Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          um63HA5vSXS5pVeXzNXm8YE8TBF5r7xnvNP2HlpdRwU=
Subject key identifier:   55:2C:AF:9D:A7:80:A0:22:D4:23:AC:36:79:8F:35:24:5D:47:06:B9
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       1349F23B2A43BAEC97F908581A2C2A274EDB8AB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          0243
Signing time:             Thu 12 Jun 2025 10:28:36 +0000
Manifest this update:     Thu 12 Jun 2025 10:23:36 +0000
Manifest next update:     Fri 13 Jun 2025 13:57:36 +0000
Files and hashes:         1: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
                          2: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          3: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          4: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: 3HxwoTVMcCupurOOqr0yv3OPUqgR6Gq0VG7HcYDd2ss=)
                          5: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          6: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          7: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 13:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:f2:3b:2a:43:ba:ec:97:f9:08:58:1a:2c:2a:27:4e:db:8a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jun 12 10:23:36 2025 GMT
            Not After : Jun 13 13:57:36 2025 GMT
        Subject: CN=552CAF9DA780A022D423AC36798F35245D4706B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:fa:94:38:08:90:ec:e8:2c:21:7b:a4:aa:
                    ba:bf:de:c8:99:e3:db:40:52:d8:ee:8f:80:78:2d:
                    b7:ec:7b:cf:0e:98:0d:92:40:e2:3f:2c:b2:5e:24:
                    8b:61:80:be:d5:21:83:4e:c8:14:b6:54:09:a9:4c:
                    23:67:41:af:fa:53:5f:80:d4:da:fc:40:ef:d5:66:
                    ca:3b:99:8b:69:e5:b1:3a:81:cd:68:af:cb:5b:7d:
                    be:17:c1:da:72:40:4f:63:43:96:0d:ef:5a:f8:a4:
                    ba:71:b2:8d:3f:f5:90:3a:f1:a2:ae:44:cf:f5:55:
                    18:bf:ac:fd:e1:44:ab:b8:4d:f7:50:92:2e:2d:10:
                    0d:20:af:30:0e:fa:ce:4c:d9:d5:42:cc:1c:01:51:
                    a5:88:c4:d3:11:73:d4:28:4d:bf:3f:e8:a0:f4:ef:
                    63:dd:ef:89:c2:e6:21:bc:18:97:31:a3:c2:05:ac:
                    a8:74:93:e7:13:7e:a3:17:ae:4e:dd:8e:aa:d3:17:
                    58:4a:25:3e:07:75:8e:e2:c5:b3:34:2a:a2:93:e1:
                    64:2b:83:48:e0:d7:43:bb:4d:86:36:24:06:e6:4c:
                    0a:15:69:db:be:3b:9f:e7:b6:9f:cf:1a:4c:86:3b:
                    a9:76:6f:38:16:a3:6d:a5:28:26:20:1c:a5:29:e8:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2C:AF:9D:A7:80:A0:22:D4:23:AC:36:79:8F:35:24:5D:47:06:B9
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3b:9c:80:63:ee:b0:08:0f:69:cf:21:b3:c0:09:ad:75:6c:
         85:33:57:94:94:fb:da:0b:0f:44:aa:a0:8a:e8:48:9e:23:b9:
         a9:b0:51:f6:d7:60:30:61:37:5f:6a:a1:e9:2c:96:54:a0:0e:
         e5:32:17:81:92:a9:7b:e5:6f:3d:c2:80:bf:78:d2:50:98:15:
         7a:f0:d0:f0:4b:cd:86:af:e9:43:7e:ee:4f:7f:79:05:75:4d:
         69:8e:ef:42:b4:84:d1:de:f6:59:14:05:01:e2:37:71:92:0d:
         0c:44:a6:39:53:cc:ba:b8:e3:62:3d:ce:bc:89:10:c8:f9:ec:
         53:12:ba:97:11:9e:4b:71:7c:fb:bb:f9:44:83:ba:e3:ab:0a:
         12:60:8b:1e:5a:8e:7c:54:9b:18:39:14:1d:e6:1e:c9:b2:b8:
         a0:d9:e8:14:c4:12:81:00:e3:8b:3b:04:7d:8a:a1:7a:36:f2:
         cf:e2:d2:10:93:26:a3:3f:8e:3e:f6:bc:d7:97:bb:59:fa:04:
         26:9c:2f:7d:7a:1e:43:d4:70:1e:55:d1:74:e0:24:78:44:6c:
         ce:33:21:e5:8a:d5:a1:f5:ca:dd:1b:a6:7e:b1:a1:54:3c:d3:
         26:0b:79:e7:ef:1e:0d:57:9d:6f:0f:de:62:ae:d9:a3:55:5f:
         ce:74:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:35:06 2025 by rpki-client