Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
File:                     5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft (raw, json)
Hash identifier:          S+74F847jMlJMatoAdDGa7GE79S4gcF6lhwwaVkUM54=
Subject key identifier:   71:80:2D:84:B5:3E:CD:89:60:0E:33:F5:A9:85:9E:FD:3E:C4:8D:A8
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       7791121C69E09C9A2343A6E889FBC48E63B30EEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
Manifest number:          A2
Signing time:             Thu 24 Jul 2025 16:03:19 +0000
Manifest this update:     Thu 24 Jul 2025 15:58:19 +0000
Manifest next update:     Fri 25 Jul 2025 17:44:19 +0000
Files and hashes:         1: 3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa (hash: 51n3ayew2h/v7obVWbgYFaLOL9OhzyAWSOIqWxXONuY=)
                          2: 3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa (hash: CijY/x6+D8joAqsuz8leADzcy10p8WZ0yiPQhbQPUfE=)
                          3: 3138372e36302e3134342e302f32302d3234203d3e203238313533.roa (hash: 2/hRqsuQ/FHgaSrA97sa0U5IEyEyB8zh1AVYNTassEk=)
                          4: 3137302e3233332e36302e302f32322d3234203d3e203238313533.roa (hash: I3Edz0N7BkPOy03876avlis+79tYwC4DD47mOHaDbCI=)
                          5: 5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl (hash: B8i11EVJKnrMTjjd82It/iek2IaM7S/it2dLDwmTqSE=)
                          6: 3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa (hash: /sqM7c+yfY3dj6gOKT1QCBbetiEWE4aTZ9+G4l1+RoA=)
                          7: 323830343a316131343a3a2f33322d3438203d3e203238313533.roa (hash: sICBEbPkhEpTj1NGD/5Ilx722zpX8Op3r4MzgNRxF1o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 17:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:91:12:1c:69:e0:9c:9a:23:43:a6:e8:89:fb:c4:8e:63:b3:0e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Jul 24 15:58:19 2025 GMT
            Not After : Jul 25 17:44:19 2025 GMT
        Subject: CN=71802D84B53ECD89600E33F5A9859EFD3EC48DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:e7:da:14:30:5d:40:0a:1d:81:86:f2:91:
                    b6:b9:be:5a:35:b4:dd:2c:48:a4:28:78:ab:27:7d:
                    43:4e:e2:b0:5c:7a:09:40:7a:65:93:26:9a:f4:6f:
                    b1:d9:34:df:5e:04:97:7d:4f:89:08:1d:b1:a1:87:
                    07:6e:b0:dd:98:51:4f:ae:00:69:68:df:cc:65:14:
                    fe:40:83:84:e9:e0:ec:92:3c:2e:79:be:e7:48:73:
                    90:81:42:9f:32:20:a9:5d:51:48:56:5a:d6:19:ee:
                    ed:9b:ea:fc:47:4b:e3:e3:64:03:53:88:fb:f5:75:
                    9a:ac:14:c5:6a:c5:e9:2d:0c:66:f8:31:cc:4b:8d:
                    dc:6b:6d:fc:3b:99:c5:0f:73:ee:d3:ce:4b:c5:7b:
                    ce:24:76:c1:35:8b:63:ec:a6:11:95:90:26:da:3a:
                    b1:49:9e:56:11:84:f4:64:ea:56:6d:e1:52:f3:36:
                    89:8b:e6:c8:e6:7f:a2:a8:f2:9c:bc:c9:9f:4e:39:
                    27:e1:d4:7c:f3:6e:ed:2a:89:bd:31:58:22:1d:e7:
                    d9:b0:a8:61:f3:eb:77:77:34:65:77:65:6f:1c:09:
                    c2:90:ff:16:86:bc:22:8b:00:21:6c:1b:ce:34:05:
                    48:87:27:bf:06:78:3d:e5:53:d3:a5:73:cc:42:ea:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:80:2D:84:B5:3E:CD:89:60:0E:33:F5:A9:85:9E:FD:3E:C4:8D:A8
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:d0:2d:d0:be:48:18:77:b7:1e:72:a6:49:9b:4e:3f:7d:
         d5:d8:90:58:97:d2:4e:bb:29:e7:66:fb:05:ad:87:16:ff:af:
         88:5f:b1:e9:60:5f:eb:8d:8e:73:78:43:b0:15:71:93:62:b4:
         34:d7:86:2f:c7:50:14:75:51:2b:71:39:f5:a0:5b:08:6f:ee:
         43:2b:aa:5c:06:4f:b4:f5:17:2c:70:d6:9d:69:a0:35:78:05:
         7b:7b:93:c8:59:e1:5a:66:48:2d:d6:ba:8a:b0:65:0d:35:f3:
         cc:c5:2c:18:54:21:79:37:8d:0f:e1:c7:66:ac:1a:37:0d:91:
         32:dc:f7:b0:15:79:a6:c3:49:59:25:4f:4f:53:6c:41:8a:1b:
         2b:2c:31:08:cb:53:27:d4:1f:10:66:83:99:19:f2:24:aa:25:
         69:b6:42:6c:44:a2:48:3d:c1:51:3a:88:6c:ad:8a:d0:20:2c:
         e7:06:19:7f:12:e5:df:7a:1f:6f:5d:56:28:3c:be:ea:5d:d4:
         f5:50:27:49:2b:d3:d1:44:cf:e6:de:ac:75:4e:2d:c1:76:36:
         0a:78:af:58:ce:69:db:b2:45:36:0c:5f:9f:ae:e0:58:29:61:
         a3:1b:90:96:b4:4a:ba:0e:c3:a2:5c:35:0b:a9:9c:e5:16:c4:
         e5:c6:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:06:42 2025 by rpki-client