Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
File:                     B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft (raw, json)
Hash identifier:          qCsSCT94kwB47ff/seRWI+NKZcSXivnm/QvBn4wgmPo=
Subject key identifier:   39:D2:C7:AB:20:AA:86:24:63:D9:30:21:18:DC:97:25:5E:BC:EB:38
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       5CF6952E81020595B047BDFF7A8EFD9C5BE797D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
Manifest number:          02AF
Signing time:             Sat 26 Jul 2025 06:00:00 +0000
Manifest this update:     Sat 26 Jul 2025 05:55:00 +0000
Manifest next update:     Sun 27 Jul 2025 06:00:00 +0000
Files and hashes:         1: 3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (hash: Bnl9bp41rgXoRcKOfyv6fT3qi9QRw6WJNdIPgdsg8NI=)
                          2: 323030313a313261303a3a2f33322d3438203d3e203238323932.roa (hash: dKQt4v2JdWqatl/R0rZkWZ5H3UnSmexxO6GH5f47Zss=)
                          3: 3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (hash: fWDx1Fi6mw6Ca6ZucRKlJCI/fMGdFESCD3/Jzd0xj/o=)
                          4: 3137372e35342e34382e302f32302d3234203d3e203238323932.roa (hash: 40IYTjHiZO7EvGhruJ83FGAT4mQNUc8uvivoD/9QYP0=)
                          5: 3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (hash: Iq9Imp3qaQEaGFQWqL4EpTLVcZyaAgjQqWljK8thbFo=)
                          6: B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl (hash: bh/yXmFckLX3Feofp6MW1fGRPmpbLl6ZpUQnDiVQPN4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f6:95:2e:81:02:05:95:b0:47:bd:ff:7a:8e:fd:9c:5b:e7:97:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Jul 26 05:55:00 2025 GMT
            Not After : Aug  2 06:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:34:b7:1b:62:77:f0:51:9f:60:d7:97:40:
                    83:2f:45:7c:1c:e8:3b:6e:10:5a:39:af:fc:ac:0e:
                    6d:f4:79:67:89:94:d7:cb:12:9e:85:f4:59:e6:c6:
                    af:12:ea:fa:10:44:d6:78:8d:cf:56:25:99:fa:63:
                    e2:14:b7:7a:70:51:84:af:4d:c6:97:6c:09:96:de:
                    ff:99:11:73:8c:36:69:f5:89:a5:e6:5c:15:bd:4d:
                    6f:a6:76:94:00:f7:db:7b:4d:d6:cd:ac:70:83:c5:
                    93:4a:92:74:b5:41:0c:0b:30:80:71:a6:04:d2:47:
                    f9:e7:f3:a1:9c:ea:78:00:3f:9b:e6:59:76:5d:11:
                    39:10:e6:8b:af:52:7b:0a:ce:76:2a:76:cc:05:57:
                    2c:73:dd:90:58:07:e9:4d:1a:cc:7f:04:91:a3:0b:
                    2a:a9:28:c6:c8:33:71:c1:a5:9b:bd:ae:e5:df:ac:
                    ed:e8:73:20:39:d4:99:d4:d4:96:f9:55:ea:97:3b:
                    fe:57:2e:91:05:3a:a4:47:cd:8a:2a:9e:63:0f:25:
                    a3:8d:5c:58:e8:ab:0a:c8:22:33:20:9b:9a:4b:9d:
                    a2:81:bb:8b:d2:f5:3f:7e:14:19:a5:ce:b5:46:c2:
                    f3:73:ab:d3:d3:c9:47:6f:a0:e8:64:82:73:e5:41:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:C7:AB:20:AA:86:24:63:D9:30:21:18:DC:97:25:5E:BC:EB:38
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2d:e9:56:19:4a:78:ea:55:e8:14:ee:d4:9f:8c:41:c8:ae:
         c4:db:7d:c7:02:63:d8:cc:b7:d7:99:ba:9c:44:0f:e7:52:af:
         27:f6:92:5d:dd:95:34:97:8e:df:3f:70:d0:c9:0b:2c:b2:2f:
         22:ce:b6:9d:7a:cf:81:4f:b5:8a:67:89:4f:9b:54:ca:d2:80:
         42:23:36:fc:e0:b1:94:f8:68:1c:18:27:07:69:bd:8b:4e:f8:
         5f:f4:7e:38:03:d8:81:64:44:bf:5d:cf:ef:f7:ca:c5:bf:76:
         50:a3:80:19:c3:84:92:c7:5a:d5:66:22:08:7e:fc:36:43:a5:
         2f:2b:d1:2b:13:dd:5c:b4:ac:7c:a2:3f:3a:06:61:87:a8:cc:
         0a:d8:66:f1:56:ba:06:88:5d:9e:01:66:12:17:53:5e:e4:04:
         ad:f9:08:6c:97:94:25:2a:fe:14:03:7f:f5:60:96:f4:1c:40:
         6d:16:f1:c4:b7:9f:5c:87:b3:89:99:01:ac:05:3b:fb:0e:94:
         74:5d:ed:bb:72:0c:9c:f0:ea:53:2c:58:3b:35:1b:a4:3b:e9:
         af:f4:fc:ac:f5:f0:7a:3e:0d:35:4d:ff:3e:79:13:ef:e2:24:
         84:78:0c:2f:7e:12:8c:a0:98:57:b5:33:ea:f9:6d:6a:9b:1e:
         2c:ca:47:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:41:53 2025 by rpki-client