Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
File:                     06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft (raw, json)
Hash identifier:          7va8FkLVe6OA0Chb/YJPoHWpY/VpoEh9ULWy5AEWN0s=
Subject key identifier:   FE:8E:B6:1D:5E:B7:7D:CD:9A:B5:F0:CA:01:A5:40:20:2C:82:DC:75
Authority key identifier: 06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Certificate issuer:       /CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
Certificate serial:       0452465A006193AD1D0D711932896D71E77D8B5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
Manifest number:          4D
Signing time:             Tue 10 Jun 2025 16:20:20 +0000
Manifest this update:     Tue 10 Jun 2025 16:15:20 +0000
Manifest next update:     Wed 11 Jun 2025 19:14:20 +0000
Files and hashes:         1: 34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa (hash: lY/EWRwcSasK752wLlf+0P9S37d6hT9Ev6TDPS9lrXU=)
                          2: 323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (hash: qEzv17rM+XES6/wodcNF76C7jyTtbPZB+LP3WCeG0JA=)
                          3: 34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa (hash: j927LaYZV83yuHe7zoP+Gcpy0fIwCpzgO8deimnVhvg=)
                          4: 323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (hash: 6MnbkBjo7czkhYq5sp9gBQAtXAcq+C4fouGkHFK6J2w=)
                          5: 06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl (hash: MaJDgIzvW+wqwx41wcTByHhV3DySWLk8CP+R1vWBY4w=)
                          6: 323830343a346632343a3a2f33332d3333203d3e20323638333037.roa (hash: 1e/ZASVitsNt9uijDZpgaaQEjm1GPyXaw2VOWDq218Y=)
                          7: 34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (hash: CqLbBj0uT8K12+SQb9CTcXG1+amWQ68DH+TtD05xAIk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:52:46:5a:00:61:93:ad:1d:0d:71:19:32:89:6d:71:e7:7d:8b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Validity
            Not Before: Jun 10 16:15:20 2025 GMT
            Not After : Jun 11 19:14:20 2025 GMT
        Subject: CN=FE8EB61D5EB77DCD9AB5F0CA01A540202C82DC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:ad:04:08:36:3d:20:3f:c4:1a:a4:6a:3c:
                    b5:a0:3b:44:0e:4e:36:9e:83:03:07:8e:87:f1:7a:
                    e9:12:0d:84:92:d3:41:c8:54:c2:a4:f4:99:a4:c4:
                    9e:17:50:82:bc:46:4e:ed:a2:03:49:6a:98:b4:f6:
                    60:4f:e2:70:0e:c8:b6:cf:a8:0c:eb:84:4e:8b:90:
                    9b:90:6a:e5:22:30:90:8d:3d:84:30:55:33:85:2f:
                    19:24:05:15:28:eb:91:e7:ff:b4:f2:7d:9a:b4:fe:
                    9d:70:f1:6c:c7:a6:11:f8:19:e0:15:2a:2e:3e:72:
                    7b:6d:8e:93:be:19:09:6b:c0:d5:28:a4:7b:ba:a0:
                    ba:4d:d0:d1:ae:43:94:f7:a0:f2:1a:99:5e:cc:d6:
                    36:4a:9f:53:49:f8:00:32:2a:76:f4:ef:e9:a6:a9:
                    64:5c:03:5b:f6:a9:72:b0:c4:3f:a6:a7:a1:5f:cc:
                    f8:4d:85:a7:99:c5:b0:45:93:39:89:35:b7:ee:51:
                    26:cd:8b:61:8a:f8:9f:4e:98:5c:7f:84:06:56:27:
                    7b:60:b8:9e:18:a4:5d:98:d4:40:dc:26:7f:48:b1:
                    9c:6f:05:16:90:1a:59:b9:2d:34:7f:f1:cb:7f:8e:
                    3f:cf:b5:0b:8a:85:58:44:a5:f1:47:3b:5f:c2:b3:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8E:B6:1D:5E:B7:7D:CD:9A:B5:F0:CA:01:A5:40:20:2C:82:DC:75
            X509v3 Authority Key Identifier:
                keyid:06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:02:4b:b2:88:0e:52:76:d0:4d:84:22:5c:e9:c8:14:e6:
         81:fd:96:69:86:ad:ed:33:3a:f8:63:ca:7c:90:79:20:29:18:
         38:6c:3e:72:c5:ff:30:c2:58:81:8a:6d:26:85:c2:59:b9:df:
         9e:db:aa:fe:49:b8:ef:e0:bf:c1:13:5f:03:9f:b0:5a:73:4b:
         53:26:e2:ea:ea:87:ed:ad:fc:47:aa:8e:cc:4b:01:cf:5d:47:
         47:b6:13:0d:45:d4:38:d4:7c:2b:11:1f:11:27:17:9c:8b:29:
         35:9e:0c:1d:eb:5c:cc:11:a0:a7:c7:83:29:9f:6b:fb:9b:2c:
         06:3f:9c:d4:ec:1f:3a:b2:c2:d5:2f:98:81:1d:f6:6d:00:da:
         05:4e:75:e8:e4:b5:ac:84:00:6e:1a:3f:1a:22:ed:98:8a:8b:
         35:49:d5:07:d9:4f:d4:be:e5:8b:5f:1c:09:27:0a:db:1b:46:
         bf:9d:35:7b:5b:0e:e9:a0:c9:0b:7b:e6:1b:44:d8:48:2c:bf:
         a1:ee:87:63:ae:40:62:1f:33:cc:fe:d2:a1:34:12:63:db:2d:
         74:f8:23:84:aa:50:45:ce:49:b8:5e:42:2a:b6:8e:a4:fa:c1:
         b2:ad:d9:31:28:35:ef:27:c3:49:97:6d:6d:b0:63:5f:81:f1:
         06:c2:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:57:28 2025 by rpki-client