Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
File:                     58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft (raw, json)
Hash identifier:          YEgBeBeg1tJV43okBBfEOT+cYlvq2rydYrX3QgPN1+U=
Subject key identifier:   69:B6:06:73:76:BD:D8:87:F3:CF:DF:92:85:86:F1:1D:2E:22:27:06
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Certificate issuer:       /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial:       135AEB764EA7D8633E240E8462C0DD7221A7581A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
Manifest number:          0283
Signing time:             Mon 28 Jul 2025 19:00:02 +0000
Manifest this update:     Mon 28 Jul 2025 18:55:02 +0000
Manifest next update:     Tue 29 Jul 2025 22:54:02 +0000
Files and hashes:         1: 3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa (hash: 7aOz+w3xh/vQfWkq3CR+i6MPO1ooiQlR1tcsgc8jFHY=)
                          2: 3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa (hash: szNNtCNnjsORqs6P6lequjtDSRNgzjx1EHAehu47jc0=)
                          3: 3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa (hash: p7CnfzytcgcHXs5zf6jbP7AYnuJHNlfWJANH/i5HJzA=)
                          4: 3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa (hash: sj2JtpNhGu9/ztHVKdkWqSNViNVqzCX3obxZMGRf8I0=)
                          5: 58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl (hash: hWVM4WpucIfjrN6zb4yf6FjigW1orpnDUTkzLlCNeY0=)
                          6: 3137372e36362e3135322e302f32342d3234203d3e20323632343939.roa (hash: pCX4r+zPvwDy1mFVwWyz1e+IEoH318PNLvcLzFXKOHU=)
                          7: 3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa (hash: Oq1Gl544c3jQF5Ot3+46X+ciHFxFoKXBs5JSWAsjqcg=)
                          8: 323830343a3836303a3a2f33322d3332203d3e20323632343939.roa (hash: d6OdgEEtIa5bGHHXjt6Kdu1OjM8gDrTnz7mzpXDsx+o=)
                          9: 3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa (hash: SXqNZDQVkOYnhirJ+le7mTwCQqPy4Nbg4Z5FSElxc/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
                          rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 22:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5a:eb:76:4e:a7:d8:63:3e:24:0e:84:62:c0:dd:72:21:a7:58:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
        Validity
            Not Before: Jul 28 18:55:02 2025 GMT
            Not After : Jul 29 22:54:02 2025 GMT
        Subject: CN=69B6067376BDD887F3CFDF928586F11D2E222706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:06:6e:e8:99:e3:01:55:3d:02:8b:d6:67:
                    af:ba:c1:40:14:10:9f:ac:5f:d5:59:2c:60:f6:ce:
                    0a:b7:ee:c3:35:32:78:be:df:a6:49:0a:49:80:95:
                    87:3a:b5:77:92:72:3f:e6:83:2f:ce:d3:2a:ef:34:
                    6d:59:c2:f3:24:9b:27:00:77:ad:6a:a8:28:fc:e7:
                    a3:3a:f6:6a:31:9c:9c:c2:3f:ba:3b:f8:52:c5:95:
                    de:f3:d0:1c:52:2f:30:45:3f:b4:a8:d6:e4:e5:5f:
                    66:73:13:a5:bb:34:e2:97:55:27:02:07:23:da:a1:
                    6e:4b:ef:c4:ce:b0:79:09:b4:d5:02:a7:3c:96:6c:
                    32:91:09:86:a6:1e:55:1d:20:20:62:25:68:7e:df:
                    f8:6c:91:34:f7:ba:f2:2b:fb:f0:8e:43:ae:a7:3f:
                    04:24:11:12:a5:bb:74:5a:22:80:76:59:04:c1:49:
                    43:1c:10:61:1e:d1:e1:f6:a5:c9:d7:8d:76:4d:42:
                    18:e5:66:f4:23:7f:e7:da:8e:67:8d:45:ad:f9:64:
                    d9:da:93:89:d0:a0:09:a7:d9:a7:59:c3:a8:52:8d:
                    65:2d:31:7b:bb:84:f8:b9:0d:51:1e:62:76:cf:7b:
                    c1:78:b8:8d:df:b7:c5:28:92:5f:1d:b2:a3:fb:48:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:06:73:76:BD:D8:87:F3:CF:DF:92:85:86:F1:1D:2E:22:27:06
            X509v3 Authority Key Identifier:
                keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:37:d0:bd:cf:87:3c:fa:bb:a6:35:5e:5d:c0:90:00:30:79:
         82:5c:0e:56:d3:c5:16:57:67:3b:9c:87:23:69:b9:e5:85:43:
         4c:e6:64:09:3b:de:fb:6f:a2:51:2b:98:f3:cd:fa:d5:c6:c3:
         88:49:21:69:4d:12:8e:ab:d1:9f:d2:ee:ec:35:0e:51:33:ed:
         12:82:19:3f:9e:aa:3d:9b:e9:3d:e7:d7:9c:b5:73:80:15:8b:
         19:0e:6c:79:ce:8b:bc:e8:06:9c:30:a2:94:d0:4f:72:c7:66:
         58:f0:56:35:90:d1:f8:80:be:18:41:14:cf:e4:34:6e:08:fd:
         3a:48:b9:7f:82:e9:d4:87:9e:2f:68:d7:0f:0f:22:44:b5:2c:
         27:67:34:53:d4:4a:55:7a:78:16:66:89:d6:a5:8e:00:9d:04:
         a7:46:b1:92:5e:7a:7b:8f:12:1c:5a:ed:ff:c3:e9:ca:7f:ac:
         bd:bd:a3:b3:c6:ac:65:0f:35:8f:b2:b8:0b:e3:ca:ee:2e:21:
         f2:eb:0c:00:50:44:09:7a:ef:84:eb:64:a5:72:73:82:b5:d5:
         f2:c0:45:e6:13:a1:c5:40:3d:10:21:e1:87:b4:60:e4:21:28:
         b7:3e:69:87:10:33:df:c1:c7:f2:5e:77:cb:fc:32:49:e1:96:
         ab:44:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:24:48 2025 by rpki-client