Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
File:                     0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft (raw, json)
Hash identifier:          eEDM/MlVZlgh2KId/yAIqbYa/wl6Zbsxi11RBNvZ++Q=
Subject key identifier:   37:6F:5D:B6:71:33:56:65:F2:6F:55:A8:D9:A7:8B:28:46:17:1E:36
Authority key identifier: 0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86
Certificate issuer:       /CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
Certificate serial:       2EF2446EE851465CB302BDE02D9F5477EC6CC366
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
Manifest number:          35
Signing time:             Sun 27 Jul 2025 03:40:11 +0000
Manifest this update:     Sun 27 Jul 2025 03:35:11 +0000
Manifest next update:     Mon 28 Jul 2025 05:44:11 +0000
Files and hashes:         1: 323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (hash: x0c53G6wS19veWxAUqMY57bBWpAyEqUbguqKbHuzXEQ=)
                          2: 323830343a383537383a3a2f33332d3333203d3e20323732353831.roa (hash: RKPxE90xeJX3Tr9HwA7KlEeVzghP05bA9MF380RZEjc=)
                          3: 323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (hash: ioH1stFIWSuKnecw4s/7QnAiVPG6wo7B5emgO5WB4FM=)
                          4: 0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl (hash: D8MLXYSCLtCh8hWDW1fk5Sv6hbZR5Vnc5HiO40g7iTI=)
                          5: 323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa (hash: c1uYt5fcoKgMc/KghroZTfAZnrmCpo+exnVy7t3s5JM=)
                          6: 323830343a383537383a3a2f33342d3334203d3e20323732353831.roa (hash: E2xyYaEHLMeZBdx+F6/x1jKYRsRH7ARE4RhPIXD2pz8=)
                          7: 323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (hash: kFbZUxX/GPkFsRWDwJgKImWD0yVnpCCU7YX4Wsi/lnQ=)
                          8: 323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa (hash: JcJr4mdcF3RqXqzqfUnRss/28VStaz75ASIW0Y6TLqc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f2:44:6e:e8:51:46:5c:b3:02:bd:e0:2d:9f:54:77:ec:6c:c3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
        Validity
            Not Before: Jul 27 03:35:11 2025 GMT
            Not After : Jul 28 05:44:11 2025 GMT
        Subject: CN=376F5DB671335665F26F55A8D9A78B2846171E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:3b:6d:3b:31:df:09:44:f2:3f:5a:2d:cf:
                    40:62:c5:a6:84:45:f2:03:e6:7d:6f:1d:dc:24:bb:
                    29:98:e5:2b:88:b0:1d:c3:11:88:f4:6e:86:3a:5b:
                    b0:13:44:0a:05:a2:44:05:41:84:47:cc:56:0d:a6:
                    93:5c:5f:f8:67:c0:ec:f1:b0:42:14:1e:34:44:dc:
                    fa:bb:ac:33:95:6b:43:d3:44:d9:6c:d2:68:b5:ac:
                    c7:e0:ce:85:c3:d3:2d:4c:19:0e:b8:0a:f8:21:b2:
                    34:93:b8:06:1d:ef:81:29:a9:20:cc:15:ab:e8:ee:
                    52:7e:d5:20:82:49:7e:3a:1c:fe:2d:08:fa:72:c6:
                    f3:f3:ad:21:fe:e1:b5:89:b8:99:a7:70:f2:41:ce:
                    0d:d4:35:21:a1:8b:3e:88:b5:b7:3b:94:47:cd:66:
                    60:90:ac:59:d4:0f:3a:74:f6:17:7c:27:19:c6:f1:
                    79:fc:1b:8a:1a:7b:a5:5b:aa:23:a0:08:5a:1b:1e:
                    de:89:53:2f:c3:28:62:6e:db:cf:46:b3:ce:ff:64:
                    ba:6d:4e:bf:b5:ae:38:ca:11:6f:dc:b4:70:b4:56:
                    60:77:c2:56:50:e6:0d:97:e8:77:de:f1:88:0c:19:
                    24:c7:2c:d5:81:06:00:a2:fa:b8:03:b8:47:b1:1f:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6F:5D:B6:71:33:56:65:F2:6F:55:A8:D9:A7:8B:28:46:17:1E:36
            X509v3 Authority Key Identifier:
                keyid:0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:67:10:a8:75:72:68:20:69:06:69:ac:ae:0a:83:49:3b:57:
         6b:d3:7e:bb:8c:b7:6a:59:7b:f3:ee:25:6f:d9:e1:55:56:a1:
         ff:2f:dd:2a:bb:4d:c9:b7:7d:96:58:f8:a5:71:45:8e:7a:f0:
         4b:14:2a:9f:6b:96:77:9e:23:62:e0:83:34:58:5a:64:4e:36:
         68:9f:63:4d:9b:cf:85:ae:34:d0:a2:7a:40:32:67:43:43:d9:
         1c:43:9b:42:fa:63:49:a5:27:8d:64:a3:d6:13:eb:f8:b3:f7:
         0f:6b:a6:11:4a:3b:be:3e:fc:9c:76:1b:d6:4b:55:b2:06:aa:
         37:2b:f7:8f:5d:63:8d:19:0b:cf:e8:61:56:7b:e5:86:7f:2f:
         e8:b1:a1:48:e4:f2:18:f6:c5:3c:bc:8e:09:63:a5:ca:35:51:
         f4:49:44:3a:76:6a:64:c4:d8:75:c5:f0:bc:6c:74:9e:e8:3b:
         ee:b2:60:0d:bf:84:7c:5b:f2:a8:3b:1c:92:66:b1:a6:89:2f:
         54:0a:76:81:00:1f:12:ff:dd:50:86:2e:ce:2e:a5:b5:70:ae:
         50:2d:34:0f:71:59:6b:5b:6f:a9:e2:fa:bd:8f:45:16:80:5d:
         13:d6:5c:80:04:83:2a:24:ab:81:a1:14:7c:31:20:e3:33:92:
         2b:52:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:45:25 2025 by rpki-client