Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File:                     CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier:          5WNAs97P2FWndlLAYG2bULV4+hrCigAs0Zq/DiNaNCQ=
Subject key identifier:   FF:44:59:5A:C8:BD:DE:9B:49:A1:E4:5B:BD:8E:A3:8C:A9:77:8F:93
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       552969FB594230DCF226F1A81970725D8ECF7CF6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number:          02CE
Signing time:             Thu 24 Jul 2025 11:10:00 +0000
Manifest this update:     Thu 24 Jul 2025 11:05:00 +0000
Manifest next update:     Fri 25 Jul 2025 11:10:00 +0000
Files and hashes:         1: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=)
                          2: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=)
                          3: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=)
                          4: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=)
                          5: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=)
                          6: CA2ED340034D0368230850867C30E245990118A2.crl (hash: UyHtZT2BrOdYbBS29cBHCSwXYE4IMO6gln9nEV4eLjc=)
                          7: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=)
                          8: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=)
                          9: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:29:69:fb:59:42:30:dc:f2:26:f1:a8:19:70:72:5d:8e:cf:7c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Jul 24 11:05:00 2025 GMT
            Not After : Jul 25 11:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2f:05:82:85:dd:90:26:65:68:38:7b:44:4a:
                    45:a2:c2:de:9f:e4:b3:58:3d:23:e4:42:92:44:6d:
                    fc:65:a1:d6:2a:8c:66:cb:92:e4:c2:8b:23:f3:75:
                    30:32:ab:7d:a9:a7:28:74:0c:df:79:86:7e:0a:3e:
                    d3:46:b0:8d:0b:5d:dc:6a:fd:75:2e:e1:95:58:07:
                    7d:0c:e7:e9:b3:77:0d:79:e5:ec:fc:91:b6:16:f6:
                    61:c2:9f:f6:e2:75:26:2d:ee:6a:c3:dd:8b:46:d7:
                    55:e2:cc:1b:e2:5a:65:e4:f2:cd:75:9e:2e:e7:e9:
                    a6:80:6a:66:37:2e:a0:0f:a6:16:f7:e6:91:9d:9a:
                    31:52:0d:ca:b5:d0:f9:bf:06:f6:d4:fb:f1:2c:5b:
                    6a:5d:71:c3:fe:a3:4a:ba:f2:08:d0:f9:b0:a2:11:
                    d0:ee:58:a4:22:94:f8:f9:df:b2:0b:9e:35:fd:00:
                    47:ee:92:68:84:9a:d1:ec:01:b8:5f:8e:ef:98:41:
                    e5:66:da:fc:5b:43:51:3f:6d:78:1c:f2:e9:4f:66:
                    20:51:0f:b6:43:0f:b8:0a:a4:83:be:03:d2:64:6c:
                    55:00:9a:8a:e1:17:f1:60:6b:f5:92:50:6a:2a:db:
                    56:5a:e2:07:17:38:77:be:a1:ae:a0:96:59:aa:5a:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:44:59:5A:C8:BD:DE:9B:49:A1:E4:5B:BD:8E:A3:8C:A9:77:8F:93
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:dc:ed:24:7c:02:fe:3b:01:c3:d4:3f:c6:a8:79:1d:8b:d2:
         88:41:74:6f:6a:97:f5:8b:ee:90:7b:c0:d2:23:a5:d1:00:be:
         2d:0a:da:85:4d:55:a9:af:56:4e:c6:72:0c:04:4f:1c:37:26:
         30:5b:96:aa:b4:4d:52:19:16:de:e9:19:d5:bc:21:ed:dc:17:
         3d:df:45:76:fa:21:bd:1e:0a:bf:89:9d:9d:bd:cc:48:b8:3f:
         de:f3:18:a8:0c:01:7b:c4:1e:41:81:00:a5:76:8d:c8:a6:d0:
         d3:fc:a5:80:86:c5:c6:13:fe:69:b2:86:f9:0a:57:f4:66:48:
         6c:ee:78:23:a3:36:25:8a:a8:ac:5f:9d:6f:8a:c0:45:d1:c6:
         85:9c:31:a0:dc:e4:f4:3d:0e:49:a9:ad:c6:68:d6:d3:20:d7:
         8d:17:a5:48:8f:55:9c:5e:06:ed:87:f9:ca:fe:2a:95:f5:2c:
         a8:46:ba:bc:42:1a:83:8a:c7:ba:84:6e:01:e3:0b:84:be:aa:
         0d:3c:ff:82:ba:20:27:88:21:b6:fe:58:b1:75:d8:0e:50:6c:
         28:2f:cc:1a:bd:9d:89:e0:36:0c:c5:1e:73:8c:66:9f:b4:ab:
         17:d3:5c:ef:b6:cb:b3:1d:2a:96:3f:35:ff:96:8c:96:ad:b4:
         6d:f9:28:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:22:28 2025 by rpki-client