Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
File:                     35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json)
Hash identifier:          674DZzWKehdtt2I7NkVyY2ufpJA2Jyx7w5qebDplz6c=
Subject key identifier:   0A:B9:97:AB:08:70:88:75:46:B8:4F:10:87:F6:9A:30:45:1A:38:F5
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Certificate issuer:       /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial:       5D68119279D3B2928EE2526AA1F2AD02BBE9ABA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
Manifest number:          0245
Signing time:             Thu 12 Jun 2025 17:25:22 +0000
Manifest this update:     Thu 12 Jun 2025 17:20:22 +0000
Manifest next update:     Fri 13 Jun 2025 21:03:22 +0000
Files and hashes:         1: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: GwnqcNRJx2A0F2Gj14FA9208AF3YFPut0c5a/7c1AzY=)
                          2: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: 8/RYnsvG5o8e8mVXICeObu4r9QuNXa3bI0L8JgshNVw=)
                          3: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: kx+etqCWv+jCRD5YXNaXPU45mCg6XbJHOXS5bFWX/Zs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
                          rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 21:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:68:11:92:79:d3:b2:92:8e:e2:52:6a:a1:f2:ad:02:bb:e9:ab:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
        Validity
            Not Before: Jun 12 17:20:22 2025 GMT
            Not After : Jun 13 21:03:22 2025 GMT
        Subject: CN=0AB997AB0870887546B84F1087F69A30451A38F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:7b:89:f1:ed:3a:f7:af:63:82:bc:c8:ed:
                    5e:ed:c7:22:aa:cf:79:b9:d1:0d:74:ee:e0:78:0a:
                    67:5b:e3:ff:3c:4d:5f:c1:82:33:09:d0:e9:3e:32:
                    9d:1d:1b:10:ab:78:55:68:69:37:84:00:d8:e0:8d:
                    4d:33:d2:4b:56:86:96:79:71:79:6d:79:45:e7:c7:
                    e5:be:15:98:83:dd:2f:08:3c:37:0f:b6:f8:94:5b:
                    0b:06:31:ae:8f:26:db:18:6f:97:57:2a:77:34:49:
                    d0:27:83:98:02:39:33:c6:55:06:6f:c9:d4:70:48:
                    6d:3c:d9:2a:f3:3b:3d:0a:51:b5:56:7f:af:45:fe:
                    6b:2b:55:b5:b5:d3:8f:35:dc:0f:b0:72:7f:cf:25:
                    41:8c:eb:1a:b2:17:ba:28:e9:80:33:81:9d:5e:16:
                    92:31:0b:f7:6f:b1:bb:95:b0:03:b4:c2:90:b5:e6:
                    68:8b:08:65:33:b7:91:a3:c0:5b:23:5e:39:d3:d3:
                    36:b7:d2:6a:62:93:02:01:a4:bb:7e:8c:d8:9b:24:
                    ad:97:3f:a6:20:96:83:b6:85:4c:83:51:fb:e7:37:
                    38:2b:d8:70:0a:87:09:77:c4:9c:34:33:07:84:88:
                    88:b5:2e:74:5c:86:a3:8b:05:42:ea:31:64:79:9e:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B9:97:AB:08:70:88:75:46:B8:4F:10:87:F6:9A:30:45:1A:38:F5
            X509v3 Authority Key Identifier:
                keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:df:55:92:19:7c:55:04:6c:f0:eb:aa:db:e7:31:64:37:2a:
         7b:18:61:5d:ee:10:ed:20:a7:e5:9a:22:4f:25:4b:47:bc:2e:
         df:32:57:da:f3:85:33:a2:e6:66:dd:f0:27:04:79:e8:3d:61:
         ce:13:54:d3:7d:6b:e4:21:09:05:c8:b0:6a:79:8d:f1:67:a5:
         2f:6e:fc:10:8b:17:f7:dd:72:63:e6:25:b1:2a:65:02:8b:93:
         0f:15:5c:15:a8:88:58:27:52:b8:47:55:cb:40:c5:5f:d4:43:
         ba:52:a7:7b:bf:ed:89:eb:0e:0c:60:be:2f:77:79:10:81:cf:
         d7:3e:c2:64:ad:be:44:93:cd:46:d3:8c:e4:76:72:49:31:6d:
         0b:d3:89:ea:d1:fe:33:ca:2d:19:56:fc:70:d4:a2:18:60:44:
         de:ec:a8:1e:ac:ca:8f:61:37:52:8b:15:bd:a0:fc:13:01:1d:
         88:9b:ce:67:ed:ad:4f:4f:0e:48:52:12:64:8b:ff:1a:93:68:
         38:76:00:02:fd:6e:bd:3a:c8:3c:76:61:ca:15:71:2b:9a:e0:
         62:67:36:2f:cc:8c:d1:b9:d1:0b:3f:5b:95:21:12:c2:f4:ca:
         bf:60:40:39:38:08:1b:3d:98:b2:0c:ba:a7:e8:4e:fc:17:9c:
         2c:97:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:45:09 2025 by rpki-client