Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          MAGaOpmNAfpAEN9pacGnWTmL2oKQ7ZPsV2Ifp4nrESo=
Subject key identifier:   09:98:DD:68:53:A4:A2:89:31:DF:53:2B:05:AC:A6:8D:7D:F1:A5:3F
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       65AAE7E96F332B6A34C37BF6336A1C4E1ACE9BCA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          023D
Signing time:             Sun 08 Jun 2025 10:21:27 +0000
Manifest this update:     Sun 08 Jun 2025 10:16:27 +0000
Manifest next update:     Mon 09 Jun 2025 14:06:27 +0000
Files and hashes:         1: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: 4Zp8MGHrr+ZlvzuSdmGrr01Q7JDmfDsb+0yvZRLZXL4=)
                          2: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: CfOnRF4j6DfohH6BFHRKC5zu5+rSa0Rfv661CHSNmXE=)
                          3: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: MszXxChKZIxqO1H76aI8EC2vVoyHxziN2kG99kubgms=)
                          4: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: o/aOBYWzoNM2ezTPVUmL9FfbjqSHXnYykvoAEekZKlg=)
                          5: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=)
                          6: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=)
                          7: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=)
                          8: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:e7:e9:6f:33:2b:6a:34:c3:7b:f6:33:6a:1c:4e:1a:ce:9b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Jun  8 10:16:27 2025 GMT
            Not After : Jun  9 14:06:27 2025 GMT
        Subject: CN=0998DD6853A4A28931DF532B05ACA68D7DF1A53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:c2:ae:cc:f6:45:3f:02:8b:a8:fe:c2:37:
                    e0:88:ba:b9:5a:9f:62:71:1c:f0:e2:13:e5:24:3e:
                    10:fb:dd:2b:03:da:b5:6b:f4:e6:c2:7d:91:6e:77:
                    0d:4f:99:4e:4c:eb:8e:00:8f:c5:fb:75:ba:01:ad:
                    45:9d:1f:e5:73:3a:f3:3f:c8:69:a1:67:b2:80:55:
                    7c:70:4b:64:67:42:f5:5e:70:62:dd:38:7e:8d:d8:
                    6a:f9:e5:1a:7d:2a:be:a1:85:19:78:56:e8:0b:34:
                    19:22:90:68:9f:15:e9:58:c1:f9:ca:1b:73:e2:f2:
                    81:6c:d1:47:aa:10:27:a2:55:0b:61:46:30:b4:2a:
                    0f:b2:63:71:45:a3:5d:90:d6:d7:47:f9:0b:01:6a:
                    99:a5:a0:77:12:f7:f4:65:1e:2a:c8:14:0e:a7:44:
                    71:b5:7f:b9:a4:65:1a:75:41:50:5b:41:ef:42:1a:
                    59:cb:b8:b8:b8:91:4e:fd:32:a0:fb:cb:7e:09:b2:
                    a9:ee:ea:84:e6:96:57:89:90:76:c7:0e:48:a8:04:
                    f1:d4:75:c6:e1:2d:1d:23:0e:a3:6b:5e:25:0d:81:
                    80:f0:eb:4a:ba:3c:dc:33:a3:d0:2e:f3:2a:1f:7d:
                    78:a8:5c:6d:a6:af:c4:0e:88:6f:67:62:b9:1f:10:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:DD:68:53:A4:A2:89:31:DF:53:2B:05:AC:A6:8D:7D:F1:A5:3F
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:fb:26:93:7f:5e:df:5e:b1:10:b0:93:18:84:84:26:ae:a9:
         22:ee:1e:1f:0f:1c:48:89:ab:f4:25:b6:bb:9f:c1:b2:73:c2:
         59:72:7a:53:3e:8b:c7:0a:7e:db:7a:04:fd:b7:20:b9:7e:be:
         9c:3c:67:9a:61:60:98:78:fa:2a:56:86:a2:18:d7:47:6d:f1:
         4b:72:76:50:25:ae:0c:e0:c5:15:60:b1:88:c2:a8:66:9d:ed:
         65:ca:f7:45:ff:8c:6b:e9:78:12:41:6d:29:68:e6:0c:51:03:
         a7:b9:1a:52:68:a7:1a:c8:6e:43:2e:b4:cf:4b:de:c9:49:aa:
         19:88:48:04:4b:d0:77:a8:4c:42:d9:83:12:76:cf:1a:a0:85:
         fa:9c:ba:20:4c:69:17:31:35:7a:0b:c6:44:5a:05:0f:9e:25:
         b9:0a:1e:57:c0:4c:ed:68:31:48:a8:e4:bd:e9:4c:10:8d:8a:
         2a:41:97:d5:ab:b4:b9:54:63:68:6d:98:4f:c0:b3:f1:bd:d4:
         a2:f7:ea:ca:a2:1c:08:0f:da:df:c3:91:96:fd:c2:8a:9d:11:
         d6:e6:85:54:ae:e6:eb:2f:72:19:a3:fd:38:12:6d:be:39:01:
         77:25:ca:79:4e:92:85:73:6f:ab:9c:a5:38:04:10:5e:b7:9b:
         b7:57:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:20:09 2025 by rpki-client