Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
File:                     2102F1879CA4D61251D630CB79E650FDA70A9610.mft (raw, json)
Hash identifier:          KyCKh0nN7dfN1ce+MGH37mArS4HMh79FkCzc6uIxWBw=
Subject key identifier:   1E:9D:5B:61:FF:E6:E2:C6:E9:45:A3:FC:26:E3:22:C3:37:CB:28:B1
Authority key identifier: 21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10
Certificate issuer:       /CN=2102F1879CA4D61251D630CB79E650FDA70A9610
Certificate serial:       707E7E39FB024D060E2E8F12BB058BDC799C41B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
Manifest number:          023F
Signing time:             Sun 08 Jun 2025 08:25:10 +0000
Manifest this update:     Sun 08 Jun 2025 08:20:10 +0000
Manifest next update:     Mon 09 Jun 2025 11:18:10 +0000
Files and hashes:         1: 323830343a383636303a3a2f33322d3332203d3e20323732363339.roa (hash: 7rrIE5OP03n9aZiR4IkJPKUOmCBVjnU3eRdX3MiZIVw=)
                          2: 2102F1879CA4D61251D630CB79E650FDA70A9610.crl (hash: ngTjGXLOlf7UDbO75bwopPETXhgz1GPnKn76F1ddi9o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl
                          rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7e:7e:39:fb:02:4d:06:0e:2e:8f:12:bb:05:8b:dc:79:9c:41:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2102F1879CA4D61251D630CB79E650FDA70A9610
        Validity
            Not Before: Jun  8 08:20:10 2025 GMT
            Not After : Jun  9 11:18:10 2025 GMT
        Subject: CN=1E9D5B61FFE6E2C6E945A3FC26E322C337CB28B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6e:da:be:c7:07:d5:ce:8a:7e:2b:a3:3a:2c:
                    95:05:e8:ba:4b:29:4f:8d:9a:45:80:57:ff:16:37:
                    ba:0c:6c:a2:d2:f1:ea:89:7d:03:8b:02:62:68:0e:
                    8d:56:fc:bf:3c:be:79:6b:d2:34:60:d3:3e:a6:5e:
                    e8:9e:cd:60:4e:75:62:7a:09:c1:0a:98:c7:47:83:
                    eb:4d:3b:d1:9c:98:74:98:7a:b8:0f:23:7f:50:ac:
                    f7:4f:ee:dc:14:dc:92:84:07:0b:32:fa:53:c3:18:
                    18:c9:93:87:77:ca:fe:8d:5a:8e:f2:db:e8:15:b9:
                    d2:4f:20:78:2e:19:3e:ec:f8:1d:38:5d:a2:6b:0d:
                    48:84:39:83:ef:54:c5:61:a8:c7:e1:70:3d:5d:b7:
                    e0:10:22:9b:a9:b2:80:e1:89:83:f9:83:39:b6:bd:
                    8d:fc:04:db:c9:a4:fd:4c:35:24:32:eb:59:05:ce:
                    02:a6:ba:13:2a:41:28:73:7a:9f:d2:e2:b7:b1:fc:
                    ae:0b:17:5c:44:a7:ee:a2:0b:be:60:bb:3b:34:97:
                    73:19:a1:bf:ce:4c:71:5d:49:e6:d9:69:0a:66:9f:
                    da:42:91:f5:94:c6:b2:5d:4b:55:fe:26:03:5d:78:
                    f8:14:a1:7c:6f:91:76:b2:06:8d:16:4f:f3:34:9f:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9D:5B:61:FF:E6:E2:C6:E9:45:A3:FC:26:E3:22:C3:37:CB:28:B1
            X509v3 Authority Key Identifier:
                keyid:21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:5b:5c:5e:4e:24:0b:29:86:aa:b5:12:68:17:73:7b:31:
         9e:16:49:ce:eb:74:5f:f0:21:0f:a3:39:ae:c9:0f:70:82:f3:
         8a:e1:59:9a:dc:bc:23:16:b5:5c:83:4d:59:5c:cd:d7:75:94:
         b9:5c:e6:56:87:e7:90:05:fa:dc:d7:de:18:0c:20:e5:97:98:
         30:c1:be:72:49:08:b3:64:40:ae:ed:f5:c4:46:a3:7e:67:5f:
         83:e6:65:d2:da:fb:7e:4e:7f:c0:c5:a8:fa:09:b8:f1:78:a8:
         59:4c:6c:33:89:5d:3e:a5:81:09:1a:56:9f:2c:50:4b:01:25:
         c2:91:c4:6c:ec:10:95:27:b8:b6:c5:0b:2d:da:d3:86:ac:c0:
         a6:50:8f:49:63:5a:97:20:1b:f7:a7:00:6c:16:cd:5f:37:69:
         c2:6f:92:54:5c:f6:64:7e:5a:08:8f:63:70:fb:ff:d4:45:72:
         60:9e:30:be:da:ce:d1:d7:7a:aa:db:90:94:2f:7f:40:53:0f:
         1d:fd:61:29:c5:36:6c:e3:b5:41:a0:68:8f:78:d1:33:4a:d6:
         dd:e4:de:94:79:cf:40:55:17:1b:55:c4:c3:e2:23:0a:62:d4:
         3c:65:90:04:1c:5e:7d:94:68:fd:b5:91:4d:bd:47:b6:24:83:
         01:00:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:23 2025 by rpki-client