Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          a3RT58jyeO8nI6twyTG4lL4O1fu+w3csZ3y/aGXOkfY=
Subject key identifier:   32:21:60:12:DD:80:7F:F3:C0:95:C6:1A:83:36:C2:E8:92:F7:51:56
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       23E20203D63C28C6057C3CC2B81B02118EAE1420
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          01E6
Signing time:             Mon 28 Jul 2025 20:40:48 +0000
Manifest this update:     Mon 28 Jul 2025 20:35:48 +0000
Manifest next update:     Tue 29 Jul 2025 23:59:48 +0000
Files and hashes:         1: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: j1nslom0e916eBzyw+5Vl34iuI8TAS5aLHgLgLAY4IU=)
                          2: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: 6JWd5mE5VskzKa06dOehuRC38l54iLZvDm8ktJiyfoo=)
                          3: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: R+lJ3l7UdjCU7kkCR68kGkR301UIjRYBugRziVPE9yM=)
                          4: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: 78++bmMlB0Bovi7AyiX7x6vYCK0aaHsx+gF5MCimEZY=)
                          5: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: iUhuZCqf+gxZqO/cM6ScZTXsH+jrXHXlfnCWGA2Il7o=)
                          6: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: 1jWpa4B/LOApSNZTdZ0H77MPSYhueWFcmpYUMbwmDDw=)
                          7: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: jjkK6I+oxF27Zn+hFNgeO1Co4NAnpp1C7qu8FLGYa5c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 23:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e2:02:03:d6:3c:28:c6:05:7c:3c:c2:b8:1b:02:11:8e:ae:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jul 28 20:35:48 2025 GMT
            Not After : Jul 29 23:59:48 2025 GMT
        Subject: CN=32216012DD807FF3C095C61A8336C2E892F75156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:ad:77:a9:93:74:07:31:f4:67:86:c1:df:
                    33:99:2b:35:0b:bd:0d:20:b3:b2:bf:71:2b:18:35:
                    6f:e5:47:9a:f5:1d:64:8d:9b:96:d7:ba:d0:73:d2:
                    cb:09:66:a8:ac:53:82:30:d3:b8:57:85:11:19:88:
                    7b:62:bc:3a:9c:c3:43:30:38:a7:11:02:4b:f5:f0:
                    f5:28:64:1c:78:e5:e1:71:d2:fc:8c:af:6b:55:e8:
                    7e:bb:d5:08:94:ae:f1:1c:8a:43:d5:d9:7e:d2:88:
                    9d:0f:bb:f1:18:1f:0d:b0:f8:a7:b0:b9:79:a5:c5:
                    1f:a2:ed:5f:bf:2c:de:31:1f:22:2e:78:bc:88:b4:
                    bf:9b:d0:75:1e:45:29:1a:52:94:ec:12:fe:91:83:
                    38:cc:82:d3:4d:88:cc:3b:14:c0:36:4a:67:7d:be:
                    fc:1d:93:5d:f7:d0:ba:dd:c9:7a:c2:82:9b:9c:7e:
                    21:74:0a:c2:ab:a1:7a:39:a6:1f:82:20:1c:82:f8:
                    0e:69:b6:0d:a4:99:7d:60:1f:e1:20:52:5e:ee:95:
                    23:82:f7:f3:ad:ec:38:db:c5:fe:89:9f:9d:4c:a3:
                    77:7d:1f:f1:09:36:8e:e3:72:17:f3:2d:59:16:9e:
                    2b:f5:86:20:12:d9:97:f9:2b:c6:fa:6a:c3:1d:de:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:21:60:12:DD:80:7F:F3:C0:95:C6:1A:83:36:C2:E8:92:F7:51:56
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:b3:c3:b0:91:db:d5:76:9f:64:54:17:03:b8:6f:1c:98:
         0a:c4:48:fc:d4:9f:25:9b:aa:29:9b:79:92:07:ea:93:9e:5f:
         06:08:d8:22:da:38:fe:68:82:96:85:ea:91:91:a7:ff:ec:5b:
         6a:63:eb:6a:d4:7f:97:7a:94:1f:1e:ba:81:05:8e:8d:71:64:
         9a:25:02:24:4b:4b:44:41:63:ae:82:6e:8e:1a:02:2d:fd:73:
         45:23:9a:f2:da:a1:4b:3d:5a:0f:9c:92:7b:38:c9:37:a3:09:
         90:cc:e2:8a:9a:35:6f:e1:95:40:a3:66:60:4c:4f:d1:8a:c7:
         4f:f2:9a:5a:c5:40:8b:cd:38:8c:65:05:78:a9:c2:64:b5:dc:
         09:21:8d:d4:40:48:e8:53:86:a4:54:1a:69:ea:cc:57:9e:40:
         68:07:6d:2b:62:9b:03:a2:18:dd:cd:77:fb:21:b0:62:70:0d:
         6b:e8:b7:06:99:e8:61:f6:e0:1a:c2:30:74:fd:6c:69:3a:f6:
         92:46:66:3a:29:e5:df:a3:99:52:1e:e5:19:f8:29:df:1c:15:
         62:01:cd:c6:59:95:d3:20:65:26:ae:b3:a9:b3:f6:17:6b:5b:
         79:2d:c2:40:78:8c:e8:d4:66:3f:cf:c0:d8:4e:8f:c0:99:12:
         61:cb:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:07:52 2025 by rpki-client