Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
File:                     049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft (raw, json)
Hash identifier:          sq8kCe1j7b3pNLUC8Hr4i2BylQffqt5F/UzjZ1ea3RE=
Subject key identifier:   C5:88:F1:C4:D5:15:3C:44:7E:B1:9D:94:0D:F7:EA:AE:20:54:ED:3B
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       34CE0B88C0A6D89602BB9E01B47E2FE042787039
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
Manifest number:          027D
Signing time:             Sat 26 Jul 2025 00:13:35 +0000
Manifest this update:     Sat 26 Jul 2025 00:08:35 +0000
Manifest next update:     Sun 27 Jul 2025 03:18:35 +0000
Files and hashes:         1: 3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa (hash: LwI+QB/TjMVf8G/QgSFG16qXD7El/5C8Z42mnNFNJW8=)
                          2: 3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa (hash: jMCfjQXfLwdkIBOBUjFghP/CT/oRuuuewuH/syABSL0=)
                          3: 3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa (hash: Y7E29OoCqFM/hqqVdQrAoirWKWxxLcQQ3MY1P2Z3x5o=)
                          4: 323830343a336361343a3a2f33322d3332203d3e20323636323236.roa (hash: nIFOFKBY50PKkmeqOio9qj007zeZ4Ka0UUBHwcKFUW8=)
                          5: 049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl (hash: IrJVIJnzgZr7mquMeWop2y08RpGHGDXNQlENYZvEDoY=)
                          6: 3231362e39382e3231392e302f32342d3234203d3e20323636323236.roa (hash: ub2IS8OX6EgFlZitQTXImnYH+e5QN9q11+sChOE1i0k=)
                          7: 3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa (hash: 8MHZYB00jpMu9bL7PENSCmahv8upOnDcw1afAo+avdg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ce:0b:88:c0:a6:d8:96:02:bb:9e:01:b4:7e:2f:e0:42:78:70:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Jul 26 00:08:35 2025 GMT
            Not After : Jul 27 03:18:35 2025 GMT
        Subject: CN=C588F1C4D5153C447EB19D940DF7EAAE2054ED3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:29:57:76:02:15:77:77:3b:d4:d5:5c:69:
                    6b:01:29:45:e0:cd:e1:2d:59:da:98:e4:b2:f7:33:
                    a2:53:45:17:05:0b:94:08:cf:a2:83:fb:22:24:e8:
                    e5:19:43:85:3d:16:3b:7a:68:af:6f:16:65:82:31:
                    3a:36:41:be:1a:38:af:13:63:28:45:d5:5f:dc:87:
                    8e:aa:22:ce:c2:25:47:74:01:b2:66:e4:05:23:40:
                    aa:f7:9e:50:14:78:0c:23:cf:9e:dd:31:65:f9:14:
                    c4:74:2e:bb:ed:7e:bc:86:79:69:02:73:1b:c6:7d:
                    8b:07:38:85:84:62:c0:86:64:7d:87:5e:ca:94:ce:
                    6c:d9:25:da:de:bc:c0:11:d1:06:04:3b:95:27:13:
                    6c:05:d3:68:d2:3b:98:b8:9d:f6:b5:c6:9a:7f:d7:
                    e8:d0:11:ff:f4:f2:76:91:66:e3:b5:4b:1a:7e:32:
                    92:20:f4:7f:b0:86:e7:75:ef:05:41:40:59:91:50:
                    1a:e2:36:51:88:65:63:6a:64:ed:bb:ef:4d:85:db:
                    3a:5b:67:dd:f8:e1:6d:9b:d7:08:d1:62:67:0d:7b:
                    2a:9b:2f:58:63:ce:21:69:cb:76:9d:b1:9f:e7:59:
                    72:91:f9:db:23:9e:01:2f:0e:84:ac:8b:ee:94:6a:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:F1:C4:D5:15:3C:44:7E:B1:9D:94:0D:F7:EA:AE:20:54:ED:3B
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:29:28:09:5d:70:72:3b:d8:ca:7e:07:c7:77:83:7d:e4:d7:
         f0:9e:12:da:c9:09:9a:8f:fe:32:d5:84:2a:0d:2d:18:6e:9a:
         35:1b:d4:eb:f8:55:02:72:ba:e9:ea:10:0e:53:4b:c7:64:e0:
         90:69:50:37:3b:b8:39:46:65:5f:a0:5d:eb:2e:bd:d4:a9:4a:
         ec:36:00:7f:59:fb:38:af:29:27:74:fa:89:88:ff:d7:df:60:
         ad:ea:c0:77:19:93:7c:9a:57:e3:30:5f:b5:a8:3f:f2:ae:18:
         d1:3a:05:12:bd:d5:b0:fa:71:70:63:7d:70:bd:bc:bd:dc:dc:
         49:1a:9f:42:e5:84:71:9a:aa:be:ed:56:03:69:f9:38:e8:39:
         b9:cc:9c:97:64:fc:83:a9:ed:26:01:91:b7:44:d9:bf:9d:b4:
         3e:d9:05:f0:dc:51:b1:8e:ee:ad:57:5d:c0:21:ef:c4:86:99:
         ce:6a:e2:a5:fa:a9:84:4a:b0:93:79:f2:3f:eb:3c:d5:b2:96:
         01:a7:2d:72:e8:44:fb:57:86:a1:97:c4:3a:30:f4:8f:1e:7f:
         66:0f:01:ca:6d:ba:ae:5f:98:f5:7d:0d:59:b8:a3:1b:c4:f8:
         58:73:bf:b5:9b:fa:3a:ef:db:b1:0e:12:fc:42:6f:6d:e9:33:
         ad:a2:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:57:06 2025 by rpki-client