Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.mft (raw, json)
Hash identifier:          SDd+T5dHyvfDmACmGzkKVdCLOxJlEFseeC9HWINYoVg=
Subject key identifier:   AC:06:1A:67:AC:94:13:CE:B0:73:9F:21:28:FD:AB:17:BF:D3:33:2F
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       0C2CCABB14787B3A87518B15B9B2042D6B92E970
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
Manifest number:          0249
Signing time:             Wed 11 Jun 2025 05:46:18 +0000
Manifest this update:     Wed 11 Jun 2025 05:41:18 +0000
Manifest next update:     Thu 12 Jun 2025 07:50:18 +0000
Files and hashes:         1: 3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (hash: F0vIBnXm7QmhkLGIRL9MuzSSEvBi3tkeEcypHIDebRw=)
                          2: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (hash: uZqp4Wgh9r1u3S27RMEiTIHkcnYebpfguoeafqx6tVw=)
                          3: 3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (hash: I8gegaDlfSoPVJB4JicAvO6ZERf+vifvuI3FclW4DgI=)
                          4: 3138312e3232352e3135372e302f32342d3234203d3e20323730363930.roa (hash: LZs8UJxd25+oAoU0PN8Wb4clhACrCQakXa1FWzEA8gQ=)
                          5: 296B5A42104756A14E2651E7EAC81D02EA0F7531.crl (hash: eyBPn+d27/AN40FO6btu/KKG1T7yxLb+Q5+IuIImO1M=)
                          6: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (hash: Q8fT0X0GWM0hUQiYXkk2teK4Zmhm+tiJhQOBJv4JZPA=)
                          7: 3138312e3232352e3135392e302f32342d3234203d3e20323730363930.roa (hash: Ul7gq9CrRCwHaFK/u17aTOhNwaf2ziJyjPRRtidqANw=)
                          8: 3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (hash: zAMTmLC4WZfoe2M0Wu6wK3iaa8mmiwf2SqxgNYCF040=)
                          9: 3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (hash: FIwFwpyUCKNwCUQ0QTzPbTgQumrMufTSN6FixF1CLtI=)
                          10: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (hash: aSA8jLBDOKXb/wGF0KTIXFeM70Ti1je/b4isJG4ZqbQ=)
                          11: 3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (hash: Dw5AssA1HgxByRJyZF+pm59eguv/pTJItHP30N+8988=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 07:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2c:ca:bb:14:78:7b:3a:87:51:8b:15:b9:b2:04:2d:6b:92:e9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Jun 11 05:41:18 2025 GMT
            Not After : Jun 12 07:50:18 2025 GMT
        Subject: CN=AC061A67AC9413CEB0739F2128FDAB17BFD3332F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:c5:84:17:aa:78:10:f8:5e:37:22:23:00:
                    ee:ad:92:63:b2:16:14:5c:4d:3c:dd:c4:39:59:c8:
                    c9:7b:f5:6d:79:17:3c:e6:d7:c7:a2:7e:ce:3b:8a:
                    3d:88:82:1b:64:5f:8e:ae:47:ec:b1:1a:ae:6d:6b:
                    4e:92:88:30:b6:4c:b5:3e:36:ed:83:16:ad:32:24:
                    61:6d:b5:91:ba:87:75:99:eb:43:45:32:81:13:2f:
                    f8:7e:92:10:8a:b2:47:42:99:13:3f:1c:ac:28:c7:
                    06:b0:9e:4b:2f:85:15:ab:05:c9:17:be:90:0c:c6:
                    2d:ad:a1:d8:c9:d9:2c:3b:24:0c:d0:e0:1b:16:f3:
                    f9:54:4a:a1:9d:2b:db:36:cc:5c:a6:73:ff:b9:d7:
                    3d:7d:9d:c9:1c:bc:0d:72:c8:28:01:94:f4:5d:c7:
                    23:5b:6e:c1:c1:6d:81:4b:9b:ab:21:9a:1b:59:28:
                    df:81:d4:c9:45:b2:35:a1:c0:19:f4:c9:b2:0e:3f:
                    03:41:fd:68:ec:c1:2f:6d:13:80:66:d7:01:5c:05:
                    73:23:7f:ee:34:3f:1c:a3:7a:45:54:95:ed:ad:31:
                    14:32:31:ad:b6:96:7f:3f:10:9c:f7:42:64:df:f9:
                    04:7b:01:02:d7:e9:91:0b:1f:bd:3c:a1:28:2b:21:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:06:1A:67:AC:94:13:CE:B0:73:9F:21:28:FD:AB:17:BF:D3:33:2F
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:6b:d5:d8:47:4f:e0:58:0e:94:56:57:f9:ad:d4:d9:4c:
         6e:38:a1:32:7c:39:38:9c:33:f9:56:4a:cd:1d:3f:4f:41:d1:
         af:f1:60:ed:7a:a1:02:e5:90:f5:65:eb:85:b9:14:7a:1c:80:
         a2:c3:b1:f3:62:5a:a9:04:a5:23:c6:5a:33:c8:ad:3a:11:38:
         b5:21:85:3c:c0:81:84:f9:1b:1b:f8:f4:18:09:25:c7:ec:91:
         4c:da:c7:8e:c0:da:e2:9f:a3:d7:1e:02:fd:aa:9d:f8:1b:dc:
         a0:1b:87:d7:b3:27:c2:0e:b1:3f:5b:7f:1b:a0:11:ed:df:14:
         48:17:b9:76:75:eb:0b:4a:22:9d:ee:3f:a1:cc:e5:2f:c7:f5:
         1f:ab:b4:2c:b5:45:48:50:9a:d8:ed:57:25:f0:67:95:15:cf:
         d3:17:c9:31:1b:e3:cc:9b:79:90:c8:35:70:83:ae:cd:c3:04:
         c4:9f:65:f5:af:e1:3f:cf:a7:8c:4f:f2:11:16:47:bc:99:be:
         97:94:85:21:0e:f7:c5:40:01:88:e1:ca:ab:51:41:4e:50:ee:
         02:14:72:92:4b:43:32:ed:13:42:1b:f8:84:0e:a1:af:a0:ee:
         52:c3:77:cb:81:5b:4d:66:db:db:33:b4:5f:5f:1c:a7:ad:9a:
         fd:82:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:22:50 2025 by rpki-client