Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
File:                     06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft (raw, json)
Hash identifier:          Tuxao9mf0XKtkJRHynCHRqRkPugHO1OQLnvYjSn/xU4=
Subject key identifier:   9F:96:6E:D2:54:43:D1:EF:25:EE:3E:53:CD:9C:C5:C0:6F:A4:CD:E6
Authority key identifier: 06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Certificate issuer:       /CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
Certificate serial:       307F0D11CA2E9B7219E11AF9642933B13491B669
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
Manifest number:          D2
Signing time:             Thu 18 Sep 2025 01:36:52 +0000
Manifest this update:     Thu 18 Sep 2025 01:31:52 +0000
Manifest next update:     Fri 19 Sep 2025 04:40:52 +0000
Files and hashes:         1: 323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (hash: qEzv17rM+XES6/wodcNF76C7jyTtbPZB+LP3WCeG0JA=)
                          2: 34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (hash: CqLbBj0uT8K12+SQb9CTcXG1+amWQ68DH+TtD05xAIk=)
                          3: 323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (hash: 6MnbkBjo7czkhYq5sp9gBQAtXAcq+C4fouGkHFK6J2w=)
                          4: 34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa (hash: lY/EWRwcSasK752wLlf+0P9S37d6hT9Ev6TDPS9lrXU=)
                          5: 06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl (hash: 8ImFHtbovCzX/MqCQmtYDWX09p5Uv85/QbAtGsPqrfE=)
                          6: 323830343a346632343a3a2f33332d3333203d3e20323638333037.roa (hash: 1e/ZASVitsNt9uijDZpgaaQEjm1GPyXaw2VOWDq218Y=)
                          7: 34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa (hash: j927LaYZV83yuHe7zoP+Gcpy0fIwCpzgO8deimnVhvg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7f:0d:11:ca:2e:9b:72:19:e1:1a:f9:64:29:33:b1:34:91:b6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Validity
            Not Before: Sep 18 01:31:52 2025 GMT
            Not After : Sep 19 04:40:52 2025 GMT
        Subject: CN=9F966ED25443D1EF25EE3E53CD9CC5C06FA4CDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:e7:d1:57:62:5e:11:e7:84:c1:61:23:ef:
                    08:f9:1a:75:6f:3c:01:4e:3c:b3:e7:6c:6a:84:24:
                    4d:8d:2d:6e:d4:60:00:ae:db:9a:04:65:c3:d6:ad:
                    75:3a:41:1d:72:55:48:e3:ed:ea:a6:a1:08:3f:c5:
                    ea:33:8d:80:37:0b:43:73:6f:45:16:b3:14:ed:ce:
                    f6:22:40:51:75:f1:6e:7b:0c:ca:ac:c4:85:98:23:
                    3f:c5:c6:46:d6:7d:f3:f6:84:8f:1d:36:73:c7:5b:
                    cc:70:f5:0b:83:d4:7f:08:ab:f4:76:bd:63:5a:b1:
                    cb:3d:c0:cd:d2:22:51:c5:b3:6d:f8:51:ef:63:29:
                    18:e2:06:40:52:2f:26:d5:bc:37:09:4f:09:24:78:
                    59:63:bb:68:09:89:82:91:78:5a:b7:ca:65:47:f8:
                    c4:a2:db:8b:b7:df:d5:24:8e:02:1f:50:b8:fa:28:
                    d3:a1:20:ef:9d:d9:e8:51:49:fd:cc:8b:8c:33:0b:
                    6c:35:0d:fd:8b:ee:03:0c:da:11:13:bc:c9:4e:be:
                    78:2e:90:0e:ca:ae:2d:37:ee:08:0f:ce:8a:c4:33:
                    17:6a:40:d8:60:96:b0:68:de:05:4b:14:96:49:63:
                    b7:88:99:25:ab:ac:68:78:34:16:d6:1b:ad:3b:4d:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:96:6E:D2:54:43:D1:EF:25:EE:3E:53:CD:9C:C5:C0:6F:A4:CD:E6
            X509v3 Authority Key Identifier:
                keyid:06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:43:44:b0:e5:0c:1a:9c:48:6b:82:24:09:7f:d8:1d:16:
         ad:97:29:c2:9e:b1:ce:18:91:b1:52:e4:7a:7e:ae:95:1f:54:
         22:09:01:f7:cc:01:13:6b:18:a8:51:67:0d:2f:a7:00:48:65:
         06:c0:26:cc:e9:4c:02:31:e5:84:20:34:83:f9:76:c6:57:0b:
         1b:ba:14:d0:9a:23:29:70:b5:82:88:7f:16:c5:09:cf:fe:49:
         ea:54:89:97:70:ec:a2:4f:1c:a7:c3:f3:4b:a4:1c:f6:1a:4f:
         b4:7c:cc:cd:55:65:92:6a:87:5e:49:13:d1:ca:61:e0:6c:ad:
         55:ee:8f:a8:b0:a5:9a:02:83:d7:e2:1f:70:67:69:a0:4a:a7:
         28:9f:a7:03:72:e2:8d:e4:24:32:e1:cb:26:aa:ff:c9:07:67:
         40:93:2e:d3:b3:19:a1:b2:31:f1:ba:f0:0b:b7:c1:1e:98:a7:
         e2:05:3f:c7:e6:a2:4c:77:b6:16:39:06:de:ce:8e:ed:bb:fb:
         ff:97:e3:f3:ad:84:4e:3c:6d:0a:e1:c1:b6:50:f5:74:d4:0e:
         7a:7b:d7:23:e3:f0:87:f6:21:b2:6a:5e:ec:5e:94:c4:82:54:
         05:d0:29:48:47:f3:d4:4e:8a:1c:77:ae:92:40:56:da:94:3f:
         73:20:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:18:57 2025 by rpki-client