Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
File:                     F61AA6D04968E2222C81499C46D03813F1070400.mft (raw, json)
Hash identifier:          jXBptUT7m5gcQGewAOtZlGd1nCBx7aKN1iaAocLc6+8=
Subject key identifier:   BA:AA:B5:EC:DC:F3:49:9D:AF:39:39:52:88:9A:9B:F6:FB:5F:B5:94
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       28A2D4712E34FB73BB23C059778180A195C1F8F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
Manifest number:          F4
Signing time:             Sat 05 Apr 2025 07:06:17 +0000
Manifest this update:     Sat 05 Apr 2025 07:01:17 +0000
Manifest next update:     Sun 06 Apr 2025 08:01:17 +0000
Files and hashes:         1: 3137392e3130372e3132382e302f31392d3332203d3e203238313731.roa (hash: yhjpZ/3yeOya0YdscNdzwhmDLQucI5LPtbVEA2kspkI=)
                          2: 3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (hash: LSjMHoE69qWqnpzVzyyj7h0wlVYndHxXSlQXW5zHZ84=)
                          3: 3138392e38342e3136302e302f32302d3332203d3e203238313731.roa (hash: 9cCHxisrQbcvqgrXYb1FMnOR1opLT5/3gLcwgpJUiMU=)
                          4: 3137372e38342e36342e302f32312d3332203d3e203238313731.roa (hash: QGs4i+u1Fp781xTRBZuVf9Sbpy4p+Uveo96HgjsMvDA=)
                          5: 3137372e3133372e3234302e302f32312d3332203d3e203238313731.roa (hash: C2DRBYLwQ2ccRNhVyPuOjzMp87KdmEZ6vL8rvFgjzj0=)
                          6: 323830343a6438343a3a2f33322d313238203d3e203238313731.roa (hash: fFWlkw4VgGZKIM3JMaVwB2wGQVwKvg1CcuwKadWJSlU=)
                          7: F61AA6D04968E2222C81499C46D03813F1070400.crl (hash: KWfoCq3LlWG/iPkEcTFGkrGhPYVEeeDDQ/Dwpm9TB/U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a2:d4:71:2e:34:fb:73:bb:23:c0:59:77:81:80:a1:95:c1:f8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Apr  5 07:01:17 2025 GMT
            Not After : Apr  6 08:01:17 2025 GMT
        Subject: CN=BAAAB5ECDCF3499DAF393952889A9BF6FB5FB594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:ac:41:77:83:cc:a7:ab:44:8b:7d:38:8b:
                    ec:27:a5:86:ec:50:c5:cc:90:bf:8e:c3:05:1a:23:
                    64:ae:71:60:46:d8:ae:48:de:57:d0:37:6c:d8:8c:
                    8d:1c:50:a5:6f:ce:4a:f4:70:55:cd:65:ca:13:a5:
                    b5:1b:44:6f:ed:4b:b5:1a:25:f5:00:f7:6c:ca:29:
                    07:95:50:cf:e3:2e:fa:36:05:04:96:9f:6d:e3:5e:
                    02:93:ea:08:8a:da:c0:e1:a6:01:34:bf:72:8d:6d:
                    6b:92:ae:79:54:5f:c5:c7:96:61:5e:95:3a:f2:bc:
                    53:e0:f4:f8:b7:3c:fc:ff:81:eb:7f:f6:f2:87:91:
                    96:12:5a:f7:44:ee:61:50:bd:a3:29:ee:53:62:e0:
                    8d:53:a2:3b:ac:58:73:94:e3:93:67:37:18:f4:51:
                    4c:be:15:b5:e0:11:d5:a8:d5:7f:2c:54:5b:13:bc:
                    cf:d7:e0:1f:3f:f6:76:24:95:ce:c9:89:f8:9d:48:
                    b1:16:9f:86:15:11:30:a9:00:ef:6e:43:97:f2:fe:
                    2d:6a:ee:57:be:b7:4b:63:cc:a5:ef:c5:23:c1:2c:
                    6a:82:4e:24:c5:56:48:c6:77:b5:ee:83:17:5f:c5:
                    65:97:24:0e:3a:ec:10:32:69:f2:10:a3:32:ac:b8:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:B5:EC:DC:F3:49:9D:AF:39:39:52:88:9A:9B:F6:FB:5F:B5:94
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:25:84:45:a8:a0:aa:5e:e6:f9:29:51:6f:42:7e:6c:05:
         bf:24:17:60:b1:b5:13:d5:c5:78:c7:ac:fc:7d:3a:9c:3a:91:
         4f:60:ac:39:51:4b:3b:a0:1d:82:8b:37:4d:dd:8b:22:8a:4b:
         50:8e:68:6c:a7:15:94:fe:f9:8f:08:a9:18:ef:99:60:27:1b:
         d1:98:b5:ac:25:6a:ef:77:74:94:09:eb:3d:47:fa:14:39:f1:
         02:fa:a4:87:14:39:90:da:3c:e7:2c:d9:ad:ac:71:20:f4:b3:
         c5:ea:4b:41:de:79:b6:b4:79:c9:1a:b7:3f:99:39:54:44:bc:
         6a:06:9a:af:96:a7:1e:6f:02:89:57:86:76:d0:1a:d6:9d:e3:
         90:b7:e5:63:16:03:35:52:1c:f4:45:89:ef:2f:96:36:c0:18:
         28:87:3f:47:f8:e1:d8:d9:c7:08:4c:a3:52:9e:87:a9:b8:78:
         a6:ff:35:81:9f:3a:0e:3b:d0:86:86:9c:23:ca:93:84:51:8c:
         ec:71:0a:9e:3f:d0:f2:14:4a:a0:dd:81:2d:fe:e8:c2:ac:06:
         ee:ea:ff:81:9f:d4:21:da:9d:32:ba:94:0a:d2:11:28:41:a4:
         bc:fa:9f:49:07:4d:ea:2e:43:54:a7:ae:83:e9:3a:75:7d:58:
         56:eb:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:16 2025 by rpki-client