Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
File:                     23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json)
Hash identifier:          M0lhXcYHV1KCFrlIFluJ65TCgLeqBkILA6FUMXHR+dw=
Subject key identifier:   3C:B7:11:8C:B0:C8:6C:27:A5:70:EC:81:FF:C3:72:7A:43:FA:9B:E0
Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Certificate issuer:       /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Certificate serial:       3F0620BE5394ACAB63BB3F0C6A4408955032421E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
Manifest number:          02D4
Signing time:             Mon 28 Jul 2025 12:50:00 +0000
Manifest this update:     Mon 28 Jul 2025 12:45:00 +0000
Manifest next update:     Tue 29 Jul 2025 12:50:00 +0000
Files and hashes:         1: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=)
                          2: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: xQmXHmfUuEHlgdpzJpWHoYZhA/0M3Uh+eqqKT8l4fS0=)
                          3: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl
                          rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:06:20:be:53:94:ac:ab:63:bb:3f:0c:6a:44:08:95:50:32:42:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
        Validity
            Not Before: Jul 28 12:45:00 2025 GMT
            Not After : Jul 29 12:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:d4:0b:a1:f1:9d:24:8e:c5:5d:ff:6b:4d:
                    28:98:5b:f7:82:18:12:1c:40:04:47:8c:df:d6:db:
                    f8:48:03:b8:a1:22:4e:a1:34:1b:f8:f8:22:49:6f:
                    53:0e:ed:82:9f:de:89:aa:87:f8:78:75:0f:66:8f:
                    1a:f5:b9:3c:d4:87:75:1c:85:9e:0d:25:24:83:cb:
                    0c:47:ef:f1:81:e7:a3:ae:7a:10:e4:96:70:28:b0:
                    67:be:6e:ed:6f:aa:0f:61:21:d7:5e:1e:df:84:16:
                    95:f6:aa:07:4c:54:89:91:83:44:24:5c:2d:36:0f:
                    90:48:df:f1:0d:e4:cc:60:ec:c3:99:ea:34:38:42:
                    90:e7:e5:f1:81:81:91:4a:96:f5:20:c5:90:5c:46:
                    88:49:0a:e8:6f:da:5f:61:dc:12:eb:3d:21:62:78:
                    a7:bc:04:10:4b:65:45:b4:df:7c:7d:83:4e:68:63:
                    06:16:71:d3:cf:0e:34:89:83:68:99:3c:fb:2f:55:
                    d1:f5:37:1e:7d:e9:47:74:ec:f3:e0:6d:b6:01:51:
                    f1:b1:b8:ca:3b:a3:a0:1b:63:4b:90:ae:b1:28:7a:
                    2c:d2:96:af:74:e9:8a:c9:b4:28:df:57:3f:a3:ba:
                    ac:f3:5e:6e:8e:ce:81:a7:7c:40:b4:0f:26:35:43:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:11:8C:B0:C8:6C:27:A5:70:EC:81:FF:C3:72:7A:43:FA:9B:E0
            X509v3 Authority Key Identifier:
                keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:21:dc:ff:e2:0f:56:de:b8:c4:61:da:68:41:94:8d:75:
         b2:48:24:03:8f:2a:fb:21:65:fa:db:bc:e1:f3:7c:06:4b:ee:
         dc:bd:36:2d:db:2b:2f:e9:65:0d:d3:23:77:14:be:72:a6:5f:
         a0:4d:a6:16:98:99:00:2e:6a:55:23:e8:63:b1:ad:c7:a3:cc:
         e0:41:e2:43:ac:69:06:3c:72:08:5f:73:33:4e:a0:28:14:35:
         59:8f:d6:69:ac:e5:73:7c:c7:ae:97:99:87:fe:8d:8c:e1:4d:
         a5:fc:cf:2c:44:46:d5:07:97:a7:19:a1:44:93:aa:c7:0c:e4:
         62:1a:61:a7:4f:c4:76:65:ec:fb:a5:61:ef:e5:6f:3f:af:b9:
         96:84:28:03:0c:08:a9:47:c9:66:9b:64:15:3c:22:91:d7:17:
         d5:74:a0:72:49:f3:b9:1e:eb:e2:a0:5c:58:19:39:32:29:a0:
         fc:6b:1f:7b:76:21:6c:90:d6:00:67:27:a8:d6:77:cc:e2:bf:
         c3:1f:89:66:2b:d0:4e:a8:8f:d2:36:db:ad:d5:94:01:be:78:
         a7:2f:08:0f:ed:67:88:57:f9:c5:d8:40:2c:12:f0:8b:8f:58:
         a7:9e:a1:5b:0b:ad:7b:52:88:ff:19:93:3a:36:a7:ce:0b:63:
         57:bf:f8:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:47 2025 by rpki-client