Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
File:                     A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft (raw, json)
Hash identifier:          XqSSNSrW4OGGcR0xR7O/y0zrXDMLFV082P0RxkMqoJ0=
Subject key identifier:   DA:F7:50:DE:08:85:35:F9:42:26:3E:A6:E1:7F:37:4B:A9:9C:AA:8D
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       01831D66BAAD41DC1028FA672A48B6C4653EA81B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
Manifest number:          021D
Signing time:             Sat 26 Jul 2025 20:34:26 +0000
Manifest this update:     Sat 26 Jul 2025 20:29:26 +0000
Manifest next update:     Mon 28 Jul 2025 00:16:26 +0000
Files and hashes:         1: 3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (hash: fxp4+r5bI4TwG75ozKbnKtyfWh5TeKLkuULbOZBqhWM=)
                          2: 323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa (hash: uJAH6jRkldzjavl3BlQd294900kR7c5mVBFZQMLoFqo=)
                          3: 3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (hash: aIMX50++MRvywxLQ3t6jesPjkyDCIsNHIt+MPRF4TTI=)
                          4: 323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (hash: iYpaNUeA8J89nt77wG3ZXWX9zpxiaqGElNauL7cNi3E=)
                          5: A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl (hash: SPvbcXJH2euy+EvhzGOjthbsWp5SF5RHyrS7L4nVLDk=)
                          6: 3137372e38342e33352e302f32342d3234203d3e20323632353738.roa (hash: mqO9e2zGU39a5LLjmEexdBC674EQ9YArU5jggklOzOo=)
                          7: 323830343a3635383a3a2f33352d3335203d3e20323632353738.roa (hash: HOM+vggoZRZnSELrjnIsiuO8+fswV7/hT/y/Oy3hKw0=)
                          8: 323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (hash: DkfHQogdGXNjUjZ63waB5D391I/cftZbVcH3UHHgFSc=)
                          9: 3137372e38342e33362e302f32342d3234203d3e20323632353738.roa (hash: aN5IvJCnOlDd8lzgZdwvjNDZ9J7oh5bW9SN21d5VQf8=)
                          10: 3137372e38342e33322e302f32322d3232203d3e20323632353738.roa (hash: 2hv7hOcuHTKCojMGOziPk14njKLCj3OPF31Osmz5Dd8=)
                          11: 3137372e38342e33322e302f32342d3234203d3e20323632353738.roa (hash: X0iD1atVsTwMBLm6pc65Td8wKbMN7QvopeldfZjePxA=)
                          12: 3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (hash: VEnB/oVoNxtuhPOMCxDhxUutNWkYQBmYlvSAp4b97uE=)
                          13: 3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (hash: hT/VtbO6bsbMhxy9M8bb/kqOGbx+Q3T9OxevEt6OSGQ=)
                          14: 3137372e38342e33382e302f32332d3233203d3e20323632353738.roa (hash: WQpHptjd4tEPNxwZ9App0sa/zoJNAGRry113QvQ1z7g=)
                          15: 3137372e38342e33342e302f32342d3234203d3e20323632353738.roa (hash: qXloB9e8NXgABss8+yUjKHId7pJc1a4r8AzfexCTkpQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 00:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1d:66:ba:ad:41:dc:10:28:fa:67:2a:48:b6:c4:65:3e:a8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: Jul 26 20:29:26 2025 GMT
            Not After : Jul 28 00:16:26 2025 GMT
        Subject: CN=DAF750DE088535F942263EA6E17F374BA99CAA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:fa:e2:ec:93:c3:81:2c:6b:51:1c:70:3d:
                    fd:33:f3:b7:a3:99:6b:0f:a8:22:e5:9b:69:92:90:
                    1c:a7:cf:b4:90:f4:f4:9f:cf:96:ef:10:42:9f:cb:
                    2e:49:7f:24:b2:3e:94:c2:75:09:7b:29:4b:4a:71:
                    60:85:a6:d9:1a:84:00:18:0f:1a:c2:6c:7f:49:4f:
                    f9:7c:1c:25:88:07:f0:da:87:f2:e7:57:cd:0d:1b:
                    4f:cf:35:45:36:bb:37:df:de:69:4f:ea:69:cd:73:
                    66:f9:20:5f:cc:cf:fd:6f:40:26:77:dd:35:3f:2d:
                    27:7f:a2:44:2f:37:89:54:06:d3:97:11:00:45:c4:
                    81:91:67:99:54:a5:08:44:44:68:2b:71:01:57:b9:
                    a5:b6:91:e1:11:6b:0f:6e:75:b9:a4:24:19:54:6d:
                    6e:da:69:4d:d4:39:2a:9b:ec:5d:30:ec:de:a0:fe:
                    0a:3a:18:bb:26:52:8f:35:16:24:4b:29:0e:7b:2e:
                    00:94:8a:a6:8d:07:57:05:39:10:37:87:76:9c:ec:
                    c9:4b:35:ab:8a:b2:29:ce:16:27:47:5b:4d:4a:90:
                    94:4f:a2:12:83:e5:92:fa:17:b8:e8:b4:1c:6e:15:
                    8c:c1:b9:27:10:e1:d2:68:48:4b:fb:86:53:38:22:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:50:DE:08:85:35:F9:42:26:3E:A6:E1:7F:37:4B:A9:9C:AA:8D
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:e0:88:05:fd:12:1f:36:ee:ac:c2:8c:fa:6b:14:4e:17:
         61:9f:7c:85:b2:2d:19:c3:8d:f6:0c:c9:ff:b6:fe:c4:ba:a9:
         f3:fe:78:98:b5:98:c6:ed:d2:a3:46:83:05:00:d4:8e:13:7a:
         df:cd:e5:18:ff:89:be:18:ca:c8:6d:d8:2b:ea:2c:47:0c:b3:
         b0:94:22:2d:18:31:be:dc:e5:b0:28:e5:2a:6f:fd:9c:fa:81:
         5c:00:30:fd:9b:3c:b8:af:c4:18:b1:84:48:af:16:6c:57:bb:
         ee:0b:89:06:47:e6:c4:14:3a:82:c2:06:c3:b5:6b:21:69:3c:
         6c:40:95:b9:cf:32:1a:8a:f6:b5:08:d3:fe:0b:ef:40:9b:a9:
         df:92:bd:15:30:f9:e5:74:d0:72:59:15:86:19:a8:d4:b9:ef:
         68:8b:bf:c1:7c:94:64:70:f1:2e:b5:95:8a:91:58:fc:1f:ee:
         87:81:1a:ff:9f:e9:1b:d5:98:72:90:56:6a:f3:a6:34:a9:ab:
         57:17:f2:4a:47:09:b1:ba:1d:6c:f8:20:02:ba:dd:e1:8a:21:
         b3:0f:5d:5a:31:fd:49:17:01:18:86:24:36:d9:3f:7c:c1:3f:
         ca:e9:1b:c2:c2:50:1d:94:0f:ee:4a:3a:5d:73:03:4f:70:96:
         01:b3:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:07:39 2025 by rpki-client