Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft
File:                     C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft (raw, json)
Hash identifier:          IcZcEFGiuL5AkYCIkkHjcUXF3AIwQ1jMq4q7JWbF778=
Subject key identifier:   7D:EC:92:C7:B4:CF:27:07:9F:39:31:2A:FE:3C:F2:1F:25:02:80:38
Authority key identifier: C4:BF:0E:4B:A3:A6:41:F6:1C:3E:98:DB:7B:2D:36:16:12:AB:E6:A1
Certificate issuer:       /CN=C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1
Certificate serial:       166C751BCACE95EB41AC0FA57D923961CABF5D80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft
Manifest number:          07
Signing time:             Sun 08 Jun 2025 10:15:14 +0000
Manifest this update:     Sun 08 Jun 2025 10:10:14 +0000
Manifest next update:     Mon 09 Jun 2025 13:40:14 +0000
Files and hashes:         1: 323830343a383433303a3a2f33322d3332203d3e20323732323435.roa (hash: cICINoxg8fU/YnpUnJW3IuHLPiaqpo8bkMWHnxlsAuc=)
                          2: 323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa (hash: 1AUSsTtS2hHXOHDBc40pXKbsJt7QV97kQeaTEmOY5RU=)
                          3: 323830343a383433303a3a2f33342d3334203d3e20323732323435.roa (hash: YksV4sitfTm1ttmCFnmeBTvvQ9jKtrsnYKvdQWToJqE=)
                          4: 323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa (hash: /bon9zLXqz2rBS5zC0Aa9hxJP/kMaIJesjXDSJQWrvE=)
                          5: C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.crl (hash: IV5gmFTg5M2/aO//WO0q0+6g6vaW1sxS3vEjMkGRPFA=)
                          6: 323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa (hash: 2ilA5MLo6WgtQQWhSO5lW++xHTdOb293a17ZhGOeiIA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.crl
                          rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 13:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6c:75:1b:ca:ce:95:eb:41:ac:0f:a5:7d:92:39:61:ca:bf:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1
        Validity
            Not Before: Jun  8 10:10:14 2025 GMT
            Not After : Jun  9 13:40:14 2025 GMT
        Subject: CN=7DEC92C7B4CF27079F39312AFE3CF21F25028038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:40:14:bb:04:1c:b5:77:07:ae:d7:a4:da:
                    37:7c:9a:73:7d:53:8a:94:9d:1b:50:5c:96:14:60:
                    92:62:a6:2a:b7:c9:01:9f:eb:82:52:e8:a2:74:21:
                    9e:17:43:c8:a6:fb:d6:40:c6:44:8c:3b:c5:55:77:
                    90:c1:45:6a:12:bf:6d:1d:f1:21:4d:bc:83:37:b9:
                    96:07:a8:46:c4:3c:6f:9a:3d:d1:e6:20:45:3c:1a:
                    1c:4a:5c:3e:44:95:e9:f7:0b:32:2a:72:64:01:a9:
                    3d:78:e5:4b:6c:1a:03:99:1e:fa:b8:32:cb:0a:c9:
                    5f:f4:05:b2:0a:b5:1b:89:9d:be:ce:ce:27:a0:ea:
                    cd:1f:6e:b8:ab:a9:29:f5:c8:0e:2e:73:6e:32:05:
                    cf:7e:45:3d:52:24:dd:b7:73:fd:81:c7:4a:b3:a0:
                    fc:62:81:cf:72:7f:c8:b3:83:05:c8:9c:55:9d:dd:
                    8a:33:f5:b4:a2:95:a9:c6:d4:8b:b9:f9:c0:fa:a2:
                    49:04:67:9c:8a:51:9c:b3:ab:6c:01:7f:f2:1e:1b:
                    77:4c:55:21:90:f3:12:67:8f:02:7d:75:c3:41:a8:
                    4a:3e:fa:28:1f:80:6b:97:ed:80:b1:99:5f:4a:58:
                    18:23:fc:b6:67:27:f5:a8:ad:9e:78:ea:85:88:60:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EC:92:C7:B4:CF:27:07:9F:39:31:2A:FE:3C:F2:1F:25:02:80:38
            X509v3 Authority Key Identifier:
                keyid:C4:BF:0E:4B:A3:A6:41:F6:1C:3E:98:DB:7B:2D:36:16:12:AB:E6:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:38:ad:cb:ca:4c:cf:fc:c1:fe:5d:3b:db:2b:f0:11:2f:
         f0:bd:20:18:34:88:b2:07:97:01:bf:b0:b5:54:c6:ee:f8:aa:
         c0:cb:2f:b7:5b:ea:f1:04:44:6b:73:9c:f4:bc:4e:74:e5:5b:
         5f:bd:e8:6b:32:5c:46:1b:8d:ff:56:93:b4:43:ab:e0:b4:2d:
         8d:4e:43:1c:39:54:01:cb:da:f2:2a:04:cd:43:3d:dc:48:57:
         65:69:fe:bf:a3:b0:e3:29:1b:1f:ba:8a:5e:a0:b0:62:54:91:
         bf:3f:62:92:51:5a:4d:1d:82:ed:6b:07:cc:d5:2b:d3:ab:64:
         e3:7c:d2:02:87:7f:48:22:1e:c2:4c:3f:0e:ae:4f:67:c5:5a:
         6c:52:e1:9d:df:1a:09:15:60:b4:4c:a3:57:68:ec:5e:61:05:
         be:da:c3:21:04:0e:f5:b2:5a:36:58:b5:1d:75:ad:6e:6e:28:
         10:45:46:0c:d7:69:f3:d0:36:17:06:f4:b4:77:30:c0:4b:c2:
         9f:28:3c:7a:91:41:96:d4:56:60:24:d5:2d:9d:2c:9f:e5:6a:
         c4:75:35:ea:ac:a5:15:2a:3f:af:f2:10:a2:e6:1a:98:31:42:
         49:82:8b:9c:ce:3b:ea:66:00:36:ab:bb:1c:95:25:05:14:e4:
         aa:89:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:33 2025 by rpki-client