Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
File:                     2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft (raw, json)
Hash identifier:          +fl/hzcXm0G1Z/8o/sL/5W7rhtBQhag2YkKdCwiE0IE=
Subject key identifier:   EE:45:7E:81:A8:A2:F7:09:54:9A:1A:81:55:39:E8:01:AF:E8:4A:34
Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE
Certificate issuer:       /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
Certificate serial:       42B14DFA6695DDEA305D7F7620F47DCF2C966373
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
Manifest number:          027D
Signing time:             Thu 24 Jul 2025 16:13:14 +0000
Manifest this update:     Thu 24 Jul 2025 16:08:14 +0000
Manifest next update:     Fri 25 Jul 2025 17:16:14 +0000
Files and hashes:         1: 323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (hash: DJ6pO5xL0y0myCGGnaxN29PFLO6qKHeYi6tb6Erlx5c=)
                          2: 34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (hash: sKEROWi5SvX7Dw54TZAizgA2/OCs3EGBz5Rt5H3jLx4=)
                          3: 2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl (hash: XKp2VcPRlVMHhjdaR9UpI7fkRO1shdiKtCaMiVyFeI0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl
                          rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 17:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:4d:fa:66:95:dd:ea:30:5d:7f:76:20:f4:7d:cf:2c:96:63:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
        Validity
            Not Before: Jul 24 16:08:14 2025 GMT
            Not After : Jul 25 17:16:14 2025 GMT
        Subject: CN=EE457E81A8A2F709549A1A815539E801AFE84A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:e4:29:2f:e6:99:4e:fa:43:bf:6f:fc:8c:
                    9c:58:bf:33:b6:ed:a4:c3:85:a0:c1:73:fb:0d:3f:
                    43:72:3d:12:95:fe:b6:b5:15:4e:81:4b:a0:d8:fa:
                    2d:9a:57:8f:2e:6e:56:e7:49:06:bf:e2:18:98:da:
                    14:cf:13:b7:14:4f:00:9f:3c:40:9e:ca:f7:1f:f1:
                    27:ad:55:8d:9c:c9:97:d2:9d:8a:fd:05:b6:90:7e:
                    8d:e0:84:ed:ee:f6:d4:e1:cd:e8:42:f7:b6:bc:10:
                    8e:e5:5c:d4:30:92:fe:91:76:7a:2b:5f:3a:3d:4e:
                    0e:6e:5e:7a:48:d3:1a:8f:cd:e4:49:cf:13:08:06:
                    ef:a6:be:90:84:f2:73:57:b5:0b:06:77:84:99:f3:
                    ac:6d:a7:76:e7:71:e8:f9:c4:f8:3b:18:5f:1a:b8:
                    0c:94:4c:b4:5f:fb:ce:3c:b4:2c:0e:1c:91:87:bc:
                    63:0a:a4:24:b2:3a:97:6d:6c:1b:c6:81:d4:6f:8d:
                    b6:02:a9:7b:70:78:fd:c0:0e:21:ef:5b:1b:6b:90:
                    53:1c:a1:8c:c0:65:83:0a:fa:48:87:a4:40:b8:5f:
                    44:8c:7a:96:18:9e:9e:fe:b7:51:a3:90:40:b6:30:
                    f7:6c:cb:bb:8e:f4:97:97:ec:25:c8:44:e9:e4:66:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:7E:81:A8:A2:F7:09:54:9A:1A:81:55:39:E8:01:AF:E8:4A:34
            X509v3 Authority Key Identifier:
                keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:de:b9:3d:99:2e:28:fb:cb:a3:4c:1d:c6:93:0a:e3:25:
         28:66:37:ca:4a:d4:78:e8:e6:e8:45:f6:ab:93:1b:ab:09:59:
         7e:19:60:ed:d0:cd:33:b9:bd:ec:b5:87:57:6a:dd:da:e6:2a:
         83:56:c5:1e:97:bd:96:d1:ce:0f:43:5b:4d:fc:83:ab:79:af:
         b8:4d:a1:2b:ec:0e:cb:0c:d4:a1:59:14:ec:a4:a9:f8:d0:d4:
         fa:aa:b1:35:99:f6:84:48:1c:8f:89:e4:f9:6f:09:b4:28:ea:
         4c:a5:b9:0e:70:84:bf:77:56:ca:cb:d4:a8:cc:eb:fb:97:c5:
         31:e4:1b:28:6a:69:2e:22:85:c7:5c:4d:21:61:f3:02:bd:6d:
         7a:c9:8b:e6:be:c8:ba:1e:a0:96:14:61:aa:b6:f9:87:8e:96:
         19:ca:48:86:ad:ce:95:73:15:22:ed:e1:04:6b:74:7a:d7:ad:
         4f:6c:5c:3d:fe:13:cc:74:b1:d6:2c:02:ed:4a:24:f7:70:dd:
         22:57:b7:ba:be:fa:e7:ee:2f:b5:de:36:1b:48:e8:3f:7e:8c:
         eb:30:79:99:99:18:56:25:8f:17:c7:4c:24:7d:8c:48:af:5e:
         ac:67:5f:7b:5e:10:54:6d:33:48:c3:8a:8f:8b:2f:05:bb:d7:
         78:7f:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:06:22 2025 by rpki-client