Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
File:                     470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft (raw, json)
Hash identifier:          oqG46Anu59U36Rcn+ce58W+Rv6r8+cQEkTg6mrLLElk=
Subject key identifier:   42:FE:15:DF:27:E8:2E:84:A6:92:46:B3:BD:73:F3:11:53:80:8B:C4
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       2913EBB5C7F374B9B0B34FC4B7E13BEB3301AE6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
Manifest number:          032F
Signing time:             Sat 26 Jul 2025 01:29:22 +0000
Manifest this update:     Sat 26 Jul 2025 01:24:22 +0000
Manifest next update:     Sun 27 Jul 2025 17:26:22 +0000
Files and hashes:         1: 323830313a38323a3a2f33322d3438203d3e203130383831.roa (hash: R5X7TgUXCHd4SY4o06VYZ2ngQGnnUyNflXm6oDMtsxw=)
                          2: 3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (hash: u4bLjuVXDa9Rq9UR54870oC8J8+TetV0EboyJh9CCTg=)
                          3: 3230302e3133342e302e302f31362d3234203d3e203130383831.roa (hash: SjGEF7jl/SrzMPfuWamc6DOzm/lQD5V2YArTJ1qeZ1E=)
                          4: 3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (hash: EqD3FLMgDqM/N5k54C5xgd9XjW29tzS0P2lCbP0478M=)
                          5: 3230302e31392e36342e302f32302d3234203d3e203130383831.roa (hash: /gc+Hp8hFYY6cpjhxSaE5ZKs/x/81jP9mgHggoODu6Y=)
                          6: 3230302e3233362e302e302f31392d3234203d3e203130383831.roa (hash: OyN30w34v+XEYJuBDNPpHRW8FgoEgFZORPe14ApOCOM=)
                          7: 3230302e31372e39362e302f32302d3234203d3e203130383831.roa (hash: Dd0MNbIQ9MHzANoy93/V9XUFZhqzUx1sUtab3MJ5vQQ=)
                          8: 470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl (hash: 09GuYhODaZGGmQMQjqcqhTnuWOqeh/5Vrdzd3ERvcts=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:13:eb:b5:c7:f3:74:b9:b0:b3:4f:c4:b7:e1:3b:eb:33:01:ae:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Jul 26 01:24:22 2025 GMT
            Not After : Jul 27 17:26:22 2025 GMT
        Subject: CN=42FE15DF27E82E84A69246B3BD73F31153808BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:0e:06:a7:71:2f:50:75:bc:c7:79:42:d4:
                    b8:8c:0d:9c:66:2b:8a:61:55:b1:31:50:64:7a:69:
                    44:41:ea:7a:db:04:2d:df:18:ec:8c:87:bd:29:d9:
                    db:eb:23:21:d9:31:64:e5:d4:08:36:2a:30:70:81:
                    64:1f:14:53:3b:51:81:40:1a:84:11:27:3d:12:7b:
                    c5:74:1f:4f:8d:d9:43:33:f3:95:8d:f4:af:c2:ad:
                    21:63:9f:8a:61:91:01:66:fd:5e:7c:d2:10:86:39:
                    49:99:b0:2a:2d:b2:f5:39:44:a5:9e:ca:d0:7d:58:
                    ec:c3:90:ec:6d:6b:b9:41:af:bc:b6:f7:f6:20:e0:
                    6b:5e:90:8e:c2:02:6d:28:a1:cc:0e:2a:35:b7:b5:
                    04:49:02:34:d9:8a:01:e6:e9:3a:57:be:6b:ad:e9:
                    00:fd:96:f1:a9:de:94:3a:ab:b2:e7:82:9d:78:f8:
                    90:99:18:ae:2f:32:ee:60:1d:72:85:30:95:0d:e1:
                    ab:1c:6d:56:67:7c:0d:a3:96:2b:d0:85:24:bc:b8:
                    47:fe:60:4d:e8:61:f9:59:c4:6b:47:f9:45:96:43:
                    ad:1c:87:94:d0:40:79:71:72:de:37:e0:60:23:69:
                    c3:4b:b8:0e:43:e1:e4:77:21:75:08:00:67:45:7b:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:15:DF:27:E8:2E:84:A6:92:46:B3:BD:73:F3:11:53:80:8B:C4
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:89:57:79:8d:71:21:34:df:19:72:89:cf:a8:de:82:c5:b8:
         b7:f3:67:d1:19:43:e6:1c:95:28:2d:cd:d3:db:5c:66:41:98:
         4d:00:62:2f:dc:a8:77:22:4c:19:ac:80:78:3a:c9:56:1c:e1:
         05:55:d0:a4:a8:b4:71:67:cf:aa:79:9a:46:73:8d:d8:10:ec:
         d0:ad:c5:2c:4b:dc:86:01:e8:46:a5:a6:cf:17:36:11:75:bf:
         b5:39:ed:cd:30:25:5c:b1:bf:0d:5b:bf:da:62:11:05:6a:36:
         cc:51:ac:96:24:18:85:01:c5:df:f9:52:2d:bc:b4:c2:26:3b:
         bb:f1:0e:35:51:9a:2d:2f:59:9f:5e:d6:84:37:e2:ff:4b:55:
         c6:11:e9:27:18:92:bd:8c:17:37:f9:00:2c:0b:8b:99:c2:6a:
         2d:f4:39:7f:a2:d4:27:41:f3:cc:68:57:c9:b8:8e:3d:38:51:
         38:6b:56:3d:6d:3b:02:cb:b8:a7:f2:20:37:26:57:cd:9b:4c:
         23:f1:45:82:2b:35:38:88:ce:65:68:de:0f:c2:8d:16:ab:2e:
         d6:ad:0e:99:14:42:82:d6:07:77:32:bc:0c:12:45:3d:e3:8c:
         cf:f0:a2:f6:bc:ea:94:d0:52:1d:e6:32:f9:01:e4:1c:3d:bf:
         fd:27:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:51:09 2025 by rpki-client