Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.mft (raw, json)
Hash identifier:          Z3CTYWKGl10uftXbnBStQMcoNA9CK7WN5esIctcw2js=
Subject key identifier:   8B:DA:58:D0:2F:C8:6B:91:24:28:17:35:54:0A:36:C2:F7:78:D3:91
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       76D0DDF993F82FEC3262426D04610D4485F57927
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
Manifest number:          0248
Signing time:             Tue 10 Jun 2025 11:01:18 +0000
Manifest this update:     Tue 10 Jun 2025 10:56:18 +0000
Manifest next update:     Wed 11 Jun 2025 13:41:18 +0000
Files and hashes:         1: 3138312e3232352e3135372e302f32342d3234203d3e20323730363930.roa (hash: LZs8UJxd25+oAoU0PN8Wb4clhACrCQakXa1FWzEA8gQ=)
                          2: 3138312e3232352e3135392e302f32342d3234203d3e20323730363930.roa (hash: Ul7gq9CrRCwHaFK/u17aTOhNwaf2ziJyjPRRtidqANw=)
                          3: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (hash: uZqp4Wgh9r1u3S27RMEiTIHkcnYebpfguoeafqx6tVw=)
                          4: 3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (hash: I8gegaDlfSoPVJB4JicAvO6ZERf+vifvuI3FclW4DgI=)
                          5: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (hash: Q8fT0X0GWM0hUQiYXkk2teK4Zmhm+tiJhQOBJv4JZPA=)
                          6: 3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (hash: Dw5AssA1HgxByRJyZF+pm59eguv/pTJItHP30N+8988=)
                          7: 3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (hash: zAMTmLC4WZfoe2M0Wu6wK3iaa8mmiwf2SqxgNYCF040=)
                          8: 296B5A42104756A14E2651E7EAC81D02EA0F7531.crl (hash: U8zLBwSzfAxgGucTZIs5OkddhK5eIX+J21YSMN1FTdA=)
                          9: 3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (hash: F0vIBnXm7QmhkLGIRL9MuzSSEvBi3tkeEcypHIDebRw=)
                          10: 3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (hash: FIwFwpyUCKNwCUQ0QTzPbTgQumrMufTSN6FixF1CLtI=)
                          11: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (hash: aSA8jLBDOKXb/wGF0KTIXFeM70Ti1je/b4isJG4ZqbQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 13:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d0:dd:f9:93:f8:2f:ec:32:62:42:6d:04:61:0d:44:85:f5:79:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Jun 10 10:56:18 2025 GMT
            Not After : Jun 11 13:41:18 2025 GMT
        Subject: CN=8BDA58D02FC86B9124281735540A36C2F778D391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:df:d3:53:69:10:4e:89:d7:4d:cd:42:2d:
                    50:0f:db:c0:69:09:35:c9:58:67:57:7e:ad:eb:2c:
                    0f:30:31:3a:5c:8a:e3:40:29:ca:4e:94:cc:38:96:
                    6c:12:ee:99:4f:ef:2c:c3:7d:6f:15:40:a6:29:cd:
                    1c:1e:dd:17:07:5c:7b:57:84:e9:8d:af:2a:67:ee:
                    6d:91:43:d1:17:4f:ce:d1:ca:01:13:e9:80:a5:89:
                    2d:bc:4f:38:9b:60:c5:ee:d6:da:29:03:a3:41:df:
                    49:68:0e:62:b0:a4:3f:48:ea:d9:51:39:7b:86:fd:
                    d3:05:64:59:1a:8b:1d:cc:9c:57:9b:74:0f:01:88:
                    33:c2:09:4f:78:c8:37:d4:a8:fc:e8:ff:19:6d:8a:
                    45:a1:1f:2b:b4:3c:5d:d0:40:bd:ac:e2:14:fe:78:
                    a9:7b:d7:73:fe:fb:7b:a6:4d:32:ad:7b:55:78:25:
                    66:7b:de:8b:e0:54:55:07:e8:05:1b:ae:d5:be:a5:
                    f8:f7:d6:c8:5f:5e:4b:bf:67:94:9a:24:9e:c0:da:
                    af:8b:21:d2:84:58:ef:7f:15:14:2e:90:1e:28:02:
                    a9:68:17:54:67:85:3e:2e:9d:7c:bf:df:13:c7:af:
                    54:46:95:15:65:0e:ce:7e:56:93:99:c5:e7:92:cd:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DA:58:D0:2F:C8:6B:91:24:28:17:35:54:0A:36:C2:F7:78:D3:91
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:37:07:09:e3:dc:73:d6:13:2d:56:40:9e:ea:98:a9:ba:47:
         1e:a9:91:a4:89:52:c6:71:d9:04:1c:62:63:47:c3:b1:11:08:
         cb:11:fb:35:8f:d1:2b:23:36:18:51:75:24:10:1f:94:d5:27:
         37:71:80:92:fa:70:a3:11:26:32:b6:4a:dc:8c:4a:67:bb:b8:
         9c:dd:2c:4e:85:61:56:80:1a:6f:ab:b5:8f:78:86:ec:c5:4a:
         c7:b3:10:9b:0c:50:bd:7d:53:55:59:65:68:05:b1:92:38:32:
         8d:d7:e7:93:d1:a4:af:b0:35:1d:5f:62:de:5c:50:dc:ee:86:
         0d:46:5d:cc:b5:5c:5c:8a:d2:e3:98:1e:36:51:ca:ec:2f:cd:
         b5:b0:00:f6:fe:52:a8:fc:0e:6d:26:c3:81:de:08:8d:24:73:
         f8:28:76:bb:09:48:0a:7c:db:a4:c1:35:d9:41:28:87:b6:22:
         f3:2e:3e:1f:06:92:5a:2a:94:66:c3:5f:93:e5:51:72:c6:13:
         01:2d:ec:d0:15:25:56:1f:3d:c8:1e:a3:8c:85:41:29:d9:0f:
         a9:a7:c8:e4:24:6b:bf:ed:b3:e9:de:38:41:59:1e:b6:6f:aa:
         f4:e8:1b:02:c4:a1:d2:1a:89:53:c8:6d:21:26:aa:bb:e5:c2:
         b3:e0:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:15:04 2025 by rpki-client