Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
File:                     B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft (raw, json)
Hash identifier:          lWgKgx3Ld9Kv9HBPnmlC2YWtuKBB6naA83kN+wKf4Bs=
Subject key identifier:   C2:D0:A8:AA:0B:1C:89:CE:39:10:AC:D1:E4:4C:B2:80:1F:5D:94:08
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       2C95C16C94CBA477E84F9218D57AAEFA531A2F9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
Manifest number:          0154
Signing time:             Fri 25 Jul 2025 16:39:09 +0000
Manifest this update:     Fri 25 Jul 2025 16:34:09 +0000
Manifest next update:     Sat 26 Jul 2025 20:10:09 +0000
Files and hashes:         1: 3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (hash: VhhP8rnZ6UCnRJRiCucXMy4ncmyKDFOTf8Wxmj/hPMI=)
                          2: 3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (hash: beeX4B6MyKuGmrciweMX6QiNJiZS0b30i2PbXxCMlEg=)
                          3: 3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (hash: 6PedwyVVFqTEjw2hbT1Tz2heBUwIRq91w7SbTmPftoM=)
                          4: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: oSQRk40W0JY8sSyVmz7gA7J13dK7vc4st2hm/+lgUdA=)
                          5: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: qNAnNxMLf23lX/Toa0RnHfzZ1GHt/QjrCvGeOjqM+AY=)
                          6: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl (hash: QDfM0cuQUFutun5vQFN5wL2F4sSL827wstreg9RF16s=)
                          7: 3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (hash: DJne4kBD+xNmWBwcSI8pOxz3/iDzRXKwxTctYsGvKzY=)
                          8: 3137302e38322e32302e302f32342d3332203d3e20323636343430.roa (hash: 6NEYOLRI6MRrTzbOfEps6WpFR9L/MZ1xNz0hgxoPQ+g=)
                          9: 3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (hash: +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:c1:6c:94:cb:a4:77:e8:4f:92:18:d5:7a:ae:fa:53:1a:2f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Jul 25 16:34:09 2025 GMT
            Not After : Jul 26 20:10:09 2025 GMT
        Subject: CN=C2D0A8AA0B1C89CE3910ACD1E44CB2801F5D9408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:da:06:de:4e:04:ac:51:c1:e3:f4:67:81:b3:
                    f1:ee:ca:b8:56:f5:20:ce:41:2c:39:e3:fc:b7:5a:
                    bb:21:6d:d0:2e:b4:3f:e6:e8:10:1f:d5:2e:c5:ab:
                    23:40:08:4a:6b:69:38:d3:93:09:6e:78:00:a5:fe:
                    d0:40:4e:a1:c2:e2:77:d2:bf:cc:ad:a5:65:81:ec:
                    8a:0d:2b:19:f9:c9:0a:e9:d0:1b:0e:8c:4c:52:66:
                    c5:ee:e6:2f:03:ed:31:a4:3c:d0:a1:a8:54:6d:00:
                    92:fc:4e:2d:1d:f2:90:fc:93:17:d0:2e:e0:39:94:
                    e2:40:1b:dd:c5:16:75:1a:8a:38:68:9f:fd:25:9f:
                    4f:56:1c:80:84:27:4e:6e:f9:1b:c6:db:88:dd:31:
                    61:ce:d0:9c:49:82:0c:a1:52:fa:d4:0e:42:22:2f:
                    1f:7c:3b:b4:f2:88:c0:9d:cd:2e:72:00:85:ab:8d:
                    80:03:44:26:79:57:c9:00:29:b1:86:d4:de:76:37:
                    d6:e6:fb:96:c4:b0:22:7f:68:4f:61:03:ce:02:4e:
                    db:0d:2f:ee:30:08:d9:31:ff:cf:30:76:ea:c7:09:
                    90:ff:b5:74:ce:74:f4:0f:1b:a8:ac:85:46:8b:fa:
                    ad:90:a3:12:12:d1:c5:71:1b:31:f3:b7:a8:e6:66:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D0:A8:AA:0B:1C:89:CE:39:10:AC:D1:E4:4C:B2:80:1F:5D:94:08
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:10:49:c4:48:f0:87:d7:3f:50:67:be:b1:47:13:3f:69:c1:
         68:cb:3a:13:a3:14:9a:0c:22:80:2a:04:5b:aa:7e:3b:fa:40:
         3b:4f:d2:51:ba:08:57:ab:e2:46:95:e6:22:a5:af:13:09:bf:
         d3:ad:af:57:89:a3:6a:2d:00:0f:da:48:14:de:23:5b:07:8b:
         2a:d5:a1:39:2b:7c:35:48:a7:80:4e:5f:46:99:16:f4:07:5e:
         3b:f4:6d:6e:82:6f:bf:38:b7:02:f2:5f:44:0f:1d:05:53:dd:
         3c:07:a1:5b:87:9b:41:a2:ca:9d:6b:2f:17:45:68:2d:22:d6:
         0c:cc:25:84:62:a6:44:a3:6c:d7:b1:d8:86:4a:c8:ab:08:c4:
         0a:fd:34:07:e2:00:ea:0b:25:a9:87:aa:64:14:a7:1f:bb:64:
         61:ac:55:ac:ae:67:9c:0b:24:9e:7e:a8:d7:db:b0:db:eb:c6:
         0b:0b:7b:dc:a4:5b:05:4c:3f:12:7b:b2:3b:3f:06:a1:04:f9:
         84:65:01:cb:25:8b:81:57:8f:ee:08:c9:a8:a0:9b:59:2a:6a:
         46:5b:da:37:3b:81:d0:e8:72:2e:88:cd:9a:5d:5f:64:a9:c5:
         ad:53:89:7a:17:13:51:6a:59:b8:88:69:50:79:fe:a6:58:26:
         ff:ea:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:04:55 2025 by rpki-client