Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
File:                     98BC0C92855F76759D28CD06035C9FF965BDF09F.mft (raw, json)
Hash identifier:          7RlWDROUiROnpMl+Qvl7KykD8AJgMU1s6CzI5dH2g7A=
Subject key identifier:   56:67:06:D6:F4:1C:C1:93:41:7D:7D:22:BF:87:03:6D:29:B3:6A:02
Authority key identifier: 98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F
Certificate issuer:       /CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
Certificate serial:       05C50CF21C7339B29C8A083F7ED7F5056EF98E2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
Manifest number:          0123
Signing time:             Mon 09 Jun 2025 12:11:00 +0000
Manifest this update:     Mon 09 Jun 2025 12:06:00 +0000
Manifest next update:     Tue 10 Jun 2025 13:42:00 +0000
Files and hashes:         1: 98BC0C92855F76759D28CD06035C9FF965BDF09F.crl (hash: lzljaqA1tl78Nbb7whWRiO9gii8OX8nJy0M7UUOih7U=)
                          2: 34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (hash: PsgThCLroLywOCmAZGMu60/OQDUDMO0uP5mQIiFY8n0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl
                          rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 13:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c5:0c:f2:1c:73:39:b2:9c:8a:08:3f:7e:d7:f5:05:6e:f9:8e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
        Validity
            Not Before: Jun  9 12:06:00 2025 GMT
            Not After : Jun 10 13:42:00 2025 GMT
        Subject: CN=566706D6F41CC193417D7D22BF87036D29B36A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:48:52:c8:d5:8e:bb:72:8d:29:8b:21:82:
                    ea:02:58:59:db:1e:b0:1f:02:14:53:89:86:94:09:
                    30:a8:28:f0:ef:21:e8:94:80:81:16:88:50:a5:7f:
                    cc:d2:40:67:3b:28:48:b6:0f:17:3e:e3:d5:2b:d6:
                    74:1d:59:3c:d1:e5:77:c0:f5:05:1c:65:60:ed:2d:
                    e7:ac:ab:a9:9d:16:15:28:a2:c1:6d:53:d8:2c:39:
                    34:d5:f1:36:f4:fc:ac:34:a1:16:66:d3:03:2c:d6:
                    31:cd:fe:2d:1b:79:17:e6:46:ef:85:d0:67:0f:df:
                    f4:88:8e:97:1a:68:f7:00:34:d7:0b:d2:e3:fd:d1:
                    b4:fe:4f:40:43:c2:72:3d:16:bd:7c:03:35:68:2f:
                    e8:e2:93:22:88:65:75:83:22:b3:2f:bc:2b:fb:82:
                    48:90:c2:47:aa:ba:8b:5e:86:14:98:a6:f8:7e:1e:
                    af:c1:16:4d:2d:7e:8c:7c:7a:96:72:c7:bf:1b:a0:
                    1d:c5:9a:7d:0c:01:04:17:32:09:b2:99:63:69:df:
                    f8:5b:ae:04:7b:12:3c:22:6a:49:41:7e:d2:9f:f4:
                    e6:2e:3e:53:63:5e:e1:c8:ef:32:c8:c7:37:58:1f:
                    3c:d2:5d:a9:d7:df:11:43:7e:fc:05:b1:2c:2b:5b:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:67:06:D6:F4:1C:C1:93:41:7D:7D:22:BF:87:03:6D:29:B3:6A:02
            X509v3 Authority Key Identifier:
                keyid:98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:89:f3:40:c6:be:0a:e8:30:7a:1e:d4:97:8e:75:eb:ca:5c:
         f2:d3:8e:4b:53:13:5f:9b:ca:e9:bc:ec:a2:e7:3d:f9:94:71:
         af:d3:93:17:a1:ed:d5:85:3e:cf:cf:8c:fb:dc:86:46:8f:41:
         14:10:39:94:60:b7:b7:c6:3d:da:1d:f3:49:4b:55:79:23:5b:
         d9:cf:92:3d:c8:00:f6:ee:4c:25:92:2e:75:6b:3f:49:32:b2:
         f3:17:d6:a5:ab:46:48:0a:be:57:69:bb:8c:4b:3e:7e:36:83:
         5c:dd:12:ea:19:c7:bc:5d:44:1d:be:b3:c6:5c:9c:99:a0:7a:
         09:ac:59:d0:a1:e5:d4:1e:0d:b3:58:7c:42:4f:85:de:92:11:
         ea:60:5a:d2:29:4b:fe:f8:31:b0:22:fc:29:d1:b8:23:03:ba:
         97:e1:84:43:68:42:88:79:9d:b6:0a:7f:c1:d6:6f:8a:e6:91:
         24:11:a3:c9:fe:f1:85:dd:7e:38:54:50:21:36:c6:fb:36:eb:
         19:06:35:b9:a8:5c:80:64:72:75:ea:fc:f9:df:2e:01:9e:fb:
         a3:d9:4a:38:a6:c0:29:64:db:94:3f:18:50:50:63:4e:58:63:
         37:08:9e:d7:e0:5e:53:bd:8a:ed:ac:02:4d:47:d3:f0:9b:08:
         51:32:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:18:22 2025 by rpki-client