Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
File:                     D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json)
Hash identifier:          bEhx5x1pFtx3TtLuh+sSy96I0SxWYXfqpKlD1S7cNLg=
Subject key identifier:   2C:CC:8E:89:9E:FF:B8:68:5B:0D:55:1D:5B:A4:02:EC:C6:50:9A:F4
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       614BE903AC297ABA8BCB9247B1D6BF93F97719D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
Manifest number:          0245
Signing time:             Tue 10 Jun 2025 01:35:20 +0000
Manifest this update:     Tue 10 Jun 2025 01:30:20 +0000
Manifest next update:     Wed 11 Jun 2025 01:47:20 +0000
Files and hashes:         1: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=)
                          2: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: Xtuo7jefhdUGudIMcA/l6sdY1TD6Nk4bXq7SFuuvVk0=)
                          3: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
                          rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4b:e9:03:ac:29:7a:ba:8b:cb:92:47:b1:d6:bf:93:f9:77:19:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Jun 10 01:30:20 2025 GMT
            Not After : Jun 11 01:47:20 2025 GMT
        Subject: CN=2CCC8E899EFFB8685B0D551D5BA402ECC6509AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f4:2c:e2:38:c9:a3:52:9f:80:85:38:da:3f:
                    90:15:16:70:e9:22:93:1a:eb:31:90:45:2e:88:db:
                    58:10:cb:81:57:07:ba:dc:f1:01:98:bb:e6:3b:37:
                    45:6e:28:54:84:18:07:92:cf:96:60:86:86:00:dd:
                    0e:5e:60:08:0c:eb:3a:cf:72:91:7e:c1:80:c1:62:
                    d5:41:48:89:7e:b5:ca:21:8a:df:89:a8:79:2c:a3:
                    09:d5:8f:ed:98:17:05:e3:94:3a:a4:21:0e:fa:8a:
                    a5:ad:c3:dc:fc:7d:ed:2a:4d:94:ab:f0:1d:22:1c:
                    d0:db:2d:1e:68:70:4f:d3:2c:4c:48:e1:f5:3b:dc:
                    25:fd:ad:34:7f:4e:8d:8e:bd:f0:7e:0f:f3:65:99:
                    60:49:7f:de:fa:6b:84:80:8a:14:9f:dc:2d:32:f1:
                    af:f8:6b:33:fb:c7:93:8a:02:f9:4a:40:cb:0d:a3:
                    be:72:20:99:a4:4e:5f:11:65:df:83:9c:ab:c1:d9:
                    20:b3:2a:c9:ec:ba:6e:fb:3a:e3:09:fd:fe:a7:ac:
                    41:97:04:c0:98:88:5f:af:ad:b3:1b:73:ea:79:2f:
                    79:68:7c:f6:d5:69:e4:f8:48:62:6e:7c:79:c4:9a:
                    c9:dc:a7:f3:65:c4:7d:c4:fa:b4:e4:bc:25:59:b8:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:8E:89:9E:FF:B8:68:5B:0D:55:1D:5B:A4:02:EC:C6:50:9A:F4
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0e:99:fe:39:e4:ee:bc:8a:0c:80:e9:d7:c5:32:15:1f:a0:
         4d:97:33:18:a5:06:28:47:a3:14:b3:92:26:19:b1:07:e6:15:
         87:34:49:a9:4c:56:88:5d:71:eb:f3:dd:e3:5a:c7:0f:e9:8a:
         05:bf:37:a7:68:53:be:65:0f:68:0e:0d:1c:ef:4d:d0:18:1e:
         29:8d:ab:29:c9:5f:e9:9e:60:e8:cf:55:27:b9:c1:a6:9a:02:
         d4:40:b4:96:8a:ee:bd:04:a0:ba:96:c9:4d:d9:d6:5c:d8:9f:
         0f:71:10:c0:81:de:bf:a7:65:54:11:63:93:c5:5b:a8:04:de:
         e6:b7:6a:58:43:e6:06:b4:0f:ed:d6:1b:0d:4c:65:d1:14:9c:
         57:77:a9:24:50:0a:a3:a6:a0:1a:b1:6b:46:39:d8:9d:50:31:
         fc:d8:96:ab:3b:5f:c4:52:69:61:35:c1:ba:d9:c5:7f:66:d0:
         7a:f4:e4:57:f5:69:b0:76:63:b5:93:18:bf:4c:5c:47:af:77:
         f3:86:5b:3f:aa:a1:39:ba:15:2c:ed:e8:75:85:4a:ce:4d:fd:
         7b:57:1e:b6:fe:3e:51:02:2b:5c:b0:ed:a2:21:8f:ba:1e:f4:
         3e:71:24:78:bb:f4:c9:52:b8:eb:89:e0:24:ef:7f:41:22:95:
         ec:ac:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:16:23 2025 by rpki-client