Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
File:                     D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft (raw, json)
Hash identifier:          5SJzI7dM8NJpcwy9ZRj9or9G9/lSgVtAFdky5uIJj5o=
Subject key identifier:   87:48:BF:42:2C:2E:EF:6E:51:54:3C:4B:99:31:83:26:23:C0:25:11
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       20242207E10C1ACB6F187EE99629C065FD6B9246
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
Manifest number:          01EF
Signing time:             Fri 04 Jul 2025 06:51:41 +0000
Manifest this update:     Fri 04 Jul 2025 06:46:41 +0000
Manifest next update:     Sat 05 Jul 2025 09:30:41 +0000
Files and hashes:         1: 34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa (hash: KphRvq+dCCmDbBoP7ufV4MKiDXMdvSDN8C3wBkEp6PM=)
                          2: 34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa (hash: kO8OLhHyjvxRm550hVdG/t9GWhhQJ4GEhEFGrZC4ASw=)
                          3: 34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (hash: u0yBhdVDaevQliiP9KZynPBTVxkPOzeII4JFo6jbcps=)
                          4: 323830343a346331633a3a2f33322d3332203d3e20323637333530.roa (hash: obuvpg2KT9lbvxhrozHpb1Q8wEpCA+P8uCNmuLETzm4=)
                          5: 323830343a346331633a383030303a3a2f33332d3333203d3e20323637333530.roa (hash: oJLoy2NZCiaqPT9x6QxmbYcpcBviV4fUZPCEvZlY+DQ=)
                          6: 323830343a346331633a3a2f33332d3333203d3e20323637333530.roa (hash: setdnDShPa42Ra+RXIZpHVG0CzWF+L5w7rUhm1wlW8k=)
                          7: 34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa (hash: KiVRpQW/Y+LL0uzJv77rQmbRpw245rFC96CRqItR2Mg=)
                          8: 34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (hash: Qd2D3y5pr4+0LQIHpmwfLMqhy3/c+GkvC9zwHOCrCmA=)
                          9: D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl (hash: UdXCyFWgLlZocRu8ACNkmca08TptdvJKqGSLNzZcKk4=)
                          10: 323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (hash: MR9+C9Vbj4DW0fjbrhaHdxlM9MYBw8GvChkpXZQO0NQ=)
                          11: 323830343a346331633a3a2f33342d3334203d3e20323637333530.roa (hash: DGRUdUDDCZl4HidihTbYThwrnuoIe3p27meH73uZnqY=)
                          12: 34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa (hash: cQgCm5AeQyHg8f9cKg4MaKk7kmavzWr0FzG/BiQmCtM=)
                          13: 323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa (hash: buEzhxsd3JgTQkvixY100+A2Z281EJiftmIetEl7FQw=)
                          14: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (hash: yypoDy5bSn77qxeuXVndQniHgm9nMysCWdFI9074rt0=)
                          15: 34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (hash: 43+lZx6yNw3chQQ3rdDi6xVUZ10HWty/7VWRdAmFCbE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:24:22:07:e1:0c:1a:cb:6f:18:7e:e9:96:29:c0:65:fd:6b:92:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jul  4 06:46:41 2025 GMT
            Not After : Jul  5 09:30:41 2025 GMT
        Subject: CN=8748BF422C2EEF6E51543C4B9931832623C02511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:db:65:1a:b5:5e:b0:38:94:cd:39:d3:4c:
                    45:09:87:3a:6a:f4:2d:36:21:4c:07:a6:ab:f3:96:
                    d9:83:61:8d:98:51:67:bd:22:da:b9:3d:b6:a2:80:
                    50:d6:65:5f:a0:97:dd:0c:bb:b5:48:74:72:42:dd:
                    11:c0:ea:4e:77:f0:a2:8e:bb:71:4b:8b:9c:6b:d1:
                    c7:d7:78:a0:5f:30:1b:47:dc:37:57:7f:b5:06:41:
                    69:59:44:b7:bb:cd:d5:9e:1e:db:20:12:99:f6:6c:
                    98:0d:5f:0f:6c:72:fd:7b:68:3b:90:83:da:e1:20:
                    18:6f:24:2a:98:39:58:fd:1e:8a:c1:cc:2d:c8:72:
                    83:bb:16:71:23:22:a8:6b:95:74:91:d6:fc:35:aa:
                    44:b6:92:a5:7f:82:60:e4:ca:c9:95:47:7d:40:04:
                    e5:3e:7f:54:23:73:21:93:f6:57:fe:a8:0f:60:c0:
                    6c:03:c0:0e:94:3f:04:22:0a:1d:ef:f8:77:9d:ab:
                    ee:f4:51:b9:4d:0d:5e:49:8a:2b:ca:61:9c:df:34:
                    3a:67:4f:f8:8d:a9:de:db:5c:17:c7:20:59:60:47:
                    66:10:aa:92:eb:c9:c1:18:8e:d2:8d:8b:c2:7d:3d:
                    6c:c2:a4:26:94:a5:05:fc:11:c6:95:50:49:79:0b:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:48:BF:42:2C:2E:EF:6E:51:54:3C:4B:99:31:83:26:23:C0:25:11
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:17:ca:71:4a:c1:c8:8c:c3:13:09:04:c7:9e:b1:ca:c7:dc:
         71:97:1c:d2:b4:09:eb:f2:28:c6:49:88:24:69:4a:6b:3e:74:
         7e:ca:30:25:f3:96:9f:e4:83:a7:30:b5:7c:dd:1c:39:e9:9f:
         2f:11:55:ad:73:8c:dd:4a:d3:db:8c:fe:94:9d:17:8b:de:73:
         9c:f1:ac:93:78:c7:d6:34:ef:ba:53:a4:82:7a:d6:ef:00:3f:
         5a:c9:60:c1:1f:8d:ff:9b:c6:c5:38:be:c4:f4:b5:ab:23:3e:
         73:c3:88:09:d0:2a:af:63:a3:43:95:4e:69:de:63:7f:a6:65:
         1b:87:d5:4b:4d:0b:b9:cb:eb:0b:3f:7f:ae:83:b3:f3:2a:a1:
         ee:7c:37:ea:9e:8d:b3:ff:85:88:3c:47:f3:0c:8f:1b:60:69:
         dc:57:5d:13:b0:79:ad:b5:4c:95:18:0b:ee:06:a6:c0:8f:d2:
         c7:54:72:22:91:88:85:dd:66:f0:be:49:43:cb:67:3e:53:94:
         db:8b:97:88:a3:38:04:a2:45:91:97:a1:ae:cf:c3:5d:d4:bb:
         96:5e:3c:82:32:3d:f7:3e:4c:e3:46:14:df:06:72:2b:7e:7c:
         6a:19:e1:d8:21:98:4f:a9:f4:85:43:dc:40:86:8c:48:a3:bc:
         4e:4f:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:41:24 2025 by rpki-client