Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
File:                     EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft (raw, json)
Hash identifier:          JscGCt5eHNLGkBiqQXmzRfwmHIqnWrckhr7Qnol+B5I=
Subject key identifier:   18:AD:7A:A5:23:12:55:5E:5E:79:41:EE:56:93:20:98:41:6E:D1:83
Authority key identifier: EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6
Certificate issuer:       /CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
Certificate serial:       5E81807A9E409B2FACE75F71ABCA18C1341B701E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
Manifest number:          A2
Signing time:             Wed 11 Jun 2025 16:47:19 +0000
Manifest this update:     Wed 11 Jun 2025 16:42:19 +0000
Manifest next update:     Thu 12 Jun 2025 18:51:19 +0000
Files and hashes:         1: EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl (hash: lcAaJR0rbeMSWjvKfYNeAtsawd8F5C0aFa8eZliX+EI=)
                          2: 323830343a363362303a3a2f33322d313238203d3e20323639333737.roa (hash: /7XnMicGdZhyziJLgRBhQq7LzcxL6fL5TVn/spvS4Mk=)
                          3: 34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa (hash: VYOKYWTW4KYHyjWxZPNuftL4qjJ4ZSOyhDAXEVVS9P8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl
                          rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 18:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:80:7a:9e:40:9b:2f:ac:e7:5f:71:ab:ca:18:c1:34:1b:70:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
        Validity
            Not Before: Jun 11 16:42:19 2025 GMT
            Not After : Jun 12 18:51:19 2025 GMT
        Subject: CN=18AD7AA52312555E5E7941EE56932098416ED183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:b7:48:47:96:6e:38:c1:a0:58:f2:fd:a5:
                    f0:a4:73:4e:3f:dd:57:4f:35:43:76:d5:b8:e8:5a:
                    ef:d3:8a:1b:e8:a1:a7:fe:1d:23:ae:47:be:2a:15:
                    f4:be:17:3d:fe:4e:fb:7b:99:4a:d8:a5:f6:d3:53:
                    14:a5:55:b1:bd:8d:17:26:74:9e:8d:17:37:1c:31:
                    5c:74:b9:76:ba:4d:73:b8:fc:fa:5b:aa:e9:ad:2b:
                    94:8f:6b:00:60:3f:34:ef:f7:e5:f5:c0:89:02:27:
                    cb:80:fa:66:88:00:3f:42:34:2c:d1:6c:f1:f3:82:
                    b5:44:7e:ad:2c:f8:a2:7d:36:b2:34:af:2e:d2:2c:
                    0f:0d:e1:d5:b2:4a:22:d2:ab:f8:e0:a2:26:64:76:
                    a7:4a:22:d0:c7:79:63:c8:3f:96:21:df:f9:bf:77:
                    12:4a:6d:6b:e3:76:c3:96:39:79:53:6e:4e:b9:25:
                    44:43:3b:49:ce:16:b1:73:79:0c:64:3e:5d:79:fc:
                    1e:12:b5:89:e7:05:d5:31:8c:ee:24:39:40:c3:4a:
                    3e:dd:28:aa:e3:c4:3a:f4:42:84:1c:b6:da:11:c1:
                    0d:af:fa:76:ed:af:48:b7:e8:6d:91:ba:f3:ec:38:
                    ea:1a:b4:c8:de:24:a4:c0:97:d8:47:04:4b:79:d0:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AD:7A:A5:23:12:55:5E:5E:79:41:EE:56:93:20:98:41:6E:D1:83
            X509v3 Authority Key Identifier:
                keyid:EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:27:ad:21:23:62:03:93:22:dc:1e:c2:c0:4d:c4:8b:22:03:
         b6:8e:02:53:16:e3:33:9d:84:01:94:51:92:71:50:84:71:15:
         09:a5:3e:e9:2e:4c:38:99:7d:98:54:cb:23:6b:35:2b:6d:59:
         8f:14:31:8d:1a:86:33:d9:33:a4:b9:a0:83:68:f9:a7:02:d4:
         c0:cc:37:48:e6:33:02:68:a9:f3:e1:2f:29:aa:2c:16:33:f7:
         fa:6f:af:19:64:47:9a:a2:d1:2a:90:a4:c9:2b:77:83:72:aa:
         a9:46:b4:61:b3:29:5b:40:19:73:93:39:27:ae:3a:d4:21:33:
         52:f6:79:e4:12:23:33:34:3e:20:f5:21:92:4f:30:2d:8f:d1:
         ad:84:0b:e1:2d:d7:48:72:82:3a:1d:d3:57:c4:2a:6f:8d:7c:
         e3:53:b3:e1:d9:ea:94:a7:90:ef:bf:eb:a7:59:9d:96:71:1b:
         38:e6:74:2c:09:88:1d:51:a9:55:26:2a:ae:c6:1b:9e:e9:06:
         0d:0d:2c:23:1a:ea:ce:a0:5f:2e:ef:d7:f0:ef:57:83:bb:3f:
         b1:8e:19:33:11:fa:a3:5b:ae:ad:20:9b:5e:70:3f:f7:d5:ab:
         44:1a:71:98:08:79:b4:02:ce:06:a0:1a:9a:9b:95:be:51:97:
         1a:b2:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:39:54 2025 by rpki-client