Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
File:                     7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft (raw, json)
Hash identifier:          1LQ6vyY+ZFoXtHsjUH6Y81v6XuCEkUL+pypYHZvSPWI=
Subject key identifier:   0E:E3:12:30:F9:95:CA:65:98:9C:7C:11:A7:71:42:9F:F6:7C:38:73
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       0DF0329101530CE84B7F255FDFB0A405BE927F55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
Manifest number:          11
Signing time:             Thu 18 Sep 2025 03:12:26 +0000
Manifest this update:     Thu 18 Sep 2025 03:07:26 +0000
Manifest next update:     Fri 19 Sep 2025 04:37:26 +0000
Files and hashes:         1: 34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (hash: dZH8ZxBMw0oZDUrL/jw2vuUaVyuoflPFTd7ol71clGw=)
                          2: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl (hash: FpYCyIdrRedzuuDGPu7DOI9qcwxUkNgoNzRjQsvt2zs=)
                          3: 34352e3233342e34382e302f32342d3234203d3e20323637333533.roa (hash: LyeM55h+f+yfzNTGWUrTsVrUxrvRTN+/Fl74HTUvAlM=)
                          4: 34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (hash: vUJF9gs5xQMqDUw81LvKpvr9X6AUaWZsW9NYWQWl1Go=)
                          5: 34352e3233342e35302e302f32332d3233203d3e20323637333533.roa (hash: /vSap4te8guh+qAqqLmYZImHb8QA8jgej13kbYH5e3Y=)
                          6: 34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (hash: N+XUMWcII3BAqNP4TTCzSCeQwh2jC9OmWVd+xl4z8DY=)
                          7: 34352e3233342e34382e302f32322d3232203d3e20323637333533.roa (hash: efCaDnSNHaCNsUZJZ2BRsQIelnrquDotvL3pslOlzNQ=)
                          8: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (hash: Kmsr+UXvwv+S9FvagZVWzDR/evsnsCJePVvlO07EQgE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f0:32:91:01:53:0c:e8:4b:7f:25:5f:df:b0:a4:05:be:92:7f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Sep 18 03:07:26 2025 GMT
            Not After : Sep 19 04:37:26 2025 GMT
        Subject: CN=0EE31230F995CA65989C7C11A771429FF67C3873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:7c:fa:45:8c:21:3e:89:78:27:3f:ec:9b:
                    e9:59:9a:c6:1f:1b:58:33:0c:3c:71:3c:9b:4b:41:
                    b8:fc:fc:f7:d0:0c:f2:20:4a:38:3e:f1:74:f4:ea:
                    c1:0c:4f:1e:e2:31:de:e5:d3:7b:56:79:d2:d2:9b:
                    1f:7a:68:37:a5:93:6c:b1:16:91:36:16:f3:1f:c8:
                    bf:a7:84:43:2e:08:c0:ce:2e:19:90:9b:81:a2:38:
                    13:cb:0b:db:be:54:e9:66:4a:34:ce:9a:e3:f8:2f:
                    44:fc:b1:7c:d2:4e:c8:c2:25:57:fa:87:fb:05:8a:
                    a5:33:9c:ae:d6:0d:6e:78:4a:a3:22:dc:2b:92:7d:
                    02:7e:a0:45:e1:1e:68:a8:53:c3:44:48:e0:80:f7:
                    9c:db:f2:f7:c7:e1:c7:f2:06:e8:e0:5c:21:5d:47:
                    1a:93:81:35:52:82:88:c5:7b:64:3b:54:b9:e5:99:
                    81:61:57:87:95:2f:bc:e4:9f:1f:8e:23:98:f8:63:
                    c9:83:75:52:e9:38:2c:81:ca:eb:f9:50:7f:6c:8b:
                    12:f7:e4:15:08:61:8d:5f:4b:ec:a4:2f:fe:8f:3f:
                    fb:71:97:a9:ea:96:de:b2:04:29:cf:a9:74:8a:c2:
                    d9:a2:74:05:9a:d8:1e:c8:fd:ea:eb:10:38:a1:ba:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:12:30:F9:95:CA:65:98:9C:7C:11:A7:71:42:9F:F6:7C:38:73
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:09:0d:8d:39:82:dc:98:cf:5f:c8:ad:4a:07:22:21:c0:13:
         60:be:05:f9:70:2f:2b:26:9e:59:08:b4:44:c0:b3:0f:fc:1b:
         36:41:42:88:56:84:73:17:5b:ad:c2:00:6e:fd:4a:11:fd:69:
         92:7e:e8:ed:84:5b:e0:13:9f:3f:e4:41:ec:ea:5e:b0:b0:33:
         60:9a:55:9f:15:87:49:1e:b4:77:b7:6f:94:e0:53:d8:ea:0a:
         04:44:a4:9b:a0:f1:47:40:0f:9b:e4:09:66:46:45:39:70:40:
         29:ce:ad:b7:19:45:ce:be:74:98:ba:4a:c3:9e:84:85:0a:71:
         43:4f:8b:1c:e9:cb:15:e8:37:22:7d:a1:25:11:f0:a4:2c:6d:
         90:b0:9a:84:75:41:42:80:65:4b:51:3f:a3:ea:33:55:0a:94:
         62:1b:7c:8f:72:37:0e:28:ee:2d:1b:2e:54:d9:27:10:7a:36:
         a2:a4:a2:0f:d9:28:70:cc:62:22:70:fe:50:ee:65:c8:da:d1:
         e1:a2:17:d9:70:bf:35:9f:16:80:94:14:84:af:f6:f2:eb:18:
         c3:e9:94:71:13:fe:8b:a7:97:36:9b:78:58:6c:34:68:3d:a8:
         10:b1:3b:98:01:30:e7:5e:87:fd:69:f9:17:ff:f0:aa:53:53:
         3e:19:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:21:30 2025 by rpki-client