Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          KJRNcu3FfWL76liU1/dMEBTXIYLJnZVS7dzKfo/OUmA=
Subject key identifier:   EC:5B:56:D6:1F:EE:F4:C2:54:26:81:4F:09:76:64:49:B4:B9:A0:C6
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       2A4BF42246F31D6E541B857F92ED00B2DEC91F9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          01E8
Signing time:             Sat 05 Apr 2025 08:51:30 +0000
Manifest this update:     Sat 05 Apr 2025 08:46:30 +0000
Manifest next update:     Sun 06 Apr 2025 09:45:30 +0000
Files and hashes:         1: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: Ep6iqF3tVRcneRxhiGqjfcpaHusW5adlREw2Q0PJE6A=)
                          2: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=)
                          3: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: MszXxChKZIxqO1H76aI8EC2vVoyHxziN2kG99kubgms=)
                          4: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM=)
                          5: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: CfOnRF4j6DfohH6BFHRKC5zu5+rSa0Rfv661CHSNmXE=)
                          6: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=)
                          7: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=)
                          8: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: o/aOBYWzoNM2ezTPVUmL9FfbjqSHXnYykvoAEekZKlg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:f4:22:46:f3:1d:6e:54:1b:85:7f:92:ed:00:b2:de:c9:1f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Apr  5 08:46:30 2025 GMT
            Not After : Apr  6 09:45:30 2025 GMT
        Subject: CN=EC5B56D61FEEF4C25426814F09766449B4B9A0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:a7:5a:9e:a7:03:09:03:e1:ef:45:01:b6:
                    39:6d:1e:a2:76:d9:c6:66:02:a4:74:8a:42:c9:a0:
                    ed:00:88:d2:6e:97:f2:26:30:3d:18:9f:58:3b:d3:
                    d3:43:ec:c4:2d:fd:b0:1e:39:f6:6f:e9:ff:90:cc:
                    4e:8c:eb:1e:01:4a:49:a3:dd:7f:08:f4:99:a9:1f:
                    e4:69:c4:fb:fa:f4:c9:88:9a:6c:45:56:e3:64:73:
                    10:8c:7f:ff:94:21:d3:29:f2:f7:fe:f3:19:11:64:
                    a7:28:9a:a5:c0:b3:7e:56:f6:e1:b8:2b:40:bf:fd:
                    11:99:8c:7d:18:b5:88:27:50:af:1e:e2:d6:69:7e:
                    a3:cf:39:eb:ed:21:09:5a:37:62:ff:27:db:f0:92:
                    7c:69:b8:5f:cd:fa:d2:89:f6:cd:d0:bb:cd:4b:12:
                    cc:cd:f9:7a:6d:f6:45:ce:c6:de:5b:d1:f4:1b:36:
                    71:c4:66:92:a0:07:74:8b:e9:ff:42:77:da:26:bc:
                    c6:07:11:3e:8f:df:65:a8:63:da:87:c3:24:3d:73:
                    1a:ea:4b:0e:78:86:09:b5:76:c5:f4:b8:ad:2d:67:
                    d5:94:e5:5e:56:e0:b8:00:a0:7e:cb:bb:ed:72:24:
                    66:50:44:5b:ae:bd:39:74:dd:9f:23:c4:16:d7:b4:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5B:56:D6:1F:EE:F4:C2:54:26:81:4F:09:76:64:49:B4:B9:A0:C6
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0f:e3:ff:b4:66:36:60:9e:2b:8b:29:46:48:b4:3f:08:fc:
         1d:9e:48:12:ef:2f:1c:5b:49:ec:0d:33:e1:10:d1:ba:8f:84:
         98:3a:8d:3d:37:f7:b4:15:9e:71:ac:ef:03:e0:94:38:f8:43:
         b9:cc:be:04:8e:5f:3d:10:99:16:a1:45:48:bc:2f:db:0e:e8:
         f2:f3:8e:b7:c8:38:e1:b7:2e:f9:69:e3:40:80:e2:22:d2:14:
         60:89:96:21:47:59:50:a1:dd:63:64:f6:f2:ff:aa:8b:23:68:
         61:00:5e:ed:5f:13:ac:1d:21:4e:92:15:a7:be:de:65:00:90:
         a2:ba:91:e8:52:a1:b8:47:67:b0:9b:5c:b4:4b:52:6d:2b:8e:
         5e:4c:1a:62:e4:61:14:6f:90:73:e9:8e:41:16:78:7b:88:6d:
         02:92:cd:fc:aa:68:dd:e0:84:c0:b4:d7:74:16:aa:ed:5d:de:
         fc:58:fe:f1:3a:a2:ae:af:ae:df:9b:6e:70:eb:0a:c3:3b:0b:
         9d:34:ae:e1:be:d5:3b:59:f1:cb:ac:dd:cd:c8:ec:f0:a6:6c:
         ab:0f:80:d1:40:f8:83:09:6d:8b:a8:72:08:31:0f:9a:30:4c:
         31:99:71:32:27:6e:f9:3a:f3:9d:5c:5f:f4:3c:ee:b4:d2:de:
         7b:0c:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:59 2025 by rpki-client