Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File:                     DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier:          /7Ie3Vu338Xs1UVy3v/PNU+Cs1RUGjGoGr6mZPNVI8A=
Subject key identifier:   72:E5:7B:86:CE:A5:6C:2A:D6:90:54:F7:C4:25:5E:9E:8B:C8:55:63
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer:       /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial:       1A681608DF9C9C6BCF24A1A63527840A73C64E87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number:          0284
Signing time:             Fri 06 Jun 2025 10:50:00 +0000
Manifest this update:     Fri 06 Jun 2025 10:45:00 +0000
Manifest next update:     Sat 07 Jun 2025 10:50:00 +0000
Files and hashes:         1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: 4SLtauTWDX5dO6oJdxNe9EiZh7shXweg484Lmqtf+8g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
                          rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:68:16:08:df:9c:9c:6b:cf:24:a1:a6:35:27:84:0a:73:c6:4e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
        Validity
            Not Before: Jun  6 10:45:00 2025 GMT
            Not After : Jun 13 10:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:20:45:b3:ac:17:3c:37:94:d0:2c:89:ba:
                    9c:b3:1a:a0:0d:fd:85:6c:4d:60:60:42:b3:98:3e:
                    fb:c5:1a:57:b9:fe:6d:69:40:13:ad:b6:f0:83:7d:
                    aa:78:c4:47:4e:ad:34:b2:45:e7:c4:e5:1b:42:34:
                    4c:91:d7:58:74:3a:0f:75:c8:46:65:80:21:45:f0:
                    36:c3:e3:d1:7d:28:53:d3:da:e6:de:22:df:40:d8:
                    71:0b:41:ca:a5:0d:45:28:84:41:2b:aa:76:50:e9:
                    25:be:4a:91:69:1e:94:6c:48:41:47:54:47:3f:42:
                    9a:d9:d3:2a:24:b2:6f:5f:c7:06:b6:f2:a0:49:3f:
                    1f:8b:e4:c4:d5:4f:a1:6b:29:37:26:6b:c5:8d:07:
                    3d:6f:59:2d:23:cb:15:7f:dc:1c:3e:60:23:4a:88:
                    38:84:3f:d9:1a:80:ff:38:1a:bd:75:cc:f8:14:ef:
                    2c:8f:24:bf:7e:3d:92:bc:85:74:7a:b2:39:26:8e:
                    71:b0:a6:95:68:b0:20:f9:2c:ab:5e:38:8f:78:e8:
                    cd:1c:19:e7:cb:b3:da:7b:d7:87:2d:fa:a7:ce:1f:
                    22:97:c3:82:62:ec:5a:79:4a:db:ef:8c:44:1a:84:
                    2c:15:d8:2c:34:d0:2b:aa:3e:56:2d:ee:8c:02:48:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:7B:86:CE:A5:6C:2A:D6:90:54:F7:C4:25:5E:9E:8B:C8:55:63
            X509v3 Authority Key Identifier:
                keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:ed:4e:ff:50:90:7a:e5:23:30:14:7c:09:5e:ed:32:d2:
         3e:55:26:33:d3:0f:e8:e2:da:71:aa:07:48:c5:82:af:b5:4b:
         73:0f:5d:1a:b4:99:07:58:fc:93:33:51:19:65:df:e4:bf:f4:
         37:4b:b9:5e:9f:26:e6:af:81:76:d6:a8:80:ad:fb:8e:ea:2e:
         27:a2:07:65:51:95:65:0f:f4:e6:04:cc:53:eb:bb:25:ce:54:
         60:fd:b3:68:24:13:4e:b0:92:75:cb:3f:c4:e5:39:7f:3f:1b:
         59:d8:2a:b9:a3:f7:05:bb:14:41:41:2a:19:65:44:96:8d:70:
         32:2d:96:5b:e2:0c:d5:c6:b3:6c:96:99:5a:3d:f6:ab:d1:95:
         ff:e8:6f:b4:d0:05:54:00:82:84:fa:da:e5:d1:71:03:83:a9:
         4e:31:1a:24:d5:33:fe:5a:6d:1c:19:fb:ff:07:ca:38:43:95:
         1d:5f:e7:54:5b:4f:72:e9:0d:aa:70:09:85:aa:9a:fc:4d:9f:
         c2:9a:8a:47:fb:e4:03:fa:25:7e:7c:18:e5:0e:08:67:85:86:
         07:25:71:25:c0:d9:29:f3:70:f5:2f:80:b0:4d:15:fa:1e:3d:
         af:11:ea:ca:01:7e:30:fa:12:8d:41:11:b4:31:20:90:7e:2c:
         6c:77:f9:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:42 2025 by rpki-client