Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
File:                     2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft (raw, json)
Hash identifier:          3UYH5Vx4S6SkUKqX0d/3ZJkkC7SQq8Zkmw653yPs6h0=
Subject key identifier:   4E:3D:EC:09:5A:EE:3C:BE:8C:E3:0A:9F:3C:AB:CC:B1:D8:F1:80:68
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       252AC7254FF21304CA6E4A124515FD99A8AA8FB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
Manifest number:          025F
Signing time:             Thu 05 Jun 2025 21:00:00 +0000
Manifest this update:     Thu 05 Jun 2025 20:55:00 +0000
Manifest next update:     Fri 06 Jun 2025 21:00:00 +0000
Files and hashes:         1: 3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (hash: WnxFkjgBAQRKMZZDYpAUe7BwDntsek7X2KvX4VwASxA=)
                          2: 323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (hash: N77OEG9pmlHUj8lD205/hv715RlaC7sqCWqYTtfKTMM=)
                          3: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl (hash: HjoPqWPdjvJ0H2BCcqVoOGaacyGlwo22TYjRIdsfXwo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
                          rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2a:c7:25:4f:f2:13:04:ca:6e:4a:12:45:15:fd:99:a8:aa:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Jun  5 20:55:00 2025 GMT
            Not After : Jun 12 21:00:00 2025 GMT
        Subject: CN=3082010A0282010100BCC8D389BAF2E71A6B13B17FF24BBEC4011088E121C4CFA95955E70A719BF4E540CC6F773BF84A46C7265AAEFE5BE75BF2EC28AC6AD21E43F10108F4F7FDBAD3DCCCE314A0AAA6852DBEF11589E355CB3750F53AA531A0288069F02C8877534C451815D6AF40FAA5C3E87A1A23CCADD55BBC2A05274A65D39C9F7C3BC0374E6E2C9154662EE8BF1494D3CE4E3E6A14DA01D1E5A787889FFE4FBEC80FE93D21193B6CB26DEE33FF78BBB663B82638516850EF654F9C08B48D95D4FA581E6C542AD2C9C12BA4B4CD63C244C941C203FE0EEEFC87D72ABE0A159B6C12E2C9E9A07FBEE4B65C59388FF5BE089BA7DAEEC931C09618AC3EAB12A3FA42FF298C36DD7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:d3:89:ba:f2:e7:1a:6b:13:b1:7f:f2:4b:
                    be:c4:01:10:88:e1:21:c4:cf:a9:59:55:e7:0a:71:
                    9b:f4:e5:40:cc:6f:77:3b:f8:4a:46:c7:26:5a:ae:
                    fe:5b:e7:5b:f2:ec:28:ac:6a:d2:1e:43:f1:01:08:
                    f4:f7:fd:ba:d3:dc:cc:e3:14:a0:aa:a6:85:2d:be:
                    f1:15:89:e3:55:cb:37:50:f5:3a:a5:31:a0:28:80:
                    69:f0:2c:88:77:53:4c:45:18:15:d6:af:40:fa:a5:
                    c3:e8:7a:1a:23:cc:ad:d5:5b:bc:2a:05:27:4a:65:
                    d3:9c:9f:7c:3b:c0:37:4e:6e:2c:91:54:66:2e:e8:
                    bf:14:94:d3:ce:4e:3e:6a:14:da:01:d1:e5:a7:87:
                    88:9f:fe:4f:be:c8:0f:e9:3d:21:19:3b:6c:b2:6d:
                    ee:33:ff:78:bb:b6:63:b8:26:38:51:68:50:ef:65:
                    4f:9c:08:b4:8d:95:d4:fa:58:1e:6c:54:2a:d2:c9:
                    c1:2b:a4:b4:cd:63:c2:44:c9:41:c2:03:fe:0e:ee:
                    fc:87:d7:2a:be:0a:15:9b:6c:12:e2:c9:e9:a0:7f:
                    be:e4:b6:5c:59:38:8f:f5:be:08:9b:a7:da:ee:c9:
                    31:c0:96:18:ac:3e:ab:12:a3:fa:42:ff:29:8c:36:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3D:EC:09:5A:EE:3C:BE:8C:E3:0A:9F:3C:AB:CC:B1:D8:F1:80:68
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:c1:59:65:2e:5b:39:d7:ab:67:5b:b8:93:45:92:c5:07:
         99:88:e4:5d:51:23:c6:ea:cf:c6:46:03:2c:8a:d1:b0:c4:e4:
         d0:91:92:d7:6e:64:96:16:6e:d3:f7:8e:f8:55:9b:67:31:cc:
         74:5f:67:93:b8:de:05:79:ed:d2:af:58:dc:04:80:38:ed:f3:
         a1:01:14:10:33:85:6d:b6:71:b9:42:73:ff:98:24:89:23:9c:
         8c:50:e3:46:97:d9:53:55:a1:44:bc:f7:6d:bf:5c:ee:91:d2:
         53:17:7f:0a:2d:88:6a:8b:a7:af:72:23:97:52:08:5e:0c:00:
         13:9c:56:00:06:37:bd:2f:d7:eb:f6:34:56:01:d3:e1:e5:00:
         6a:65:9b:3c:ee:e5:6a:8d:28:93:99:3d:32:62:22:71:7b:87:
         c7:ef:c8:7a:a5:7d:c4:dc:65:6b:fc:b4:39:66:b9:f8:41:36:
         a0:07:39:fe:16:1f:75:a6:c0:6b:0c:13:36:2c:10:5b:14:35:
         dd:5a:55:32:8b:64:eb:cd:34:30:e6:f2:aa:39:4e:94:67:eb:
         8e:63:89:6e:a7:e0:2c:a3:18:d6:f0:75:c0:f7:db:7c:3d:4c:
         1b:82:5e:2d:3e:94:c0:fd:ac:eb:71:a3:e4:85:ac:63:d1:cd:
         ec:6c:30:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:35 2025 by rpki-client