Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
File:                     C8232E7ADA2149C400868144F5DA83930BC26309.mft (raw, json)
Hash identifier:          GOfaygyHYbZ769teiVyC4NiecVqlwGiduZ7wxpeon+A=
Subject key identifier:   E2:88:82:00:A6:32:2E:2D:6A:D3:93:D7:5D:74:75:2A:A9:F5:6A:71
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       348A2160B042292A73768B73E7A72ECD8E7C6057
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
Manifest number:          028E
Signing time:             Fri 25 Jul 2025 16:41:13 +0000
Manifest this update:     Fri 25 Jul 2025 16:36:13 +0000
Manifest next update:     Sat 26 Jul 2025 16:41:13 +0000
Files and hashes:         1: 3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa (hash: GbDffagYs00MWWMDpBe+Y55qROzfvqImbS8RGzdLSFU=)
                          2: C8232E7ADA2149C400868144F5DA83930BC26309.crl (hash: 8VWEO8jrjjrz5z5OjFSTSIwQ0IGwzy2mMlEGKECBrBQ=)
                          3: 3137372e3132392e3138392e302f32342d3234203d3e20323632353636.roa (hash: /H/piIBz7IRJHrwMimvmUQEWcRvrPXm6yvpdHuA5G1k=)
                          4: 3137372e37332e37342e302f32342d3234203d3e20323632353636.roa (hash: ESQh5mc6WYp8uXBHHudBIWppr31lzcWMbbdm9yeqOdk=)
                          5: 3137372e3132392e3139312e302f32342d3234203d3e20323632353636.roa (hash: SjfLnlM63+3+L8HzDVvXAfz41h8u2iEQVAo4ELvs5Ao=)
                          6: 3137372e3132392e3139302e302f32342d3234203d3e20323632353636.roa (hash: KTJMqGpsbBLj1blMeGysQ4Z5a8LuGKp5SvIO4WZJ7CE=)
                          7: 3137372e37332e37352e302f32342d3234203d3e20323632353636.roa (hash: 5E7yqqpBWEtI2ZWXwmaIt5KC1SuUjAqV4zmGHCtPjWA=)
                          8: 3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa (hash: 4aX2Ev3aA8xG1TQFF7ZNa8sn8qOYGfrY5eN/RUMjwnc=)
                          9: 3137372e37332e37322e302f32322d3232203d3e20323632353636.roa (hash: oUZTfm9JTnYG9XGm3pVzGIF1rEQHWx8vFyUsxtHX+Lo=)
                          10: 3137372e3132392e3138342e302f32342d3234203d3e20323632353636.roa (hash: QPQV7aaTlXpp54rSQBIkIXoESWpzBj4ruLCl3IXUaPo=)
                          11: 323830343a336631303a3a2f33322d3332203d3e20323632353636.roa (hash: o2+8Dj/dvDDhom21J3ibBEmCxx2vHjtdaDuSUCk47Q0=)
                          12: 323830343a336631303a353030303a3a2f34382d3438203d3e20323632353636.roa (hash: S1hs4Eu12Ux1Ki4yJ9eOgtciSa8raSkzETEO7MPhX2Q=)
                          13: 323830343a336631303a363230343a3a2f34382d3438203d3e20323632353636.roa (hash: x8/pv66tXMvGp2ZqoYMbWPOLydtNAtPCdplVrQXwVMI=)
                          14: 323830343a336631303a363030303a3a2f33352d3335203d3e20323632353636.roa (hash: 3tQBkJUb6z2DLUL1y2MSGFGW5mEn8pLSfLIBuGFbwrY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 16:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8a:21:60:b0:42:29:2a:73:76:8b:73:e7:a7:2e:cd:8e:7c:60:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Jul 25 16:36:13 2025 GMT
            Not After : Jul 26 16:41:13 2025 GMT
        Subject: CN=E2888200A6322E2D6AD393D75D74752AA9F56A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:0c:7b:f3:57:a7:03:d4:12:24:bd:bf:12:
                    d3:38:71:9b:1e:2b:23:e3:e2:96:7f:bf:f9:05:70:
                    07:01:f5:9c:c4:48:ae:a1:e1:f0:b4:b7:e6:23:b5:
                    25:bf:0d:70:fa:82:68:3c:a3:a2:d4:e0:94:9f:e8:
                    4d:f2:1e:1a:ba:f5:23:e7:47:db:99:10:29:31:34:
                    c2:80:b8:f2:13:6b:ab:c1:bb:56:a0:95:ea:8f:4b:
                    bf:2e:09:0a:c1:78:01:5b:fe:85:5e:c8:41:66:9a:
                    f5:6b:b8:d6:68:d6:88:e0:fb:ea:b0:76:a7:ad:0b:
                    05:32:d8:ca:9a:4b:84:aa:a7:df:0c:b2:ad:0a:c8:
                    83:c7:14:e3:bb:20:73:42:3f:c6:ee:bc:5c:d1:52:
                    bb:81:e1:d0:25:9e:c6:b5:c7:12:d5:c4:af:20:81:
                    bd:8d:e2:8b:2d:11:94:19:30:a7:ae:4d:be:6c:31:
                    ec:4a:20:94:16:11:f6:4b:67:be:7e:89:74:5f:33:
                    22:25:60:9f:60:52:4a:da:ea:3c:3e:b1:32:34:97:
                    23:1b:03:26:34:82:a1:5b:76:d3:fa:85:c9:39:57:
                    59:bd:2a:45:40:10:87:c7:a4:77:31:b9:36:52:8c:
                    2b:a6:cd:ab:2d:ec:35:5a:f9:ec:2e:5f:57:86:f3:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:88:82:00:A6:32:2E:2D:6A:D3:93:D7:5D:74:75:2A:A9:F5:6A:71
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fd:ed:d3:0e:8b:e6:f9:b6:82:fc:53:62:57:79:7c:11:92:
         b3:15:8d:1a:48:5c:03:19:23:f4:7a:82:8a:4d:7f:0f:7f:f9:
         96:cd:a8:fc:67:d1:6d:70:61:11:12:4a:05:93:22:2a:38:48:
         74:4a:c4:6d:ef:66:0d:d1:79:25:1c:bd:a7:d7:81:42:5d:73:
         ac:cd:91:24:b2:d8:88:0f:a6:48:1a:ff:5f:bc:8d:6a:51:3d:
         d8:6c:0a:8e:86:b1:b7:5a:c7:ea:62:6d:22:1a:39:f0:f2:9b:
         51:73:0c:ba:ab:35:cb:9e:99:c7:8b:d6:90:1f:a2:99:df:13:
         0c:a9:8d:0e:ee:14:db:71:8c:ab:ee:19:df:64:7f:9e:27:00:
         c9:bd:30:66:28:89:11:47:58:f4:87:53:fa:83:f2:41:bf:d7:
         fa:0b:6d:4d:89:b2:c3:a7:a9:95:29:1f:ff:dc:55:04:61:9b:
         6b:a7:10:09:fb:b3:bf:eb:75:cc:fa:f2:14:da:32:61:3d:27:
         e7:76:1c:9c:2d:f9:a3:2c:4f:bc:bf:03:79:22:4d:7c:08:ca:
         3b:62:dc:d6:df:a4:cb:3d:4a:75:a6:03:c8:f3:2d:33:02:39:
         32:0d:d5:6a:aa:3a:da:3e:0e:69:ab:8e:23:f9:26:30:05:fd:
         e8:3d:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:13:55 2025 by rpki-client