Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          wA+Bw+hsWjEAWDbQJrQ7E3zEmPsnNZxWl07HL7+tjKM=
Subject key identifier:   B2:61:D4:70:96:5A:48:70:7E:81:4B:23:6C:CB:BE:99:D8:D2:AF:58
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       3F2CD845F7761AD759B75659B5C4CBCA64E87B4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          02D0
Signing time:             Sat 26 Jul 2025 02:10:00 +0000
Manifest this update:     Sat 26 Jul 2025 02:05:00 +0000
Manifest next update:     Sun 27 Jul 2025 02:10:00 +0000
Files and hashes:         1: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: ccCrOPO+fniR7wGL9nAJb4TbiYc08AJ9vqTsfD1PrJw=)
                          2: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: wBg7OLAC+U5rb0dz2JZauuXhMzmWVbds76u/zhua/YE=)
                          3: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: YHcOeZAppI0yBQHU5VaAv9v49jpZW7BbBaBFcagKeAo=)
                          4: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: 0Qq7UpvYE6zlErwAZn59cVfyEieKKldVm5VpDpm4gw0=)
                          5: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: +MxwWMlz9S9ev8gjiYaaRI7n12W9bpBHWTXxklmRXcg=)
                          6: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: PsG/KbNUa3nKz87y+qnxaBmbAh/4v58jK3L06h+VOiI=)
                          7: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: WZr+/Q54cg2mZtFayzv8bTTykV+0uhwUu5vv3XCe91s=)
                          8: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: YkiMOKlXUfp39jAbnOanM0KLPuwUcDBAVWsGF1xqc/E=)
                          9: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: MuLCu/ebtGTRQdFTtxwflEFsRUPY8b2YKd2KzoWHrGI=)
                          10: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: K6MwIK+3msfBTjd+nDj6vx1bhEf6yAKnBKiZuf/G4hg=)
                          11: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 8tcPtbeFADqn7j5wPgEV/xkungZIxf0p1KKa9Fv9kro=)
                          12: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: jNre954ylBKqBfqOR7sW+4P/02andW5wroDJrSD+LJw=)
                          13: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: w5Aup+NkUiSPGJOkgm0D2pt62dq35BDv6u3R+EXF5Y4=)
                          14: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: 7z7st9VExUOxO1HPQ6IHGyHiaeWv0sgAdWNGW8vEHnI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2c:d8:45:f7:76:1a:d7:59:b7:56:59:b5:c4:cb:ca:64:e8:7b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 26 02:05:00 2025 GMT
            Not After : Aug  2 02:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:90:44:2e:ef:af:d3:b3:e2:15:73:71:02:44:
                    94:39:ac:64:e0:57:2b:cf:00:75:ff:1a:9f:44:d3:
                    01:17:ac:84:55:f3:ba:6c:ff:d2:37:08:7d:02:02:
                    ec:50:af:79:7d:7c:fb:76:d6:1b:ad:a7:7f:bc:40:
                    4d:10:cc:31:e0:8d:f7:6a:fa:34:d2:4e:0e:7b:3a:
                    48:d7:85:84:1f:2c:00:62:42:8a:e0:33:ca:94:89:
                    55:b9:fc:1a:05:e8:47:c9:72:dc:3c:f6:03:09:a6:
                    92:29:fc:71:a3:f5:bb:71:b2:8c:bb:5f:94:4a:b3:
                    2d:6e:48:ec:c1:ef:6b:14:8d:60:33:8d:8e:c0:36:
                    50:97:07:de:ca:6a:4e:e2:6d:8d:ce:94:b3:fa:c2:
                    a2:7d:50:d7:53:3b:98:ed:99:e7:57:0c:c5:de:99:
                    00:04:56:7d:c8:ee:77:f6:b7:0d:46:7f:5c:ba:34:
                    87:00:b4:da:56:d8:a5:b7:20:e9:e3:c7:36:4a:b2:
                    d9:a1:55:f1:08:f0:77:bc:f7:54:e6:b2:99:a9:fe:
                    8b:55:01:7f:bd:f0:64:6a:a9:62:6b:6f:ff:c4:b2:
                    ad:f4:45:b8:87:75:6c:22:6e:17:6e:14:81:2e:b1:
                    2d:db:1b:29:86:58:88:f2:03:be:55:09:b8:ad:05:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:61:D4:70:96:5A:48:70:7E:81:4B:23:6C:CB:BE:99:D8:D2:AF:58
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:ff:f6:23:f3:c2:d8:31:b8:9a:4f:c6:9c:b1:62:ee:a2:
         66:eb:de:f2:ed:33:29:81:08:52:d2:e9:d9:14:49:a2:7a:af:
         66:1f:cf:be:52:42:c0:98:6a:d1:2f:f1:92:56:75:98:0d:f4:
         59:9b:00:96:d9:b5:40:34:5a:05:19:54:a0:86:dc:3e:9c:3b:
         ca:71:4e:24:5d:d4:59:49:5b:cb:8e:49:0e:31:25:c2:d2:6b:
         9c:53:b1:b5:d7:43:e7:18:62:f0:16:cc:28:0e:ed:17:32:c0:
         b2:57:de:58:b8:2d:bf:49:82:7b:19:c2:dd:1a:01:e5:a0:f9:
         cd:2b:97:4d:ec:f3:40:40:c1:94:4d:a8:72:0d:cd:0d:99:a3:
         73:6d:74:f3:ac:e7:c6:27:ff:3e:1e:00:30:21:3b:6b:d2:7d:
         f1:bc:31:7b:71:ea:57:a0:5c:af:6d:ab:2c:46:16:e3:f2:41:
         02:e1:9f:d9:67:1f:89:3b:3a:e2:3f:f5:87:9b:f2:86:fb:b1:
         7c:7c:8d:d9:10:ac:1d:48:ba:23:57:60:ff:70:eb:0f:d8:4b:
         cb:fc:20:59:be:75:f0:b8:85:79:13:6f:b8:f8:63:e3:4f:9f:
         7f:c4:31:1e:21:29:1e:ad:bc:57:42:cd:c4:32:b5:09:1f:54:
         a5:b2:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:29 2025 by rpki-client