Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
File:                     501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft (raw, json)
Hash identifier:          tWcHWcnmbPmZDxAWJOQIZZGsy8bRhYk1bc/2qoHpF/s=
Subject key identifier:   1B:35:6B:52:62:44:3C:24:F8:0A:05:86:6A:2A:01:55:C2:95:B3:B0
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       24867EF39B7FA9186248ECEDA5286CC69EDC6621
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
Manifest number:          15
Signing time:             Sat 26 Jul 2025 23:13:57 +0000
Manifest this update:     Sat 26 Jul 2025 23:08:57 +0000
Manifest next update:     Mon 28 Jul 2025 00:39:57 +0000
Files and hashes:         1: 3138392e33382e38302e302f32302d3234203d3e203238323939.roa (hash: KTnhZQL8mHtUyQVe/ZvcbQDe6yGvn9Y15GxmGucLFA0=)
                          2: 3137372e31322e3136302e302f32302d3234203d3e203238323939.roa (hash: wzMBdr6EwrUsZqEfo5mLwMHTNR2yKvYGJX+fGkUDGdI=)
                          3: 501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl (hash: 5zgHKHLvZxNciEI2WAYC9iMa34AnJeO0K50fcT7AMGo=)
                          4: 323830343a31303a3a2f33322d3438203d3e203238323939.roa (hash: howAci4IKpjJsvvBLqC0MVdZ8RTUzVjJxeXYHsCwQ8o=)
                          5: 3139312e362e3139322e302f31392d3234203d3e203238323939.roa (hash: owdjKbu90Zgm6TEzkHhi2+RGHoSYwmhpeRdixQgwUbQ=)
                          6: 3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa (hash: WOxkFZ1zqCvjFetxzwuAtznsRoz8jxsbadLVzYTIAP4=)
                          7: 3138372e312e3132382e302f32302d3234203d3e203238323939.roa (hash: V7EAuMogYrkxDDR/F5usTwpPSRoVHY5CLxQuIeyNNfM=)
                          8: 3139312e362e3231312e302f32342d3234203d3e203238323939.roa (hash: V4LPNRn4MMc0IO7NC/W+yP+zqdFDHFpe1g5h0nja6HY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 00:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:86:7e:f3:9b:7f:a9:18:62:48:ec:ed:a5:28:6c:c6:9e:dc:66:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Jul 26 23:08:57 2025 GMT
            Not After : Jul 28 00:39:57 2025 GMT
        Subject: CN=1B356B5262443C24F80A05866A2A0155C295B3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:96:a6:73:e2:9d:39:41:36:77:4f:42:26:
                    3d:ad:e3:38:67:a0:0b:18:44:24:eb:c7:9f:5e:11:
                    d8:92:b2:35:87:a6:89:ad:e0:7b:a9:c1:81:8e:cd:
                    c4:76:ed:d4:63:a6:bc:00:1f:09:af:90:47:8b:0f:
                    cb:7a:1c:73:55:d0:02:ad:ec:46:b9:30:90:84:29:
                    ea:7d:bf:7d:ee:85:c9:57:ee:59:c9:46:70:ee:3c:
                    6c:4b:57:93:ad:6c:01:17:db:ca:0a:e1:d8:33:d3:
                    ba:6a:f3:cc:12:fe:41:66:bc:4f:74:b6:ed:db:f4:
                    60:a9:02:6d:59:35:1c:c5:16:73:1b:e7:40:4b:68:
                    b8:dc:5b:62:c4:a0:23:a5:3d:d5:f1:1e:75:f2:3c:
                    03:ec:d6:2f:0a:a2:03:58:01:90:64:fb:7d:5b:1a:
                    61:2f:f7:b0:46:cd:3e:ca:15:a8:16:8d:d7:69:04:
                    f5:ec:d6:2a:4b:2e:d1:cd:13:a4:56:67:e3:bc:62:
                    a7:c7:dc:25:04:26:da:08:99:8a:14:4c:ff:34:44:
                    63:97:ed:22:14:2f:7f:81:ca:44:98:69:73:86:e4:
                    c3:7b:05:ef:55:ca:31:70:e5:16:c1:65:83:30:10:
                    76:0b:3c:cd:85:f5:4e:c4:ac:6e:dd:5a:da:99:87:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:35:6B:52:62:44:3C:24:F8:0A:05:86:6A:2A:01:55:C2:95:B3:B0
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:75:67:ca:e8:9a:94:b3:14:78:d3:1d:34:81:e0:2d:1b:
         c9:8f:5b:96:5a:f1:a5:e3:e4:6c:3b:11:5c:8b:9f:41:be:bb:
         b8:27:74:ad:dc:bf:0f:41:f0:dd:8e:7c:91:69:b1:ce:93:27:
         cd:8c:70:15:c8:89:2e:f1:5c:a9:ee:20:36:4b:a8:00:17:0c:
         29:e9:cc:3d:03:d5:19:86:96:dc:ea:a2:cf:0a:a1:34:32:6a:
         7b:cb:5b:f7:d5:cf:70:a4:04:1c:89:41:d0:ef:96:d2:b3:75:
         8d:55:50:98:4a:36:e3:2d:dd:e9:41:e0:44:1f:78:e8:5d:72:
         98:04:a1:21:1b:c7:99:32:b6:ce:02:d7:1c:f6:61:43:d8:9e:
         f4:61:f8:f4:cb:f8:57:6b:2c:83:73:bf:ec:81:e4:4d:be:63:
         40:1a:7f:0e:f8:db:b6:3c:ba:04:c0:43:1a:f7:90:3b:9f:ab:
         92:a3:37:b6:86:55:7a:38:1e:9f:ba:d8:4a:d6:50:55:de:4c:
         70:d9:3b:bd:87:fb:35:ea:8e:70:29:13:b4:c6:33:c3:30:3d:
         69:18:2d:7d:e6:9c:52:ef:e8:8e:50:0f:b4:70:9f:35:8d:1b:
         db:cc:13:e6:8e:27:59:4f:2a:e2:a3:c0:26:04:11:61:e3:e5:
         e7:13:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:46 2025 by rpki-client