Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
File:                     87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft (raw, json)
Hash identifier:          avCYGSIExGlw38+7YKScrar85ygWPR42oS3VVKAYWMU=
Subject key identifier:   F9:B8:AC:41:BF:20:37:1C:74:A6:E7:C5:95:EB:98:51:E8:8A:70:97
Authority key identifier: 87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29
Certificate issuer:       /CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
Certificate serial:       1853FF64DFC7A5376D4A34E7A04208595295AE70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
Manifest number:          0231
Signing time:             Sun 08 Jun 2025 18:01:25 +0000
Manifest this update:     Sun 08 Jun 2025 17:56:25 +0000
Manifest next update:     Mon 09 Jun 2025 19:01:25 +0000
Files and hashes:         1: 87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl (hash: VgW6TBNENO6bTaP/O6mhWEPge+M1+vggxOW0GZcIR9Q=)
                          2: 323830343a386639343a3a2f33322d3430203d3e20323733343939.roa (hash: dRrkcU6DKtPX/khP0O/WGga3UHvPMwxgO8xn/K1yGVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl
                          rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:53:ff:64:df:c7:a5:37:6d:4a:34:e7:a0:42:08:59:52:95:ae:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
        Validity
            Not Before: Jun  8 17:56:25 2025 GMT
            Not After : Jun  9 19:01:25 2025 GMT
        Subject: CN=F9B8AC41BF20371C74A6E7C595EB9851E88A7097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:8d:65:44:ea:50:23:6d:9e:f3:32:5b:27:
                    81:21:ee:14:fd:81:5a:4e:7f:cc:d2:e6:4b:21:c6:
                    db:8e:35:e5:85:31:f9:13:6b:91:cb:39:7f:b5:07:
                    cb:c8:fd:83:54:10:60:45:cd:f1:c1:c4:68:2f:42:
                    66:84:f6:dd:dc:8f:05:fe:6e:df:a7:c2:8e:05:04:
                    17:fa:e3:65:a0:04:8c:8c:c4:7b:cc:b9:d6:68:b3:
                    d2:1f:49:c1:45:52:dd:40:10:9c:f8:96:7c:dc:71:
                    55:4e:2c:e0:cb:4a:32:ff:ad:0e:f8:6b:50:27:fc:
                    0b:2e:fd:99:92:2d:a6:57:22:2b:ed:e6:dd:bf:b7:
                    0d:9a:0e:19:16:61:21:f1:03:00:61:39:75:0b:03:
                    d7:12:e6:85:5f:b3:b8:c4:14:36:70:59:95:c7:70:
                    3c:f3:0e:db:6d:8e:1c:58:43:6c:52:80:7d:ea:02:
                    bf:b3:a6:ab:67:f3:9b:41:c9:78:46:16:8b:3a:9b:
                    d5:4d:28:e6:c9:58:09:1b:a0:a9:ff:cb:49:c5:fa:
                    f4:34:65:40:4a:a1:a5:d0:2f:d4:f6:b8:7e:fa:de:
                    50:9c:29:57:12:cb:00:be:e0:a8:ef:db:20:fc:cb:
                    aa:f7:bd:0e:df:61:1e:97:ee:97:f6:3e:09:69:e6:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B8:AC:41:BF:20:37:1C:74:A6:E7:C5:95:EB:98:51:E8:8A:70:97
            X509v3 Authority Key Identifier:
                keyid:87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:c6:45:bb:e9:cc:69:e0:82:5d:f2:bf:30:3f:15:c3:8f:
         fb:b0:0c:ba:48:b3:47:2f:17:a8:63:62:6a:07:85:94:24:c6:
         32:7d:26:60:37:c6:7d:1f:db:d9:a3:06:e4:cb:3f:80:f3:70:
         09:29:52:fa:99:9c:bd:5c:6e:79:15:a0:b4:19:d0:a7:51:79:
         4f:7b:51:95:aa:db:96:79:5a:36:96:fb:26:0b:cd:3e:0e:25:
         cd:98:39:b4:7f:09:7f:d7:b9:dd:07:31:3f:55:d1:e8:d9:e4:
         9d:31:d4:56:05:a5:68:dc:33:ee:69:a3:19:8d:0b:47:68:21:
         41:70:4d:12:4e:af:ab:a1:1a:80:cb:9a:ac:a1:97:81:de:82:
         e3:39:d7:a1:e6:93:18:d9:60:51:f4:77:48:dc:42:f3:9a:bf:
         ae:fa:53:d0:84:5c:36:99:87:00:91:6a:85:7c:36:5a:19:b3:
         67:ea:45:de:a4:c7:0e:86:33:4a:da:32:65:39:0a:36:c0:61:
         ab:36:9d:1a:38:56:25:ce:42:f4:da:7d:f2:b9:3b:84:c9:2a:
         18:5b:eb:72:02:82:dd:cc:89:29:93:c8:9b:a8:03:5e:86:21:
         2f:af:4b:40:6c:36:e6:e9:d7:d1:97:22:89:ed:2a:27:29:de:
         fd:6f:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:39:42 2025 by rpki-client