Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
File:                     217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft (raw, json)
Hash identifier:          74Ei4TbLqVzbpXe1CneXasjWDuen0Qu3szszxq+t3pQ=
Subject key identifier:   D1:0F:DD:D1:1C:32:FA:9A:58:3D:80:36:F2:A1:1C:B9:1C:B7:B2:E6
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       2019F50E7DA057249A04F5B2BE0C9BDF33511AFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
Manifest number:          027B
Signing time:             Fri 25 Jul 2025 03:28:07 +0000
Manifest this update:     Fri 25 Jul 2025 03:23:07 +0000
Manifest next update:     Sat 26 Jul 2025 04:58:07 +0000
Files and hashes:         1: 323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa (hash: IIjOfwScjYzuIW455scPteo+jXiGwymOxdWyMdesCxU=)
                          2: 323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa (hash: 73VxTmrHcDclfyzWD2NvLWhlyqOOmciv8mqD3YTP4Lo=)
                          3: 3137372e3132352e3231322e302f32322d3234203d3e20323632333534.roa (hash: bn8Xe5WrdUt7ICGvKPftHd4DAKOH8yOEmghN62vqAdk=)
                          4: 217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl (hash: mOl7UgddABMDfEjprAFo1wSOG0BoCvtsi+X5eEKNLRU=)
                          5: 3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa (hash: 6NwpFJ7gDANE46Jx5vikCbRoBEVySFH3yZyCVhsLd0o=)
                          6: 323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa (hash: jyBzkUb0ZAfBqFaeEplKCUGYFgzfbOL8bBel2PDL7uc=)
                          7: 3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa (hash: C8A1tMc17XPO4sT/75doOEso28/RPHv8x0piivNpqnU=)
                          8: 323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa (hash: 3ATdnwKTcnjJc1thmle9rbBzJ54qo4F2Z6Zt7tF0mOQ=)
                          9: 323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa (hash: 1jilXaroZujU5oaBmP8IdMxhJvWVAv+XVsRwyo4U4Kk=)
                          10: 3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa (hash: KepogA6EqBh4/Mm9ZRketiZxhibc5/sOuerwpLOTr8k=)
                          11: 323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa (hash: MGiElqaL7xBEzpuZbkoNqfSxLtqkmTwWj52mKDYvjWk=)
                          12: 323830343a3832383a3a2f33322d3332203d3e20323632333534.roa (hash: g8VDWdnoTi89t4VpwlAnfB9n5awIOVyt5yucSqrEYXs=)
                          13: 323830343a3832383a663133303a3a2f34372d3437203d3e20323632333534.roa (hash: KopFg19EShN0UnNLuZcAOoGOfsA+Ip+eckPoai0jD2s=)
                          14: 3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa (hash: q41Kgx7H4qdLGf/v/7Tu8Hjp6Ur6X6B7jCcvMBE3QB0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:19:f5:0e:7d:a0:57:24:9a:04:f5:b2:be:0c:9b:df:33:51:1a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Jul 25 03:23:07 2025 GMT
            Not After : Jul 26 04:58:07 2025 GMT
        Subject: CN=D10FDDD11C32FA9A583D8036F2A11CB91CB7B2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:c0:6d:c8:97:a1:2a:59:2a:59:c5:bf:25:
                    56:16:1a:7c:ad:71:71:57:ef:38:2e:d7:1d:8e:20:
                    d9:18:99:1c:51:b3:2d:75:16:90:6d:56:2c:30:d5:
                    a8:95:2a:8b:14:2b:67:84:1c:91:31:fb:50:df:6e:
                    7d:4f:88:61:79:70:1b:5d:2e:33:28:f2:23:a1:f1:
                    90:93:2e:a2:b0:24:51:7c:6b:ba:9a:64:4b:0d:64:
                    0f:58:0c:ea:0e:1d:58:d9:5a:f0:9a:55:01:fa:d7:
                    47:02:2a:c2:8b:a0:4b:e2:16:8e:d3:41:8b:73:ab:
                    59:19:60:0a:2d:3b:cb:37:8b:70:61:73:b1:43:c7:
                    4e:ab:a7:98:1b:c6:b5:18:71:7e:c1:d3:b5:6c:7c:
                    92:86:45:d2:7f:6b:f6:46:a7:f6:09:df:06:56:f8:
                    87:23:32:cf:d1:0c:b2:eb:f4:85:e3:d4:5d:0e:8c:
                    68:49:68:3b:b1:f7:87:fe:f3:d3:4f:84:3b:37:d6:
                    ca:89:b1:7f:d3:ee:97:cf:f5:3f:f6:10:79:3e:6d:
                    fa:2e:cd:43:45:f9:a3:78:0f:17:71:93:b8:2d:73:
                    60:2f:6b:42:2f:85:d3:e2:a4:e4:1b:59:9f:e3:a3:
                    d1:fe:a9:98:83:7b:2f:a0:9d:7c:ce:37:35:c9:a7:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:DD:D1:1C:32:FA:9A:58:3D:80:36:F2:A1:1C:B9:1C:B7:B2:E6
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:59:e6:19:2c:02:33:0e:48:3e:f9:e1:02:c1:fb:d5:36:e6:
         9e:9f:5c:6e:b0:c5:70:86:df:c9:39:cc:4c:a8:1c:0f:f5:6f:
         8e:47:67:7e:39:cd:72:db:7e:b4:be:fa:93:d2:d6:c7:a0:54:
         3a:39:f6:ee:1d:db:4b:bd:f5:87:fa:2a:ff:b2:05:6a:f8:6e:
         b3:79:af:9c:d1:42:e6:85:29:7c:eb:08:6c:2a:6e:e4:47:75:
         26:46:51:ca:32:8e:13:f7:57:32:3d:d6:6f:6c:ec:87:4d:a2:
         96:d6:6b:59:ac:0d:05:40:f5:f4:ca:fe:3e:88:0d:42:48:28:
         27:f5:2d:dd:65:f7:68:70:24:59:59:3d:a8:54:51:e6:47:8a:
         e0:6b:0d:48:6a:80:8c:58:b9:39:92:92:2a:af:b1:3e:65:a8:
         06:c4:34:35:62:79:34:d3:13:62:af:02:df:6d:6d:d6:07:7c:
         b9:8d:cd:aa:7c:be:9a:53:58:5a:28:00:a7:d3:e8:9e:83:6f:
         4a:5f:51:18:38:8c:62:e3:53:c7:74:f2:7f:b1:46:ee:fe:0d:
         5c:9e:7f:98:e7:8c:c5:b9:58:a4:f5:fd:66:38:ad:93:7f:c4:
         1b:af:85:9a:56:d3:f1:d1:f1:81:5d:ca:38:ed:f1:e1:01:fb:
         42:12:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:29 2025 by rpki-client