Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
File:                     D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json)
Hash identifier:          HI1ydf/dfbYQ4+6uTqligXkRzE71Gzd6gewlWWrXJ0E=
Subject key identifier:   01:CA:EE:2A:1D:D5:CE:4E:36:5E:C7:B7:F0:59:A0:54:B1:D8:18:A3
Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5
Certificate issuer:       /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
Certificate serial:       668A0309D2368B48DE66AF3071BC33742D1DF680
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
Manifest number:          89
Signing time:             Sun 27 Jul 2025 19:08:25 +0000
Manifest this update:     Sun 27 Jul 2025 19:03:25 +0000
Manifest next update:     Mon 28 Jul 2025 22:31:25 +0000
Files and hashes:         1: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: jaxANOH0U1tdlyqQoHOvq5zhHPux9yvoP7mQ8ir0cqc=)
                          2: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8a:03:09:d2:36:8b:48:de:66:af:30:71:bc:33:74:2d:1d:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
        Validity
            Not Before: Jul 27 19:03:25 2025 GMT
            Not After : Jul 28 22:31:25 2025 GMT
        Subject: CN=01CAEE2A1DD5CE4E365EC7B7F059A054B1D818A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:4d:11:98:b0:0e:3a:7f:13:7c:cb:fb:4d:
                    db:cd:6c:da:5b:d9:6a:ea:9e:1d:10:3d:bc:15:d0:
                    70:b6:ca:dc:e6:55:ba:3a:ed:9e:87:dc:92:50:e1:
                    4c:37:28:99:fb:01:5a:f0:54:2b:b9:39:46:1c:fd:
                    13:81:37:51:46:45:24:4d:f4:30:1f:1f:d5:ec:53:
                    1c:7b:96:7e:19:34:32:ed:28:ad:11:48:33:1d:b1:
                    1c:64:e2:27:bd:0a:e0:b6:11:71:04:f5:f2:21:fd:
                    bd:ba:e6:ea:c2:83:36:38:be:40:10:6e:be:ee:e7:
                    07:09:df:a0:f7:4b:03:74:3f:31:b2:2a:ca:12:60:
                    f2:bd:f9:19:53:e6:97:21:48:61:56:88:7c:fa:a8:
                    18:f3:54:60:f1:85:40:ea:61:25:0a:93:cf:64:5e:
                    90:49:5d:d7:85:c6:d4:81:03:e4:f1:32:11:48:67:
                    a6:9d:b6:48:c7:bf:1b:1e:73:dc:41:67:89:3c:e3:
                    72:d6:a7:d6:2d:05:f0:82:0f:25:bd:bb:b7:c7:b7:
                    12:f3:f9:73:d4:4c:0f:c7:02:58:3f:67:cc:70:8f:
                    45:3e:41:69:c6:4b:9b:ff:50:7a:1f:f2:7a:bb:34:
                    39:c8:68:d8:74:68:d4:1d:2d:2f:6c:cd:74:04:d8:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CA:EE:2A:1D:D5:CE:4E:36:5E:C7:B7:F0:59:A0:54:B1:D8:18:A3
            X509v3 Authority Key Identifier:
                keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:4d:7a:c4:af:3e:1a:19:21:cd:a5:6d:1f:b1:6a:8f:98:
         7a:2b:98:d1:fb:6a:16:0f:2a:54:7a:81:0d:a7:f5:41:03:7e:
         52:00:3d:22:81:e8:2c:1c:5f:57:55:4f:61:c0:c2:e7:c7:d0:
         0b:d9:32:f2:e7:57:68:a0:52:f3:89:86:53:9e:78:12:fa:73:
         33:3f:73:da:65:4b:e2:a1:17:c1:4a:ba:68:c2:dc:83:e0:7a:
         f2:dc:52:df:c5:92:3b:a6:c5:5a:b9:7d:ab:df:74:92:33:91:
         05:28:87:7f:64:c3:ae:84:31:c6:aa:73:ba:48:80:40:df:19:
         9c:58:dc:19:7d:1c:f0:b0:c6:d1:c1:bd:3b:23:09:31:c9:69:
         ac:d9:c7:b3:0b:ce:84:91:1f:8f:25:b2:27:30:62:1e:06:26:
         f1:98:73:32:8b:fc:8c:8d:02:84:21:bb:1e:a2:bf:cf:73:8b:
         99:37:f2:d0:9c:5f:55:7d:51:31:ef:c5:3f:82:92:6e:44:79:
         2b:e7:0d:a3:1f:ea:30:9a:1b:59:08:f9:2d:48:b0:a3:12:4d:
         74:e0:aa:ab:a1:a6:26:5d:20:1f:6a:2f:63:32:f4:cd:b1:67:
         d8:57:e9:c0:e5:de:e9:4a:23:ec:14:0a:f9:1c:33:73:dd:44:
         f4:81:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 12:04:02 2025 by rpki-client