Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft (raw, json)
Hash identifier:          CnJj6rQw5RfwA3o49bMm07ZbRMwoft15xJcALNn7L2g=
Subject key identifier:   0B:CA:0F:C8:35:D7:FB:E6:F0:48:1C:6E:DA:C8:A2:39:66:7D:E9:9A
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       16282BBE19AC2B3AB065DC15057DFAE01FF48DF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
Manifest number:          028C
Signing time:             Sat 26 Jul 2025 07:13:04 +0000
Manifest this update:     Sat 26 Jul 2025 07:08:04 +0000
Manifest next update:     Sun 27 Jul 2025 09:48:04 +0000
Files and hashes:         1: 34352e3233392e3232342e302f32322d3234203d3e203631383035.roa (hash: dCwgks9kz+PtKonoUYMuaJ/xBVsseEIveXSK48b+vek=)
                          2: 323830343a313939383a3a2f33322d3438203d3e203631383035.roa (hash: Qk7ja/D0UnEABlntWPvNXxeAnxQmmqTk79+LRpxGwiA=)
                          3: 3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa (hash: FbA7Md3FlU43upzx21RM/HOPJeIXcMSZyumJsm6sz8E=)
                          4: FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl (hash: sEiO4atGj5vjah6aAzxDgnIGViPmwVC6VqdLRpxc6jQ=)
                          5: 3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa (hash: vICwpsDgzmHAq6d4aB9nm8j21S6Qzk2xwhEfVV+wbW0=)
                          6: 3137302e3234372e38302e302f32322d3234203d3e203631383035.roa (hash: yCzuLmb/Tt6KFd57YY2nX7jQhrMJcLtBuCJAgEPyWp8=)
                          7: 3137302e3234362e33322e302f32322d3234203d3e203631383035.roa (hash: WnVJTcCQumCE9fQ7Vws90QAt2HsWCykqOp9Cx81XI8M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 09:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:28:2b:be:19:ac:2b:3a:b0:65:dc:15:05:7d:fa:e0:1f:f4:8d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Jul 26 07:08:04 2025 GMT
            Not After : Jul 27 09:48:04 2025 GMT
        Subject: CN=0BCA0FC835D7FBE6F0481C6EDAC8A239667DE99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:46:82:ba:0b:91:65:63:1d:cd:8e:27:e2:
                    3d:97:41:8c:e2:78:38:24:14:32:d8:40:47:bb:2f:
                    94:18:b9:f8:7e:01:43:96:da:7d:93:62:04:a6:ae:
                    c6:ef:03:3e:d1:f6:4e:2f:66:c6:50:67:bb:6a:fa:
                    60:ac:e8:28:4e:b1:60:5a:d8:74:f4:c3:38:a6:dd:
                    f9:72:ee:7f:a5:47:12:26:f0:22:40:c2:11:74:04:
                    fe:f3:87:e4:29:0a:e9:5b:b7:62:64:da:47:78:3e:
                    bf:61:c7:32:cd:a4:cb:66:45:10:bc:f5:de:47:a7:
                    f6:62:5a:30:8e:56:f6:4f:6b:2b:80:db:82:79:2c:
                    63:c9:43:15:0e:9c:1a:13:76:b5:4c:35:dc:18:b4:
                    3d:4a:d2:0e:50:31:08:6f:13:54:06:70:8a:7d:e2:
                    a4:e0:fa:f7:8e:d5:aa:5f:7c:03:23:a8:49:c5:31:
                    47:a8:43:5a:bf:ba:a3:80:fb:9e:a0:a6:31:fc:61:
                    86:ed:24:62:39:56:16:a0:0e:db:f8:54:c7:a9:93:
                    d0:b9:96:b4:47:c3:3f:c3:55:e0:32:d1:6b:00:15:
                    12:5e:1c:f2:cb:64:4e:a5:93:81:04:6f:e3:a5:f1:
                    f6:2a:30:c5:96:3b:94:8b:f0:3c:61:9d:e5:ab:ea:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CA:0F:C8:35:D7:FB:E6:F0:48:1C:6E:DA:C8:A2:39:66:7D:E9:9A
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:05:c7:01:20:a2:bf:ae:0e:db:b7:44:e6:dd:6c:dc:72:
         85:88:ed:42:b0:1e:10:a8:c8:6a:68:8b:6d:c9:9c:e4:08:63:
         0b:9f:e2:ad:7c:87:2c:69:66:b8:f4:32:f2:4d:81:df:99:6a:
         cb:9b:86:18:c2:fa:29:e6:7d:b1:2d:11:cc:a0:ba:5a:c8:aa:
         a9:0e:1e:9c:32:98:7f:00:e5:df:d6:55:0c:23:28:e8:73:38:
         68:8a:e4:01:79:2e:89:f7:d9:e1:57:a7:f1:dc:18:bd:b9:c3:
         5b:aa:54:29:c0:b5:3c:97:70:db:a0:4e:8b:02:b1:93:fe:7b:
         29:09:6e:da:c7:06:57:73:c7:cc:03:d0:30:1f:cd:09:5e:b6:
         cb:3f:32:6a:8f:9c:13:ae:ba:e8:4c:56:d6:4c:b4:83:c8:5d:
         19:33:e3:14:25:7b:6f:7b:35:95:d1:5e:78:69:28:3c:bd:07:
         d5:52:07:6b:71:3f:58:39:c6:57:68:d8:dd:a0:28:2a:d8:cb:
         e4:b4:46:46:c7:8b:03:a3:69:00:e3:45:6d:36:f2:57:a5:73:
         b1:a1:76:e7:ce:0d:ed:cb:e8:6f:e7:47:af:68:4c:e8:05:33:
         da:d9:14:d9:37:66:4e:20:0f:4e:90:76:01:67:d6:e4:84:de:
         74:20:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:49:20 2025 by rpki-client