Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
File:                     06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft (raw, json)
Hash identifier:          Klvhp5yEGcJVJWmkFM7Z6swqZwfU+5XFSeNXsZsmpyY=
Subject key identifier:   E4:5D:49:6A:F7:C8:77:B1:2E:5E:66:F9:D7:E8:A6:71:AC:14:C2:4B
Authority key identifier: 06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Certificate issuer:       /CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
Certificate serial:       C47687406E67267F853BBC018A25507F9D402D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
Manifest number:          4C
Signing time:             Mon 09 Jun 2025 22:50:14 +0000
Manifest this update:     Mon 09 Jun 2025 22:45:14 +0000
Manifest next update:     Wed 11 Jun 2025 00:17:14 +0000
Files and hashes:         1: 06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl (hash: ZYOMpwg1AnA3Ne+1nB89neHNdtW03I6Y4hu9B0KzmW4=)
                          2: 323830343a346632343a3a2f33332d3333203d3e20323638333037.roa (hash: 1e/ZASVitsNt9uijDZpgaaQEjm1GPyXaw2VOWDq218Y=)
                          3: 34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa (hash: lY/EWRwcSasK752wLlf+0P9S37d6hT9Ev6TDPS9lrXU=)
                          4: 34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (hash: CqLbBj0uT8K12+SQb9CTcXG1+amWQ68DH+TtD05xAIk=)
                          5: 34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa (hash: j927LaYZV83yuHe7zoP+Gcpy0fIwCpzgO8deimnVhvg=)
                          6: 323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (hash: qEzv17rM+XES6/wodcNF76C7jyTtbPZB+LP3WCeG0JA=)
                          7: 323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (hash: 6MnbkBjo7czkhYq5sp9gBQAtXAcq+C4fouGkHFK6J2w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 00:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c4:76:87:40:6e:67:26:7f:85:3b:bc:01:8a:25:50:7f:9d:40:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Validity
            Not Before: Jun  9 22:45:14 2025 GMT
            Not After : Jun 11 00:17:14 2025 GMT
        Subject: CN=E45D496AF7C877B12E5E66F9D7E8A671AC14C24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:9b:d0:14:b1:a1:31:0f:2e:de:5e:70:24:
                    59:91:b3:c2:cd:84:21:f1:6f:7e:6b:79:4e:4b:e1:
                    5f:01:b2:81:c8:92:e2:6f:54:45:33:9b:43:ff:b8:
                    f6:5e:23:17:ca:66:b9:09:80:14:ee:fc:02:34:7d:
                    76:43:61:d2:42:da:c1:51:21:4a:b6:e4:6f:89:4b:
                    d7:50:29:25:c5:3e:1c:cf:45:d8:22:79:0e:74:fd:
                    d0:b0:e4:f1:a1:67:02:66:89:de:cc:90:48:0f:f7:
                    52:74:53:05:1c:29:de:e4:08:2f:1f:1f:7a:c0:40:
                    c7:b9:32:db:27:d0:e2:25:5c:fb:42:12:89:80:90:
                    a4:2e:df:22:26:ca:32:72:ff:dd:05:75:ba:11:f4:
                    27:1b:9b:0e:63:27:af:38:f4:4e:37:c2:b8:a9:d9:
                    5e:a5:df:66:8b:59:74:34:43:60:45:ac:8e:d5:40:
                    f8:df:26:b2:9d:e5:1e:e2:db:20:28:d8:17:3a:e4:
                    74:88:0c:0b:bc:03:ba:03:4b:85:5d:fb:b2:73:4e:
                    d3:7e:a0:94:c1:ee:79:f7:8a:29:01:61:6c:44:ad:
                    31:1c:90:91:d1:a4:63:78:22:42:a0:9f:c2:7f:34:
                    d4:4b:14:07:c0:ef:61:30:69:be:99:39:8e:94:f9:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:49:6A:F7:C8:77:B1:2E:5E:66:F9:D7:E8:A6:71:AC:14:C2:4B
            X509v3 Authority Key Identifier:
                keyid:06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5f:d7:9a:78:8f:62:fb:c7:45:18:7b:55:d8:77:eb:6c:9d:
         53:a6:bd:75:a0:28:9d:63:79:51:40:5a:f1:42:6a:49:59:9a:
         77:ed:dd:b9:65:e2:2f:1c:ea:7d:2d:5f:81:64:9c:1c:c1:a5:
         9e:b5:ff:4c:dc:9b:7e:20:5e:9c:19:bf:fc:c9:e7:e4:f0:de:
         35:c0:8c:48:32:f9:6c:9a:50:45:f4:38:5c:99:4b:ef:89:4a:
         01:ac:4f:7b:58:02:73:98:ce:b2:55:d7:24:0c:51:21:8b:20:
         76:0d:8d:76:ec:68:3e:e9:de:53:dd:41:44:07:06:9f:6f:bd:
         16:71:61:b4:b9:9c:01:d1:a6:cc:50:b8:0e:7c:5f:e3:c4:59:
         34:54:01:71:dd:37:54:b9:c0:44:85:d5:da:39:bb:8d:83:1f:
         61:29:85:ac:8e:c9:f6:39:a0:29:4d:6a:6f:f8:e5:03:aa:f1:
         b3:6b:0d:1d:fe:4a:d5:97:15:17:f9:b9:e1:6f:06:a4:83:3d:
         3d:bb:45:35:b1:ed:e5:ec:ec:ad:55:6a:07:82:59:10:5f:65:
         a4:dd:06:35:95:b3:c8:55:de:10:6a:7c:f4:15:0a:d2:c4:0d:
         7b:af:d8:c7:ef:4d:27:e4:91:e8:86:12:f0:99:16:38:07:19:
         bc:85:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:50:39 2025 by rpki-client