Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
File:                     558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft (raw, json)
Hash identifier:          lW6AnOq4g9Xs3FnslkncdfK4NWcGRIcnbvyapHhd1yo=
Subject key identifier:   AA:D2:C1:9B:6A:6A:89:29:8C:FE:03:BC:20:AD:A0:79:F1:10:BB:77
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       16DB98A811CEC3DFFBC251147EC330400BDB7A02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
Manifest number:          0280
Signing time:             Sat 26 Jul 2025 13:00:00 +0000
Manifest this update:     Sat 26 Jul 2025 12:55:00 +0000
Manifest next update:     Sun 27 Jul 2025 16:32:00 +0000
Files and hashes:         1: 34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa (hash: XBmvh/8A0Z/Tz7nODCSR6Cfa3y+jFLTO0Qqm7NQQSxA=)
                          2: 34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa (hash: BK3UsZG79+wrzBvGJAegOW801kgPf0I8HLvmTsY0nyQ=)
                          3: 34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa (hash: 9LHE4i4GnTLDjVGgCdfHxI+9H+SA4TlZya5kGdYCkbg=)
                          4: 558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl (hash: GlEN2RFbFbAfFF2xtV73EmsfcyOdcl5VMN5vcRz2lPU=)
                          5: 34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa (hash: CGcZx0TeATvPufu3BdnBvTR+wCuKUOzvR0Vw7EviEl8=)
                          6: 34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa (hash: Axew/Lqsoy7r3BGlfRKvSVyMflhA2+l5l8QipgZknbY=)
                          7: 323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa (hash: p23xXCkMczYyDHKmnl5n9nRzgDTW8ZHFJQutmTzD8pE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 16:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:db:98:a8:11:ce:c3:df:fb:c2:51:14:7e:c3:30:40:0b:db:7a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Jul 26 12:55:00 2025 GMT
            Not After : Jul 27 16:32:00 2025 GMT
        Subject: CN=AAD2C19B6A6A89298CFE03BC20ADA079F110BB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:c9:1e:91:2d:0b:81:86:6e:12:90:5a:87:
                    7d:b4:39:38:ba:7a:6e:90:7f:b3:27:1f:bc:8d:89:
                    a3:b1:93:5e:65:70:dd:4d:3a:92:24:fd:a8:fb:6c:
                    d9:7c:a6:c3:5b:39:f8:55:af:f6:61:f6:56:5a:2c:
                    63:22:29:77:f0:62:ed:ce:34:08:eb:c1:dd:3e:d2:
                    01:2a:ca:33:41:17:8f:60:67:3d:10:b4:a2:dc:2f:
                    8c:1a:72:b9:06:94:d9:8d:48:35:e9:68:05:ef:4f:
                    45:f1:bb:8b:2b:fb:2c:c8:63:ab:77:c8:f1:18:af:
                    e1:56:1e:72:38:9f:86:e3:c2:5f:70:d4:ef:5b:76:
                    e3:91:df:8b:9e:58:c5:54:b2:8f:c0:b0:60:e5:43:
                    20:a5:1d:e0:3b:fb:47:ed:80:75:5c:96:29:ed:ca:
                    e2:7a:6a:11:29:16:42:7e:fb:a3:c0:a5:45:28:0a:
                    20:39:e8:fa:ce:03:bc:f6:36:8d:98:32:1f:9a:ca:
                    29:54:4c:67:c0:32:5c:18:a9:97:48:cc:0f:15:77:
                    13:9c:1e:fc:2d:1b:cc:11:d6:b6:d3:fb:5e:41:84:
                    2c:15:8c:64:3c:ec:4b:c5:3b:2e:b4:db:2e:8e:cc:
                    88:c7:ef:a6:4a:5b:f2:d6:b6:63:fe:9e:83:fb:35:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D2:C1:9B:6A:6A:89:29:8C:FE:03:BC:20:AD:A0:79:F1:10:BB:77
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:a9:ce:d8:ba:c3:c0:02:b1:59:d3:3f:ae:ac:59:45:7b:
         58:59:a7:1f:33:76:85:57:34:ce:81:59:71:fd:77:68:c8:64:
         1f:16:ba:d6:e9:32:97:a4:a4:ce:38:85:bb:5a:5b:3c:19:9a:
         d1:fe:0d:b3:42:2e:a0:4b:be:f9:34:49:c8:ca:25:6e:d2:b6:
         03:c6:51:16:d8:7d:09:e7:23:50:73:0a:85:0d:bf:46:8c:01:
         72:27:e8:ca:0f:2f:2c:07:95:35:16:94:38:15:81:a1:42:19:
         29:1d:2d:15:cc:25:7e:1c:06:4c:20:1f:1e:6a:9c:48:d9:28:
         5a:6d:95:0c:d5:fd:50:4f:66:e3:45:ab:6d:e3:4a:a5:51:81:
         91:60:be:70:0d:15:a4:28:d9:93:41:2c:11:c4:55:74:a2:43:
         ae:c1:4c:ca:fd:bc:ae:28:f6:fc:c0:af:01:4e:15:80:19:b0:
         b7:9a:45:ec:dc:92:1f:f1:f7:79:36:31:91:09:e9:2c:6d:0f:
         2e:95:b5:7e:79:48:d0:0e:64:b6:ae:cb:f1:5e:7e:b7:58:46:
         38:4b:68:e0:54:79:10:54:65:3f:1b:5b:82:11:b6:7e:0d:91:
         c2:6f:29:06:c6:67:bb:4d:af:7d:a4:e7:f0:49:04:5a:56:89:
         81:af:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:01:25 2025 by rpki-client