Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
File:                     582517B9105955B7B839FB60DC59AE677C6B4DED.mft (raw, json)
Hash identifier:          kod8ZNNRvzA4szkHcCs00MAYBLQYdGENO/jZe3vnvvs=
Subject key identifier:   52:D9:B6:48:B4:3C:FE:35:C0:BA:E0:11:A2:70:EA:0C:A9:D9:22:C3
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       4CB929170986C21E508D551176ABE117FD6238BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
Manifest number:          023D
Signing time:             Fri 06 Jun 2025 06:15:09 +0000
Manifest this update:     Fri 06 Jun 2025 06:10:09 +0000
Manifest next update:     Sat 07 Jun 2025 09:31:09 +0000
Files and hashes:         1: 34352e3138362e38382e302f32322d3234203d3e20323639343137.roa (hash: xP1F0pMSSokgmJoEtD1tmFwDICZcoxgevpV5id1ez8g=)
                          2: 582517B9105955B7B839FB60DC59AE677C6B4DED.crl (hash: yQzB0porO4YZI9aOPXGKZMZniK9eqOsKOoErOmfkQuo=)
                          3: 323830343a363434343a3a2f33322d3335203d3e20323639343137.roa (hash: H8Elqz19bRblZhKEx7VnGb4ZBsNWV8X8BsYHFXyB+AI=)
                          4: 323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa (hash: 8s5e127dU7/EznWjKEQqBfCMfHXWL9OO9dUHUkrLvUs=)
                          5: 323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa (hash: Fm72jXNedihMmSVYwWDB9msaqzvPn+whkD1ujIfoFQ0=)
                          6: 323830343a363434343a3a2f33362d3430203d3e20323639343137.roa (hash: JPJQP27OEK8rUPH8CmEfxGwM8CyPkwEg19EZpb7vMjk=)
                          7: 323830343a363434343a313130303a3a2f34302d3430203d3e20323639343137.roa (hash: 6f1yJXItyt0SjHHrPR4mrHZLPA/DpvcqSMVQ6OliXwg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 09:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b9:29:17:09:86:c2:1e:50:8d:55:11:76:ab:e1:17:fd:62:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Jun  6 06:10:09 2025 GMT
            Not After : Jun  7 09:31:09 2025 GMT
        Subject: CN=52D9B648B43CFE35C0BAE011A270EA0CA9D922C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:54:07:c3:73:cf:0b:fe:67:56:74:58:f1:
                    fd:db:d4:b8:00:41:22:a8:c6:4c:44:28:e7:0c:d0:
                    2f:d0:c0:b8:37:06:5c:03:26:30:76:4f:e1:8d:94:
                    b5:31:8c:f9:75:66:1e:cc:c2:0b:c0:39:b2:d6:b6:
                    70:be:ef:f3:36:f1:f9:20:42:07:52:0d:66:77:2b:
                    19:f9:78:6e:1b:94:90:aa:34:a4:f6:27:5f:4c:27:
                    bd:b5:b7:68:ec:85:ea:35:b2:fc:3e:81:62:2a:36:
                    0b:48:80:e2:80:a2:5f:b9:ec:53:72:b7:4d:ee:89:
                    43:11:52:6b:49:07:6e:af:6f:36:f1:48:7f:2b:37:
                    65:57:8c:a6:13:35:0e:b8:52:0d:16:39:60:ae:26:
                    1f:59:55:86:3f:6f:c3:89:9d:ad:8d:ea:0c:b6:a9:
                    36:4f:6a:e4:88:32:d0:61:a0:be:56:a2:2c:68:2f:
                    6c:6c:24:d0:0f:1d:0c:00:e1:d4:fd:6b:ca:78:90:
                    d1:9a:3d:28:8d:ee:bc:2e:20:b1:37:47:17:0e:7d:
                    51:eb:78:8c:92:fc:80:eb:b5:11:1d:64:6f:1e:db:
                    9f:be:17:22:36:fb:50:d0:39:f8:52:4b:ce:dc:09:
                    8f:d2:37:95:78:36:a0:b9:8d:60:7e:3e:c5:b5:17:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:B6:48:B4:3C:FE:35:C0:BA:E0:11:A2:70:EA:0C:A9:D9:22:C3
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:34:07:f5:9a:85:46:d1:b9:cf:f3:85:03:3c:aa:49:ec:
         23:23:8d:fc:ed:e0:fb:5a:f9:3c:5a:79:24:d1:98:b5:04:a3:
         0d:9d:cf:2a:23:62:12:5d:2d:c8:be:48:84:88:b5:63:8c:5f:
         96:b9:6a:7e:14:5e:16:4e:92:9f:41:7f:34:98:fd:89:e2:52:
         3a:b7:3a:36:eb:84:95:ea:55:02:75:c7:a4:c9:57:67:63:b0:
         70:ba:1b:30:fe:45:5c:d1:5d:2c:ed:08:66:b7:48:ea:8b:89:
         5a:85:d2:72:60:74:65:a5:78:2e:e0:d1:d8:a2:cb:e7:99:05:
         9a:94:f0:f8:b6:f3:50:e2:2b:06:00:5b:93:f2:46:8c:a4:f0:
         25:4d:ad:e8:ca:26:ab:8d:3d:3f:34:bb:0b:03:a7:d2:ea:cb:
         fe:1a:94:bd:a5:f3:53:e1:b2:15:e3:a3:e1:55:81:cb:3a:74:
         8d:99:24:c8:47:4d:43:1c:16:da:4b:84:29:a2:b0:27:96:a6:
         bb:8d:ff:87:b3:2c:6e:43:6f:05:d4:42:74:e0:b2:ef:a7:a3:
         76:f2:b8:a9:0b:81:31:0a:11:aa:c4:6b:58:70:f4:7f:69:29:
         20:e9:6a:8b:20:d3:ec:58:9c:ab:71:3d:bb:c5:60:4f:b3:4b:
         61:f8:26:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:31 2025 by rpki-client