Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
File:                     0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft (raw, json)
Hash identifier:          Rt+rU30bws6HPRKJWqVofa8/1yfS9qnVrE1XT8daZc8=
Subject key identifier:   85:FA:75:EC:14:A5:CD:14:BB:F1:67:7F:B0:4E:91:2D:7E:0C:0D:88
Authority key identifier: 0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1
Certificate issuer:       /CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
Certificate serial:       60458A73CDDD1E43B822FA7B3C359EE1D93256DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
Manifest number:          20
Signing time:             Fri 04 Jul 2025 17:38:10 +0000
Manifest this update:     Fri 04 Jul 2025 17:33:10 +0000
Manifest next update:     Sat 05 Jul 2025 19:08:10 +0000
Files and hashes:         1: 323830343a386535303a3a2f33332d3333203d3e20323733343137.roa (hash: oa39zwk+DOlFtKxgGEDMTAys54WdC9OthVvLXeD9ByE=)
                          2: 3138372e38362e3136332e302f32342d3234203d3e20323733343137.roa (hash: kruYGS29lju9ll0IFDKjfYckNozZ3ZclInv6bYJ2mU4=)
                          3: 323830343a386535303a343030303a3a2f33342d3334203d3e20323733343137.roa (hash: JG9QxupPHof9x09IrcAafnIV9CHPJravr9NNkOjGGME=)
                          4: 323830343a386535303a383030303a3a2f33332d3333203d3e20323733343137.roa (hash: WjB7OZybW8Gb6Q+xZW2Bc9+q+Ho6AV3vsScswHdMxgU=)
                          5: 323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa (hash: 6v2j7LwLIKQ0eJnpIDIuaoQf8ECL/I0FIP3MWge9yHg=)
                          6: 0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl (hash: r7SWsAlom8otfrfDJmnUboBltlmluUF5/bAs8BgiTWs=)
                          7: 323830343a386535303a633030303a3a2f33342d3334203d3e20323733343137.roa (hash: MU+0iw6K6aPAY0rmSUuUrjCZmzAlACuj7uCgGlYNpPQ=)
                          8: 323830343a386535303a3a2f33322d3332203d3e20323733343137.roa (hash: H8XROUAWLnf9NxtSQE6Eqltm6zBi7aFHwJDPb3JmGHY=)
                          9: 323830343a386535303a3a2f33342d3334203d3e20323733343137.roa (hash: gJTFM0QrGA3UWoYbF8fvbQmPmeMopgKgjLe1FjetpSo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 19:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:45:8a:73:cd:dd:1e:43:b8:22:fa:7b:3c:35:9e:e1:d9:32:56:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
        Validity
            Not Before: Jul  4 17:33:10 2025 GMT
            Not After : Jul  5 19:08:10 2025 GMT
        Subject: CN=85FA75EC14A5CD14BBF1677FB04E912D7E0C0D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:32:76:a7:48:69:9a:e0:39:0b:77:db:86:
                    24:f0:e8:f1:f1:6c:d4:2f:16:bf:e6:aa:ab:83:fc:
                    02:75:5a:16:cd:57:a8:79:b2:cc:5e:2b:76:8c:4f:
                    31:19:b8:b9:26:a5:96:0a:9d:fc:61:b3:81:e1:3c:
                    05:24:62:d3:70:b2:4e:58:d1:2b:9d:24:9f:e4:6f:
                    96:57:f9:80:c4:0c:79:44:ab:68:48:29:f9:87:a9:
                    1c:02:17:8b:a1:a1:d5:18:ce:95:bd:3a:87:a7:72:
                    c7:15:93:30:a4:f7:41:d3:9f:a3:30:f7:70:5f:79:
                    9c:71:ad:27:58:21:1d:9d:56:1a:2f:65:4b:e4:76:
                    4c:c9:51:8a:08:e3:11:92:ec:51:94:78:21:22:8f:
                    f6:09:c3:88:db:36:ba:d2:4f:34:88:65:de:64:0d:
                    6a:94:82:d4:81:fe:64:e4:ae:75:cb:96:39:de:56:
                    5c:8f:97:63:9b:99:00:b9:7d:b9:6e:41:34:b1:8d:
                    4b:37:d6:37:60:eb:67:81:90:34:b5:e6:20:64:2e:
                    b5:72:9d:18:21:48:de:39:a0:de:8b:af:1b:fd:f6:
                    6b:b6:b0:09:df:15:7c:b8:e2:15:5d:8f:40:ec:78:
                    cb:85:ce:9f:4a:18:85:d4:bd:76:f6:8a:27:80:47:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:75:EC:14:A5:CD:14:BB:F1:67:7F:B0:4E:91:2D:7E:0C:0D:88
            X509v3 Authority Key Identifier:
                keyid:0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:42:be:c3:42:d0:4d:8c:b3:9e:52:88:bb:1f:de:36:3a:dd:
         c6:95:f8:d1:66:8d:4e:7f:61:48:e7:d2:1d:cd:4b:f9:9f:ad:
         7e:28:56:82:31:30:ab:37:13:57:e6:5d:df:81:d8:ca:a8:70:
         17:c5:72:29:9e:db:0a:ad:ec:5e:be:b2:a8:b1:1d:2e:37:d9:
         9b:b3:b0:77:c4:15:e2:b4:06:d2:0d:3a:b2:e0:14:b8:99:a9:
         6d:39:ba:34:af:51:05:32:1b:c8:e8:09:dd:47:6a:4d:47:b2:
         2e:4c:a1:1d:40:55:0e:5f:97:4b:0c:76:35:46:71:d2:48:2d:
         2d:af:9f:17:d1:3d:b5:bd:ce:9d:97:b1:b2:0c:f8:f9:e7:ed:
         2c:c7:91:fb:01:10:c0:d8:61:45:83:a9:6f:c5:25:91:de:53:
         56:ef:a6:b7:2c:6d:bb:cf:5b:b3:ce:0b:a5:1c:97:8c:58:22:
         da:ba:c8:fc:53:4a:7b:c0:1f:ab:6a:ee:b9:fd:e8:3f:1e:67:
         84:ca:b8:df:6c:1c:d2:c2:83:4c:47:8a:7b:36:29:f3:9e:e0:
         71:fe:21:27:48:59:f1:92:3d:0b:37:4a:48:ee:09:c7:c3:fb:
         48:ec:70:a2:4d:b8:3f:ed:db:47:a4:89:4e:b2:57:6b:66:12:
         a4:18:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:49:08 2025 by rpki-client