Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
File:                     864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json)
Hash identifier:          9eknt1FB5oip/XSah0N7F/QjQHDHz6j8CT5hZnrS3PA=
Subject key identifier:   16:C9:FE:A1:D7:05:53:05:92:26:4D:41:83:ED:7D:AA:65:E6:5D:7C
Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
Certificate issuer:       /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Certificate serial:       787EA11815873FEDD27A7D3B7E7E4DFA4ACB387B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
Manifest number:          AB
Signing time:             Thu 12 Jun 2025 00:43:57 +0000
Manifest this update:     Thu 12 Jun 2025 00:38:57 +0000
Manifest next update:     Fri 13 Jun 2025 03:01:57 +0000
Files and hashes:         1: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: e1XjvkH2G61dqhOHqc4pF2YHXIhwmms0v4hSF8s9XzI=)
                          2: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: 3p01uLjLMlb5jl/5BJ7VeHmgt6APgPiqCPBrsSEosVw=)
                          3: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=)
                          4: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: U2X+DNMG/Bb1Kgy1CKCKBiUdZyIh3tpWZrlBBVlp8/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl
                          rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 03:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7e:a1:18:15:87:3f:ed:d2:7a:7d:3b:7e:7e:4d:fa:4a:cb:38:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
        Validity
            Not Before: Jun 12 00:38:57 2025 GMT
            Not After : Jun 13 03:01:57 2025 GMT
        Subject: CN=16C9FEA1D705530592264D4183ED7DAA65E65D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:3b:f1:7d:0f:d0:d4:4c:49:b4:9d:b9:2b:
                    a4:b2:35:55:ea:e9:76:21:18:9c:a3:9e:45:52:11:
                    91:b8:90:88:35:ee:48:68:2c:6a:83:15:46:ff:a2:
                    cb:44:5c:ab:81:a7:e5:89:d7:49:b4:39:fa:05:45:
                    52:73:7a:f4:f8:5d:08:3d:81:f2:3e:35:73:4f:69:
                    61:fc:d0:8e:ea:22:cd:80:b4:81:e0:79:3a:af:f6:
                    3d:69:21:e2:e4:21:9f:ea:e4:eb:ab:c8:fd:52:d6:
                    0d:d6:30:f4:ec:e2:30:6b:95:97:69:aa:f3:67:cc:
                    ea:2f:49:aa:d7:7b:f6:7f:38:2a:7a:eb:08:c5:d8:
                    c2:bc:34:4a:ae:5b:94:0b:a8:02:c8:39:e0:30:89:
                    0a:8c:aa:a3:6e:84:9d:db:63:54:4b:36:9f:47:78:
                    75:46:36:5e:a2:da:5d:1f:3d:42:7a:4b:72:27:d8:
                    f9:82:a1:1c:e9:db:d0:c1:21:b2:85:85:a6:f0:f8:
                    44:39:79:14:dd:f8:ba:74:f3:84:b9:e3:02:0a:8e:
                    80:83:a1:6a:0e:89:30:9d:dd:9d:e4:06:fc:bb:ff:
                    f8:3c:3d:7c:64:78:ea:53:95:5e:d1:8b:7d:91:b3:
                    a8:82:db:21:84:5c:9a:76:cd:85:99:69:14:3c:6d:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C9:FE:A1:D7:05:53:05:92:26:4D:41:83:ED:7D:AA:65:E6:5D:7C
            X509v3 Authority Key Identifier:
                keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9d:98:ab:3e:93:43:d7:b4:ee:44:87:93:95:db:b6:80:69:
         5c:4c:b3:fe:ae:b1:2f:1c:14:2b:48:52:53:cb:b8:48:6d:32:
         f5:5b:cb:ce:16:22:b8:e7:ba:f9:23:ef:2a:38:26:33:b0:c0:
         0e:40:af:1a:4c:36:58:1e:38:16:da:0d:78:73:fa:d5:c4:89:
         ea:2d:12:4a:0c:f3:0e:66:81:b8:f4:64:cf:94:c0:61:82:d0:
         13:e2:50:61:9b:54:d4:63:8c:49:16:86:ff:b1:50:3b:91:5a:
         f5:c8:c4:2d:ad:e4:ff:64:89:2c:c1:24:97:61:c9:d5:93:4a:
         b4:19:5f:80:d0:b0:7c:d8:54:ae:5d:a2:2d:63:20:72:08:be:
         7b:ac:6c:ba:99:04:9b:4d:36:1f:25:64:13:43:59:ce:ad:00:
         da:f4:0d:4b:82:92:31:23:48:d1:65:75:71:d2:94:2a:7d:60:
         95:61:96:b7:bf:ff:e3:c9:77:cc:ce:ca:cd:aa:ff:96:b8:c9:
         5c:dc:3a:f9:56:97:94:98:f7:e6:ef:30:cd:a2:ea:cd:8e:d7:
         09:2f:c2:7a:9d:94:e9:87:e4:af:19:3a:d9:51:01:10:26:17:
         1a:d3:2d:cf:52:25:51:e4:c2:df:04:c0:97:f6:4d:0f:5f:b9:
         82:bb:42:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:29:03 2025 by rpki-client