Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft
File:                     D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft (raw, json)
Hash identifier:          F/BAcYf3MWcws0zz6kw0yY7ZSEfgFVd3Iobg9nGZgDw=
Subject key identifier:   03:BA:06:09:D3:5D:7D:FC:5E:7E:D1:35:D2:0E:D6:AE:8C:26:26:0D
Authority key identifier: D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13
Certificate issuer:       /CN=D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013
Certificate serial:       0C41BEF3F687E23D8F0E38CA4FB84A258A762315
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft
Manifest number:          A2
Signing time:             Thu 24 Jul 2025 09:03:16 +0000
Manifest this update:     Thu 24 Jul 2025 08:58:16 +0000
Manifest next update:     Fri 25 Jul 2025 11:55:16 +0000
Files and hashes:         1: D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.crl (hash: i48gOlrRcHHzw8ZL3TgSNKreao3XJuG7zunjWuTj8dE=)
                          2: 323830343a386632633a3a2f33322d313238203d3e20323733343733.roa (hash: 4f76JQjpEY1MaxVzPZBItpAd1UAWZ+zbAWnzj1jebE4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.crl
                          rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 11:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:41:be:f3:f6:87:e2:3d:8f:0e:38:ca:4f:b8:4a:25:8a:76:23:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013
        Validity
            Not Before: Jul 24 08:58:16 2025 GMT
            Not After : Jul 25 11:55:16 2025 GMT
        Subject: CN=03BA0609D35D7DFC5E7ED135D20ED6AE8C26260D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:bd:24:87:53:5f:87:6c:ad:e9:85:1b:40:
                    ca:65:df:d4:e0:a1:08:df:87:b5:59:46:8a:db:46:
                    52:0f:61:1f:fe:08:9c:b3:f2:9f:56:71:0a:cb:e9:
                    8b:18:f2:f7:8e:ac:5f:72:ff:e8:4e:ac:5f:d0:c4:
                    7c:39:5c:07:43:1a:7b:50:e8:0b:85:a0:79:ac:64:
                    45:db:1b:7b:a2:7e:cf:33:24:ed:a0:bf:fa:10:a1:
                    30:f9:12:91:12:ed:8c:d2:97:c9:4d:ca:25:08:d9:
                    d1:87:6b:71:87:92:2b:6b:78:a2:27:f8:dc:84:1f:
                    c4:87:e8:8c:ea:8b:1c:19:ff:70:fa:d5:4a:7f:2b:
                    11:93:a4:d1:e1:ac:17:48:56:57:0d:28:8e:22:a4:
                    42:dc:65:85:f1:58:19:d3:ca:ab:fa:a7:56:e7:44:
                    45:3d:dd:d9:49:49:2e:e4:a4:69:67:44:36:d8:fd:
                    88:fc:8f:0d:ad:53:36:61:4e:a3:05:1a:80:1b:a1:
                    c4:b2:e2:80:2a:95:a4:19:50:ae:13:42:34:82:41:
                    aa:ba:48:da:50:28:68:b3:76:e6:22:76:87:63:bd:
                    c4:0b:28:0b:51:5b:a7:e9:2c:b5:15:57:00:91:8d:
                    09:48:2c:08:60:eb:ad:35:cc:a5:ee:35:e2:24:1d:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:06:09:D3:5D:7D:FC:5E:7E:D1:35:D2:0E:D6:AE:8C:26:26:0D
            X509v3 Authority Key Identifier:
                keyid:D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d4:fb:bf:05:93:d2:ff:0d:3b:cf:9b:76:c2:21:7f:8b:fa:
         59:d8:d8:29:dc:9c:1c:84:68:ae:ff:c5:a7:b3:50:d7:05:ab:
         a9:93:cb:4e:ff:cb:6e:6a:fb:a4:ec:f4:ab:51:db:b2:4e:87:
         df:03:24:ff:60:e4:5b:f8:22:9f:2f:6e:bc:68:b1:1f:36:8e:
         8f:27:0d:41:09:9e:d3:e3:10:db:57:2a:8b:5a:b3:ef:6f:19:
         bb:13:58:dd:8a:8e:dd:3a:01:4e:41:4a:a9:1e:2f:9f:ad:9e:
         de:fd:dc:0e:77:cc:3a:be:06:c3:3a:43:78:84:29:f1:40:ea:
         5c:9b:b1:b3:08:6c:41:a2:b4:fb:11:ed:77:23:f9:8e:33:da:
         48:96:89:f7:44:ba:3e:a1:f6:66:d1:6e:df:0e:55:04:12:00:
         39:0b:a3:8c:33:48:f7:e4:0f:cd:e8:9b:7f:a5:43:f6:ca:00:
         c8:d0:92:da:13:4d:48:fe:4b:d5:3c:1a:7c:fb:f6:42:9a:af:
         15:41:67:b5:b7:d9:6c:57:1c:0f:79:09:c2:04:0b:64:13:11:
         05:08:0f:f1:12:d2:5f:86:97:4b:82:95:3a:17:82:be:b4:8d:
         d3:33:d4:68:de:c4:b2:b5:41:03:b2:75:3b:c7:99:fd:6d:8d:
         d2:92:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:31:26 2025 by rpki-client