Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
File:                     CF46A132348143E7B60D54AC599BE74868B00829.mft (raw, json)
Hash identifier:          pIczso2GbKl+dDHebKoBqcgTUrLtVwR1MkgxCiYa3+c=
Subject key identifier:   8C:E2:37:F7:AF:F5:2F:06:EE:3E:7C:E6:BB:56:61:65:76:52:24:C9
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       293150460283A287AC4DF45D70434C4FF8F45B91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
Manifest number:          025B
Signing time:             Sat 14 Jun 2025 03:20:04 +0000
Manifest this update:     Sat 14 Jun 2025 03:15:04 +0000
Manifest next update:     Sun 15 Jun 2025 05:02:04 +0000
Files and hashes:         1: 3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa (hash: FVb9ZZ4WvUJeaUEWPb1lRsJulOiqXqmN/UIWVK6dnPs=)
                          2: 323830343a3836633a3a2f33322d3438203d3e20323632333639.roa (hash: Ckk2/C3yX5sNIr7EK5kU0NqhxNP4ilrxVTM4BKyM7B4=)
                          3: 3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa (hash: HsBRneav2ZC308BPSA04zSeXz10enYxoEEISZbzRjPE=)
                          4: CF46A132348143E7B60D54AC599BE74868B00829.crl (hash: OcSNpkB65yH/oiWMOlVPs+qUQl321BySZB9+onoFC1E=)
                          5: 3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa (hash: tXHsxz7tAZC3y2RpTkqsLmy+UScXR6kvNeqCltX2ja0=)
                          6: 3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa (hash: jl+0su74W0b6u+BIAuCeDaZ8ZQq8KdRTGbuO+vh0ADM=)
                          7: 3133382e302e34342e302f32322d3234203d3e20323632333639.roa (hash: l898D7IGOnDfaSfbuCtYAWlE3rNzmp0ALEOKeZErLes=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 05:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:31:50:46:02:83:a2:87:ac:4d:f4:5d:70:43:4c:4f:f8:f4:5b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Jun 14 03:15:04 2025 GMT
            Not After : Jun 15 05:02:04 2025 GMT
        Subject: CN=8CE237F7AFF52F06EE3E7CE6BB566165765224C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:43:56:60:9e:76:c4:64:44:2c:87:7b:bf:8b:
                    d3:38:8b:a2:f7:05:05:00:82:ae:d4:35:57:40:9b:
                    ff:8d:2b:0b:a3:ab:4b:b5:d7:e3:0c:c1:c8:7b:c5:
                    11:08:7c:fa:ce:19:77:5e:b5:b1:14:02:38:03:a2:
                    90:99:56:f0:bd:e0:c4:89:c8:b4:47:e7:d9:18:de:
                    ac:53:46:fd:d0:f9:9e:a6:c5:7d:9f:f6:d4:4c:11:
                    fd:4e:78:2f:b6:11:c0:df:c8:02:1a:c4:8c:79:95:
                    bb:6d:90:3e:a6:4d:21:6b:72:00:1e:c7:00:da:99:
                    67:2b:55:06:69:63:6b:7f:69:3b:f0:7c:90:ae:f6:
                    89:e0:a6:15:b4:ce:dd:39:2b:ea:9a:ca:27:27:b5:
                    69:65:6b:7c:f7:c2:5d:70:b8:25:c2:48:f8:a0:df:
                    10:52:92:34:d9:67:0d:f6:f2:26:85:65:ad:d8:9e:
                    90:13:2d:c7:fb:13:34:52:b3:57:c8:67:9d:d8:8d:
                    63:65:b0:69:2f:76:40:03:49:dd:fe:ea:97:b6:c5:
                    b9:d4:f6:5e:b6:d8:16:ee:25:15:c4:0e:16:87:2c:
                    36:34:6d:e0:80:b9:d6:01:17:cd:d3:03:2d:ab:32:
                    60:28:8e:6e:09:7e:4f:8a:b2:c1:43:2b:50:47:df:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E2:37:F7:AF:F5:2F:06:EE:3E:7C:E6:BB:56:61:65:76:52:24:C9
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:05:a5:0f:5a:42:a2:35:85:a9:9c:83:a9:2e:d6:93:13:
         20:44:df:fb:06:34:66:d5:4d:2d:dc:f4:c9:4a:8d:b2:78:4b:
         49:9b:ed:f0:7a:dd:bb:04:9c:c9:c7:ad:ce:17:d8:34:9f:6a:
         79:36:64:58:14:81:4f:c7:f0:53:80:40:b5:81:f1:3a:45:90:
         13:7a:6f:2a:5d:89:11:f0:8c:5d:13:e7:83:9a:b6:71:d6:39:
         ff:31:ac:ac:e4:bb:32:d9:ee:5f:b5:ce:1d:d1:c0:df:24:8a:
         db:02:ee:20:8d:a1:8e:a9:58:31:cf:c2:f3:39:8d:2a:61:27:
         0a:19:30:30:8c:8f:bd:47:6f:ff:ca:7a:c7:a1:a8:78:4f:97:
         9d:c2:c5:5b:6e:f2:48:e9:43:84:fe:4a:e8:d5:10:74:0b:f8:
         dc:70:44:3c:dc:24:3d:04:6d:5d:d5:77:9f:4a:a2:e6:a9:db:
         e0:73:f2:de:b6:cd:73:53:bc:14:e9:02:e5:16:e8:73:32:85:
         7c:69:7c:2c:d7:09:8f:50:69:fc:24:2e:c4:78:b1:3c:2d:19:
         9e:31:19:11:df:55:e2:53:7b:be:ca:19:27:4c:bf:cf:1b:2a:
         eb:31:be:74:b5:18:56:f9:12:bb:29:e8:ba:2a:42:9f:25:18:
         af:fd:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:07 2025 by rpki-client