Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
File:                     DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json)
Hash identifier:          C7mOak8MhJWYAaK5JCUD7QFMh7CbSSeviiqyCUv0tbI=
Subject key identifier:   E7:C4:50:D1:77:E4:BF:DD:6D:23:95:B2:BF:12:AF:6C:EF:50:E7:02
Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
Certificate issuer:       /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
Certificate serial:       5102C019FC92AC68D69EDC261BD83CDD234B608C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
Manifest number:          06
Signing time:             Thu 03 Jul 2025 22:22:38 +0000
Manifest this update:     Thu 03 Jul 2025 22:17:38 +0000
Manifest next update:     Sat 05 Jul 2025 01:51:38 +0000
Files and hashes:         1: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: IClogsTgPP2jdDX2pCQp2SaY8/Z1H0Z21VY1ddWJsE4=)
                          2: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl
                          rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 01:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:02:c0:19:fc:92:ac:68:d6:9e:dc:26:1b:d8:3c:dd:23:4b:60:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
        Validity
            Not Before: Jul  3 22:17:38 2025 GMT
            Not After : Jul  5 01:51:38 2025 GMT
        Subject: CN=E7C450D177E4BFDD6D2395B2BF12AF6CEF50E702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:18:6c:38:b3:58:68:84:7e:8d:bb:b5:09:
                    54:56:5d:99:b1:78:03:43:a9:f9:bb:c5:02:d4:5e:
                    af:38:16:6a:af:84:46:db:e9:a5:b0:15:ea:66:5f:
                    a5:fa:72:d3:ce:98:03:01:6d:76:99:d3:a5:73:26:
                    f9:db:53:a2:00:14:80:87:10:a3:2b:14:17:2d:77:
                    f2:b0:72:45:30:ad:ae:5b:2d:72:c2:4b:ef:b5:f4:
                    64:d0:39:2e:65:97:fb:f8:6f:03:c0:16:5e:73:47:
                    6e:58:e1:64:8a:66:36:a0:61:4f:22:12:91:48:9e:
                    56:53:ed:96:1e:6b:b8:ed:04:b9:33:cc:ac:04:bb:
                    b5:3a:25:ba:ad:77:b5:20:43:57:87:53:a4:46:02:
                    fb:f6:26:52:ae:04:01:16:a1:60:2c:1b:d9:bf:3a:
                    5b:1c:6d:3c:30:4d:46:16:af:44:e2:db:fe:f9:7e:
                    16:42:a9:0c:32:ed:94:1e:ac:e6:6a:0e:8d:ef:ce:
                    ce:16:a1:c4:08:45:f2:a3:db:90:9c:52:de:b1:f0:
                    84:ee:48:ed:de:e3:0c:b4:d0:d5:aa:75:72:2b:c3:
                    c8:fa:2c:23:25:18:da:39:d4:6b:f9:83:a8:6a:f8:
                    d6:02:ef:f5:4f:d8:96:76:cc:ee:5a:da:8d:97:cc:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C4:50:D1:77:E4:BF:DD:6D:23:95:B2:BF:12:AF:6C:EF:50:E7:02
            X509v3 Authority Key Identifier:
                keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:f6:ec:90:c1:55:be:63:e4:c3:c8:1a:6f:b1:a5:de:a0:
         68:21:f3:36:ed:94:3f:de:d6:a3:4c:33:f8:c9:e7:92:c0:68:
         1b:a0:bf:b5:6d:ce:20:e1:35:ae:b8:80:f7:c5:d9:ee:4e:b3:
         b1:df:bf:70:65:c4:e4:30:62:53:7f:a0:a4:86:b5:ef:55:15:
         12:b1:df:72:f9:27:21:24:79:fb:42:4e:68:87:05:44:15:48:
         0b:87:29:f5:5b:be:ac:e3:89:30:a1:fb:58:a2:27:ea:6f:ca:
         7b:8d:f2:02:22:9c:ba:35:ce:1f:a5:c5:52:7b:80:df:9b:24:
         4f:7d:eb:41:14:52:f2:9b:cc:0f:91:17:12:7a:1d:9f:d8:83:
         8b:0a:bb:4f:35:51:b5:21:9a:66:95:6b:52:da:c0:8d:e6:a6:
         c2:a8:67:57:6c:85:3f:82:56:3f:cf:f1:7f:4e:35:2c:1f:f1:
         0c:ec:4d:73:a2:db:8d:8b:e5:29:39:00:32:0e:17:7e:5f:c0:
         6a:b7:a1:66:f7:dd:e4:f9:67:0a:95:ee:f1:52:52:1b:43:9e:
         47:e9:47:c0:fe:ac:6b:cb:8b:37:9d:71:ca:ea:91:33:f5:9f:
         c4:1c:84:f1:4d:b9:9d:65:34:5f:22:d8:d8:f3:54:0f:1f:a9:
         b6:6e:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:59:45 2025 by rpki-client