Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
File:                     2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft (raw, json)
Hash identifier:          ea96jGlZTs6APEDYHrAAN0n+GUOG2jiCv/eBBcE979g=
Subject key identifier:   72:0F:B8:6F:9B:86:2C:0E:2C:1C:FD:BC:E3:CA:5B:4D:7D:3A:3B:62
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       4E8844C5E1235041D92091EF9007BB88B9ADFEA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
Manifest number:          02C5
Signing time:             Fri 19 Sep 2025 00:03:59 +0000
Manifest this update:     Thu 18 Sep 2025 23:58:59 +0000
Manifest next update:     Sat 20 Sep 2025 03:02:59 +0000
Files and hashes:         1: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: 3sxZs3Y6zVNNgLScctDhTTFNDQdOZLcuEzMOUREzMRw=)
                          2: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (hash: tCfqS8UfvI979KF3Vff43TGrFJXiZp8XAjbb1Wo4ZPs=)
                          3: 2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl (hash: vTgMAiK2KHcRdAX8sv4T2eqb204U9GyjMoGU6Lr7C/M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:44:c5:e1:23:50:41:d9:20:91:ef:90:07:bb:88:b9:ad:fe:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Sep 18 23:58:59 2025 GMT
            Not After : Sep 20 03:02:59 2025 GMT
        Subject: CN=720FB86F9B862C0E2C1CFDBCE3CA5B4D7D3A3B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:df:fb:fa:63:ef:44:78:b1:f5:95:33:0c:73:
                    a3:2d:4e:36:60:36:aa:78:26:d1:b2:09:9d:a4:af:
                    0f:0f:32:fc:76:a8:b2:7f:16:01:d2:00:01:d3:ed:
                    3f:35:ed:34:75:be:9d:4a:5a:a6:66:99:75:42:e4:
                    22:2b:c0:68:58:66:da:50:fe:6f:c1:4e:ae:e1:92:
                    33:a9:c2:70:a2:bc:01:7e:04:88:aa:cb:96:bf:cc:
                    13:5c:80:66:96:df:28:52:ab:b7:09:16:4a:37:21:
                    e5:ed:86:a0:52:1c:b5:ef:c0:c1:a5:d0:9d:9a:64:
                    27:af:93:06:33:26:b8:bf:4b:b5:58:76:7d:88:92:
                    90:e1:30:82:3f:c5:4f:17:ef:c4:3c:0e:96:ec:11:
                    0a:c5:2f:0c:70:89:f5:17:47:f1:ed:35:ca:cb:40:
                    ae:28:23:8e:73:e5:e6:83:e4:eb:c3:fa:0f:e8:dc:
                    4b:fc:8d:80:b0:85:11:41:9a:e6:e8:f0:1b:d6:25:
                    0a:2e:38:33:b7:a6:6d:c4:44:bb:81:91:87:61:c9:
                    ee:11:0f:b9:6a:af:5f:ab:32:f0:27:00:8c:18:13:
                    0e:69:e9:be:a7:c2:7f:9b:04:7d:a9:1f:f2:71:a9:
                    76:81:d4:58:30:37:90:0c:f6:e9:9b:42:fd:82:8c:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:B8:6F:9B:86:2C:0E:2C:1C:FD:BC:E3:CA:5B:4D:7D:3A:3B:62
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:7d:cf:ce:6b:e2:7c:ab:6c:88:5c:78:ba:b0:2a:49:aa:
         d6:6b:76:13:4c:93:1d:4c:9a:9c:6a:40:c1:cf:dd:ac:12:3b:
         6c:3c:8e:fd:72:a2:3b:a1:4f:c2:a9:8a:2e:b9:dc:2c:f3:5b:
         e4:48:26:6f:a2:d0:e6:de:dd:02:0f:8b:33:71:fb:08:ee:bb:
         79:fd:4e:89:b7:70:06:67:ac:89:94:a5:72:ca:2d:f9:41:21:
         15:fd:5f:80:c9:c1:ed:67:71:d2:e5:19:24:2a:99:76:9e:59:
         2f:e8:4f:59:fe:68:85:51:1a:27:ac:70:47:59:f7:a0:4d:d3:
         c5:77:b7:1e:9e:dd:68:60:28:4c:4c:4a:fc:56:94:dd:d3:ee:
         5f:15:c7:2f:c5:00:69:24:0e:55:09:99:70:58:ef:a0:04:d5:
         3d:31:44:85:99:e5:99:09:63:36:d7:49:cb:e4:bc:67:ed:37:
         41:12:d1:84:26:43:ef:53:50:34:a2:82:12:e1:e4:be:39:47:
         d0:a5:9d:3c:24:70:aa:a9:1d:ef:e4:93:11:19:37:e6:bd:85:
         c5:61:85:86:17:f9:a1:1e:cd:86:94:f9:87:e6:72:54:26:bb:
         8a:38:5b:df:be:6e:35:db:d3:2f:d9:b9:8a:38:2a:f5:18:ca:
         7b:85:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:40:01 2025 by rpki-client