Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
File:                     D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json)
Hash identifier:          nYOK/K1ScJWVhRPEJ/6obxbzi/2pZ/AybP5PM68Y7tg=
Subject key identifier:   FD:3E:B1:AA:C8:24:32:8C:47:D5:AA:67:03:51:ED:9D:A6:BC:FF:20
Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Certificate issuer:       /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Certificate serial:       1727CB84AEE90E2759156D541B2A2C9A65BA94DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
Manifest number:          AA
Signing time:             Fri 13 Jun 2025 10:30:22 +0000
Manifest this update:     Fri 13 Jun 2025 10:25:22 +0000
Manifest next update:     Sat 14 Jun 2025 13:22:22 +0000
Files and hashes:         1: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=)
                          2: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: BIiCw6p6zLM4N+MCPR2Ac7Cp1m1JC4wW3qo5PJeIBVA=)
                          3: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=)
                          4: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
                          rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:27:cb:84:ae:e9:0e:27:59:15:6d:54:1b:2a:2c:9a:65:ba:94:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
        Validity
            Not Before: Jun 13 10:25:22 2025 GMT
            Not After : Jun 14 13:22:22 2025 GMT
        Subject: CN=FD3EB1AAC824328C47D5AA670351ED9DA6BCFF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:98:fa:5b:dc:92:e0:ba:dc:60:20:1f:c7:
                    0d:b5:ce:8b:8a:74:54:88:61:be:66:0e:8e:d9:7b:
                    e8:33:fb:a8:3d:08:71:c8:38:66:62:1f:fb:cc:3a:
                    56:e1:dd:d2:bd:07:e6:5c:49:c3:5a:13:8f:f9:32:
                    9a:29:77:8b:12:08:0e:5c:7c:72:b8:7a:7f:8e:93:
                    48:11:01:75:d5:5e:6f:16:cd:be:91:f6:28:83:cd:
                    7f:95:dc:45:e8:36:74:69:75:c1:e9:9e:f3:4f:1f:
                    5d:47:4f:60:1a:3c:f6:f1:79:07:88:4d:e2:06:17:
                    d5:e6:de:69:8a:17:84:de:4a:0f:1b:61:0d:81:3a:
                    2a:b7:87:1b:97:4f:bf:0d:a0:8f:57:49:11:92:8b:
                    36:27:f2:cd:24:cb:a1:76:21:32:84:52:a0:bd:ba:
                    c7:63:c9:4c:4f:36:4e:35:6a:0f:b6:61:83:d8:2e:
                    56:76:67:7e:33:07:00:d6:fd:79:5c:b9:52:cf:bd:
                    17:7f:07:a0:90:2b:bb:75:dc:dd:17:27:f0:fb:a4:
                    3b:32:33:c0:fa:71:1d:74:ab:08:1b:f7:5a:04:73:
                    91:35:9a:8b:b4:ee:5a:ff:07:1f:22:db:9d:79:65:
                    cd:f7:53:f1:8e:83:73:e2:39:39:76:8f:0b:74:59:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3E:B1:AA:C8:24:32:8C:47:D5:AA:67:03:51:ED:9D:A6:BC:FF:20
            X509v3 Authority Key Identifier:
                keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a7:d8:11:cc:db:78:59:1d:d5:6e:2a:73:31:4c:a7:81:22:
         d6:d7:4e:93:dd:5e:43:9c:ce:03:a0:31:be:12:a9:a6:6e:c3:
         d7:a4:f5:9d:c9:44:30:e8:08:84:20:8e:40:38:fd:ac:fe:de:
         e7:13:96:25:e4:90:73:54:28:6c:c8:55:b6:db:9e:cd:79:57:
         41:ba:f4:53:12:cc:56:ca:f2:a0:10:21:eb:15:2e:c2:55:3d:
         8a:f2:e4:f3:86:7f:96:50:4e:3c:5c:55:9b:b1:dc:8a:dd:f8:
         4b:d6:4a:aa:0e:02:84:3c:5e:92:cd:d1:fa:fd:9c:b8:ec:98:
         92:1e:61:a1:1f:1d:2f:a8:8b:8b:9d:d0:3e:f6:f9:d2:87:c1:
         35:d6:ac:dd:1f:8e:c3:6d:31:b3:b6:fc:e4:1b:ab:10:68:df:
         75:96:76:69:da:d4:35:00:cc:05:ab:fc:14:c2:fb:6a:89:0c:
         5d:f7:14:92:ed:72:18:60:14:79:9d:47:f3:f1:80:dc:86:2e:
         5f:25:59:d2:10:95:27:14:ea:36:cc:63:e4:8a:f6:46:2e:7c:
         d4:01:11:3b:ca:82:d7:ce:3a:d7:7e:4d:2a:0c:b8:14:87:80:
         da:4d:bf:2a:70:71:4a:86:a9:90:11:0a:8f:dd:c8:9e:67:3f:
         5a:7e:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:39:56 2025 by rpki-client