Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
File:                     5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft (raw, json)
Hash identifier:          N1L9liliWcACGq8i3kAv19A1AYOwxuaN3CNV5i2lsU4=
Subject key identifier:   48:FD:D4:40:E8:BD:7C:D1:7F:81:FF:4C:27:77:48:9E:B1:BD:E1:D9
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       7A2971DC9D33E6D24160B50ED3386799778F46A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
Manifest number:          0238
Signing time:             Wed 04 Jun 2025 03:38:07 +0000
Manifest this update:     Wed 04 Jun 2025 03:33:07 +0000
Manifest next update:     Thu 05 Jun 2025 06:14:07 +0000
Files and hashes:         1: 323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (hash: RTx6CCPuW1lY1SE9RqyeFLKfpghK/ucENv3ATWs3J+g=)
                          2: 5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl (hash: BQpWl09ymQekpqytxgqKRp3de7m+9Q0R4D8gy8pcavI=)
                          3: 3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (hash: 9mykslR77fZ7xC9MLu79f7z8bzLyXOic2iyPtYgwpU0=)
                          4: 3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa (hash: qoIZEu1/WWy4s44he/lhY8Elf0Ze8PVUEg3vPzj5UoM=)
                          5: 3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (hash: d08Pl+W/dTWpZFlmMKe8w3cnyJqa/CScvBLfxR4G/Og=)
                          6: 3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (hash: DavKGaLt8+OCiM0sr6n2fHGnv4su2dNtgMGBKD7OrZI=)
                          7: 323830343a323037343a3a2f33322d3438203d3e20323634343931.roa (hash: 0+yyYhzefzIILi0EAiz+ba5lOaT5HBHgqWt7VVeb80Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 06:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:29:71:dc:9d:33:e6:d2:41:60:b5:0e:d3:38:67:99:77:8f:46:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: Jun  4 03:33:07 2025 GMT
            Not After : Jun  5 06:14:07 2025 GMT
        Subject: CN=48FDD440E8BD7CD17F81FF4C2777489EB1BDE1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:a6:09:34:7a:2e:5c:8b:29:63:58:6f:55:
                    14:61:24:bb:56:52:ad:d8:17:99:87:2e:0f:a5:7e:
                    95:ac:59:d0:79:8e:a1:af:33:7a:45:e0:bd:c5:af:
                    0f:3f:52:51:70:f0:d0:4c:d9:06:fa:b0:72:df:ca:
                    4e:09:7d:35:0d:3b:b7:0a:2a:2c:fd:79:de:a9:f3:
                    90:43:bb:8d:f1:74:3d:f6:5f:94:2a:88:38:98:ce:
                    64:2a:1d:1d:ad:6a:49:e1:a8:8a:d1:c6:76:69:6d:
                    26:b9:15:ce:fa:e5:6b:fe:f4:a2:f5:88:6f:65:5b:
                    55:d7:5d:f2:84:16:be:58:81:1b:13:bc:83:9f:c1:
                    86:b1:a0:78:db:b2:8d:6b:0b:cd:13:8f:56:80:77:
                    60:60:a4:e5:8b:87:a1:76:7a:4d:b4:c7:60:a5:bb:
                    28:a2:ec:d4:43:64:e3:b1:c4:10:f2:87:a3:22:8a:
                    d5:29:42:11:9c:69:1c:35:07:7c:72:3c:d1:d4:42:
                    c3:81:63:e9:9e:bd:81:7f:6a:3d:e1:e2:f7:32:03:
                    fc:d8:73:2e:85:67:48:76:2e:02:88:d2:00:60:80:
                    60:a7:1e:54:db:b8:4c:22:66:98:63:14:53:2f:b4:
                    a5:0c:66:f4:75:1e:7f:25:68:d5:5b:0a:a9:b1:f5:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FD:D4:40:E8:BD:7C:D1:7F:81:FF:4C:27:77:48:9E:B1:BD:E1:D9
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:be:46:72:a3:16:91:ae:a4:68:b4:ea:4f:49:19:9e:61:6e:
         5f:9f:bb:6c:11:48:55:4c:1e:ab:e3:68:3f:4b:7e:ce:38:c8:
         84:2b:89:e6:79:5d:c8:1e:13:a6:19:9b:09:a0:1b:25:40:b9:
         54:27:14:78:49:40:a6:bc:7b:da:ea:c7:16:14:14:a4:a8:ad:
         56:27:77:b9:3e:ba:99:5f:65:07:a7:f2:7c:92:44:76:65:a8:
         7d:22:e7:9c:04:15:7a:8a:5e:97:5c:93:24:00:cc:a4:9a:04:
         a7:24:24:54:5e:37:ed:5e:39:14:7c:f6:8c:37:13:30:80:db:
         aa:86:86:1c:95:05:72:89:6a:8d:4c:ee:27:b9:5f:53:d3:29:
         c5:75:02:42:77:15:ee:b8:08:94:b4:58:fe:90:fc:e6:83:fc:
         55:35:b3:32:9e:07:f8:ff:a3:7c:2c:7a:36:45:06:05:61:f8:
         89:14:22:3d:90:33:e5:b2:cf:e3:a9:16:d3:e2:0d:fc:16:3a:
         58:fc:56:c7:7b:3b:07:b3:33:72:09:97:86:e9:8a:08:6d:95:
         36:24:c4:d5:e0:7a:58:7c:fd:c7:70:46:9d:91:28:6c:39:ad:
         e5:b7:1d:43:97:18:56:ea:81:d5:5d:90:cc:49:e3:e5:70:3d:
         56:3d:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:27:06 2025 by rpki-client