMT
        Subject: CN=DCF1F89B45DB62E0242A71AC35A06DE7318C1DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:7d:c8:be:0f:0f:d3:38:95:f6:2e:76:0d:
                    ba:a5:d0:a8:21:7e:99:ba:f9:b1:16:1e:7f:85:9f:
                    9e:75:81:4a:e1:70:80:87:5b:be:11:e1:3f:c2:8b:
                    1a:e3:5e:a8:94:b9:b6:86:5b:48:83:24:58:c6:bb:
                    72:8e:d3:28:e0:57:2d:1d:e8:d2:dd:26:b7:87:59:
                    9f:bc:af:99:ad:ed:87:52:b8:37:72:69:cf:a4:dc:
                    62:6b:31:e6:c6:ed:18:1d:d1:e5:96:3b:f9:3a:05:
                    ac:a2:65:a8:35:b5:81:16:f9:f4:aa:3d:6f:0b:29:
                    56:e0:e5:53:d5:d5:a6:48:95:d2:e7:6c:f2:1e:7d:
                    af:c7:24:2e:e9:5f:c7:09:dc:a0:8d:dd:29:61:6f:
                    ac:8a:79:68:d1:f2:46:a8:6f:97:df:79:7e:ef:d8:
                    dc:e8:52:c0:31:7d:75:61:b7:b9:a1:d8:ac:36:3f:
                    10:f3:97:be:16:02:04:6a:2d:ae:fa:a4:43:a1:5e:
                    4b:75:9f:93:76:53:21:e9:73:6e:82:25:a0:2d:e6:
                    65:78:32:35:88:2e:51:a4:87:50:ad:ec:82:75:5d:
                    d7:c5:c5:3f:38:32:07:94:85:c8:e0:f3:b9:bd:11:
                    e3:36:f2:05:7f:57:a0:5b:b9:b5:43:73:c8:df:16:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F1:F8:9B:45:DB:62:E0:24:2A:71:AC:35:A0:6D:E7:31:8C:1D:B9
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:52:70:25:65:36:a4:c3:f5:da:86:bb:2f:05:5b:e2:46:6b:
         e4:d1:e2:3e:2b:7f:5b:d3:dc:a1:04:31:f3:74:cf:76:ae:4e:
         14:ab:1d:0d:ad:b5:1b:57:20:d2:1a:49:26:66:ca:22:09:e7:
         c3:c5:6c:db:3b:16:89:a1:15:c4:e8:99:65:7e:59:5f:2c:de:
         57:d8:f6:ea:90:9c:d0:ba:53:3a:c5:0e:c8:60:6a:e1:89:e5:
         63:fb:0a:57:6b:b7:b5:53:e8:cd:03:14:ff:a8:92:32:55:10:
         d0:0d:9d:24:76:79:ca:e8:7d:3d:fb:f8:13:12:11:6e:45:a0:
         bf:ef:d0:bf:39:bb:ef:21:a5:85:88:1b:36:e1:61:d0:81:71:
         78:89:1a:8d:2e:91:c3:81:22:ae:e7:9a:bc:1e:b8:48:b5:fe:
         70:ca:ed:a9:52:97:27:e1:bd:83:93:ab:df:9f:1d:46:ea:cd:
         68:d2:7d:56:e4:f1:8e:45:32:68:d0:40:fc:c8:3a:86:a2:39:
         8e:be:5a:32:20:3e:35:c9:1b:ab:92:aa:28:a5:fc:93:61:d5:
         61:cb:34:34:02:bb:2a:67:5f:24:b0:3c:26:bf:ef:1a:55:32:
         03:7d:e9:6a:65:55:82:33:d7:aa:10:1a:5a:58:20:59:99:62:
         34:fc:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:27:18 2025 by rpki-client