Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
File:                     0817DBC592F999355596EFF8ED1D632370D2A2D0.mft (raw, json)
Hash identifier:          5Zs7IZEv4yZiIPhoqxBLvwa9G8KEZkqzowu8vi+pRC0=
Subject key identifier:   A2:20:94:90:12:CF:E4:9E:1D:23:DD:CA:99:24:62:F5:A5:D1:7E:23
Authority key identifier: 08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0
Certificate issuer:       /CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
Certificate serial:       367EFBB76601E2EC5A35E4CF26AA4D52E68C983A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
Manifest number:          6B
Signing time:             Sat 07 Jun 2025 07:57:39 +0000
Manifest this update:     Sat 07 Jun 2025 07:52:39 +0000
Manifest next update:     Sun 08 Jun 2025 10:04:39 +0000
Files and hashes:         1: 34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa (hash: OjXuAtBkVcOvvx4OoAgrp0COCxFiOXAhBYC2rEcQJao=)
                          2: 323830343a343838633a3a2f33322d3332203d3e20323637313238.roa (hash: 1s2O60lHgDIQpC8FZVx7268kNuAwgJjkP2rHqfWjny8=)
                          3: 0817DBC592F999355596EFF8ED1D632370D2A2D0.crl (hash: e/XqKQqIhN9uORL+7hPQ5GXJfncWEU6Ktr6/um3iANo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.crl
                          rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7e:fb:b7:66:01:e2:ec:5a:35:e4:cf:26:aa:4d:52:e6:8c:98:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
        Validity
            Not Before: Jun  7 07:52:39 2025 GMT
            Not After : Jun  8 10:04:39 2025 GMT
        Subject: CN=A220949012CFE49E1D23DDCA992462F5A5D17E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:d4:ef:32:09:3b:4e:d7:6d:86:2f:8c:74:
                    61:3d:4b:20:df:80:15:d8:bc:61:ae:c5:88:6f:ca:
                    46:16:16:08:e8:c6:6b:d2:58:ba:5c:d0:96:e0:ed:
                    17:b6:b0:36:e0:bd:bf:3a:47:62:94:40:3b:08:83:
                    63:b1:07:6b:82:c4:7d:35:74:e6:ac:71:c0:c2:ca:
                    1e:d8:94:33:0c:a0:05:87:87:b7:a6:c9:e3:61:77:
                    85:fc:55:07:b6:7d:90:a2:0a:76:bb:bf:9c:c5:f2:
                    c0:1d:cc:5d:7b:4b:6b:1f:96:3f:7c:fe:92:d6:ab:
                    92:43:ae:ac:ba:92:95:6d:c2:95:98:e9:d1:6f:53:
                    44:cf:4e:80:7c:66:bd:e1:94:a7:95:15:76:e8:72:
                    13:9d:d3:28:cf:23:41:26:7d:94:31:8d:03:9f:45:
                    c2:9e:3c:63:b9:54:33:40:83:3b:c3:e7:8f:df:f1:
                    f2:9f:b1:43:5a:99:59:47:db:8a:62:37:a1:62:89:
                    f4:f2:b8:df:dc:0b:37:f1:2f:8b:ec:10:af:69:42:
                    60:a6:3f:fd:5e:0d:c3:5e:af:d4:14:9e:58:df:7c:
                    96:2e:e1:1f:40:e3:2a:7f:d3:d1:72:3d:29:76:4c:
                    cf:25:d1:dc:74:dd:21:e7:8c:29:0d:5a:b5:d7:ce:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:20:94:90:12:CF:E4:9E:1D:23:DD:CA:99:24:62:F5:A5:D1:7E:23
            X509v3 Authority Key Identifier:
                keyid:08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:7c:65:ed:be:58:2b:a3:ad:46:a3:52:ec:c4:ae:e5:bd:
         aa:04:a8:03:5b:1d:fd:f0:05:9d:c9:bb:ae:67:5f:b1:56:c9:
         fa:13:65:b2:8d:7c:eb:27:96:3c:ba:c4:bc:cb:5b:a5:e2:0b:
         c4:b2:1b:f3:d2:cf:19:d3:a5:8e:3b:71:93:b8:e6:78:d2:6e:
         74:12:fb:b5:02:b0:70:1f:92:7b:3c:00:1b:54:d9:fe:fb:09:
         30:8a:a8:81:ff:01:40:8d:71:44:e4:68:64:f0:5c:8d:8e:ea:
         fa:7b:bf:90:5a:8c:96:32:fb:e2:24:1c:83:5e:5b:6d:50:27:
         2f:d4:d8:f2:04:c7:d8:59:84:84:46:f6:8c:5f:73:35:84:de:
         1c:9a:35:c7:7e:33:dd:bb:4d:71:ba:52:fe:e8:de:bd:bf:1a:
         e7:11:30:32:20:64:ad:59:fd:84:bb:32:28:f0:d4:4d:9f:b1:
         11:c6:e2:57:d4:0c:18:a5:22:81:76:4d:ac:0a:8b:01:f3:da:
         77:90:9e:ff:8b:48:d3:38:f2:45:b5:85:82:53:57:dc:f6:b7:
         73:23:6c:c2:3a:0c:5a:8b:89:39:76:2b:e3:13:54:af:6b:83:
         9e:53:e6:41:61:c5:24:5a:d4:ea:ea:03:00:4b:94:bd:27:10:
         c6:0d:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:21:33 2025 by rpki-client