Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
File:                     5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json)
Hash identifier:          zVu5za4xGkLcF5bM/QpZXWX350WfeNo5cyJa0a34X1M=
Subject key identifier:   68:4E:9B:0B:34:BF:6F:2C:92:B2:A7:BB:FF:37:A0:8E:04:C8:3F:F1
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Certificate issuer:       /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial:       78B30572664C8610ACCE5741BBA1A9CAFD290E29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
Manifest number:          01AD
Signing time:             Tue 10 Jun 2025 20:00:14 +0000
Manifest this update:     Tue 10 Jun 2025 19:55:14 +0000
Manifest next update:     Wed 11 Jun 2025 21:58:14 +0000
Files and hashes:         1: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: 2hFf6qpax1RO4mE3DAUS9lmGsHO6m6S7mC10W5k/lXI=)
                          2: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: /CA+ffnunah2naSgHFcGH0IzfI1G3106VceLhhXUZ4A=)
                          3: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: M7TY98v4yjj0bR9HrRWIH6vqkjhPJO7oXLWdMRKwm94=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
                          rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 21:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b3:05:72:66:4c:86:10:ac:ce:57:41:bb:a1:a9:ca:fd:29:0e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
        Validity
            Not Before: Jun 10 19:55:14 2025 GMT
            Not After : Jun 11 21:58:14 2025 GMT
        Subject: CN=684E9B0B34BF6F2C92B2A7BBFF37A08E04C83FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:1e:55:11:24:1c:d5:fd:34:1d:14:1b:ec:
                    97:2c:9f:87:f6:7d:39:19:fb:50:fa:6c:8a:43:0c:
                    df:01:d5:4f:67:de:5a:f7:ec:7b:03:fc:01:14:41:
                    26:ac:9b:c0:fe:7f:8a:c6:93:1b:d9:7e:a4:fb:b4:
                    9f:eb:42:b6:4f:65:be:39:59:32:a8:f6:a0:a3:95:
                    d8:5e:80:ce:0a:7c:54:5c:f5:6b:2b:ed:3f:f8:04:
                    d5:f6:0a:7e:e2:99:95:8c:91:f9:43:e4:42:ed:42:
                    1c:35:08:f4:b2:2c:54:83:12:d2:eb:0b:18:19:25:
                    f1:f1:c2:06:9d:3e:78:25:27:48:ed:0e:76:07:22:
                    ae:40:73:54:fd:31:6b:1a:2c:ff:4a:02:23:51:8e:
                    d0:02:72:a1:11:0b:eb:86:ea:db:99:7c:a6:05:43:
                    53:0a:1e:31:c6:99:3e:39:5b:eb:7c:18:5d:06:36:
                    e6:2e:a4:78:7d:c4:d4:eb:4e:32:8d:19:6b:d6:d1:
                    71:e4:07:a2:64:32:ba:e4:b2:1c:45:35:aa:c1:5b:
                    05:ff:a3:c9:d3:3d:a9:0c:f1:2e:b2:30:4f:f0:9c:
                    2d:05:1d:59:28:a5:1f:8c:f4:7d:52:a4:76:71:20:
                    57:a6:b4:f0:b2:49:aa:3e:9d:7c:6f:41:63:dc:91:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4E:9B:0B:34:BF:6F:2C:92:B2:A7:BB:FF:37:A0:8E:04:C8:3F:F1
            X509v3 Authority Key Identifier:
                keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:00:ba:88:a1:5e:54:59:5d:c2:84:50:52:0a:da:f0:e9:58:
         d5:9e:40:ab:fa:c5:36:93:c1:2f:d0:10:0f:6b:e1:29:57:be:
         d0:1b:47:e9:a3:2c:b2:a3:47:5f:6d:6a:2f:3b:35:17:da:03:
         7d:3a:15:3f:6d:d0:45:e7:ae:67:4a:e6:f2:8a:45:7b:fc:f8:
         d3:e2:3c:2e:c2:c9:79:69:87:95:1e:52:a5:00:09:3f:f1:1d:
         e8:ec:2f:b0:fd:89:5a:9b:e9:46:77:9a:de:92:11:84:3f:0d:
         fe:29:d6:21:b3:90:24:81:9d:4c:59:16:e5:de:d4:5a:ea:91:
         5f:0e:37:96:a9:6d:66:a9:0e:51:34:2c:1a:6c:4d:6b:fa:bb:
         eb:30:56:b5:7f:e8:af:da:24:c8:4d:e9:bb:89:1f:6a:89:47:
         91:0d:e3:4c:3d:a9:6c:ac:ed:be:d2:ed:19:c5:4d:c3:a4:07:
         2a:10:19:1f:e5:63:ee:c9:01:8f:c8:f6:83:d5:90:48:bc:e8:
         10:cf:48:1d:2e:e7:df:f8:2b:f0:64:1d:75:57:55:11:5c:7b:
         d0:cc:ce:1b:d3:08:1a:b3:6d:c1:9c:7d:09:6f:f7:6f:8f:92:
         bb:38:a2:f3:c7:54:79:df:63:c8:29:23:5c:ce:50:f0:e8:82:
         ab:96:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:12:49 2025 by rpki-client