Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
File:                     28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft (raw, json)
Hash identifier:          LunAZhaXDvLJGfxrln4SXZU+PlKmBMTZ4Wz7vVV4zlo=
Subject key identifier:   57:20:B2:1E:C6:A4:E3:71:F5:82:1E:DE:60:F2:F0:9F:C1:3A:77:B4
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       3AA0AC8DB4F554B0293BA9570AE93A6AFCC488EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
Manifest number:          0285
Signing time:             Mon 28 Jul 2025 19:57:51 +0000
Manifest this update:     Mon 28 Jul 2025 19:52:51 +0000
Manifest next update:     Tue 29 Jul 2025 21:33:51 +0000
Files and hashes:         1: 323830343a376437343a383030303a3a2f33332d3333203d3e20323731353632.roa (hash: ZbPo6p/ScftCF/my+WWsLHegmB2sy1zC7mUueJ7++4Q=)
                          2: 323830343a376437343a3a2f33332d3333203d3e20323731353632.roa (hash: MxudmROzGdKah5Md9V9wV5jf3p8gXDHxjok3JD2Laik=)
                          3: 3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (hash: 4Gk48kKTN9SsGmwdSfhYTt+Hcd5W1ygERzoSo+IqOwQ=)
                          4: 3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa (hash: lPi5xr0QE5vLiZ/FdvAP9K8viXX1Dd0AlCfXahGzr7E=)
                          5: 323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (hash: ujHCchh4HkVvX3qw8a/nPtLOfcPW0GsSKDirmNhvkk4=)
                          6: 28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl (hash: xCsvaxpjmO8r9r3vqsEvWduqNsjMHVmD5/+uW4Qn2TY=)
                          7: 3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (hash: b6hyY042J0efcXpmB8FbhDcOH+Yyec/+LfGuo44Kr98=)
                          8: 3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (hash: P9yKXvhhlSkRsYakfdUQdMbTa083/HvMmg3R2Scgz/8=)
                          9: 3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa (hash: 545HbYYN9NnHI0uHbB8qazrnE932EHK5MKEv+2F0wZE=)
                          10: 3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (hash: MwakXQDp8VPS07RxEauyiv4qHuhatlLluKDPqt6YRhw=)
                          11: 3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa (hash: VoAeRcDLop4iDqVWSFGZA36P/Mvk9Prgr43AZW8xkIM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 21:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a0:ac:8d:b4:f5:54:b0:29:3b:a9:57:0a:e9:3a:6a:fc:c4:88:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Jul 28 19:52:51 2025 GMT
            Not After : Jul 29 21:33:51 2025 GMT
        Subject: CN=5720B21EC6A4E371F5821EDE60F2F09FC13A77B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:b7:51:2d:83:96:b9:b0:21:ab:30:48:27:
                    79:df:c0:32:f6:a9:c0:46:2d:2b:ef:3b:44:4c:fd:
                    38:dc:99:49:2c:11:35:25:c4:75:a0:28:da:b9:3f:
                    aa:bb:7b:d5:45:cd:e2:a0:d2:86:76:0d:c5:af:de:
                    f7:21:ba:44:da:df:d4:3b:f2:08:f7:7c:45:c8:a3:
                    22:c2:15:48:1a:b9:1c:5a:27:d6:48:cf:02:e0:60:
                    0c:2b:b2:5e:3f:42:16:4c:b4:14:63:a2:a7:e6:31:
                    ed:56:94:1e:8c:74:60:02:78:5b:dd:07:f5:9b:f4:
                    8f:fb:ae:42:18:e5:1f:7a:6f:a7:3d:75:52:aa:37:
                    dc:30:d9:8c:09:59:2a:30:9d:6e:15:8d:b2:e2:d4:
                    b9:23:6d:40:3d:47:3b:59:f2:a3:11:0d:5b:8a:32:
                    1d:0c:7e:ee:f5:3f:93:de:63:1a:c4:e7:f8:0e:74:
                    50:20:48:c9:56:8f:f5:3c:44:de:6a:c4:2c:0b:5b:
                    fc:56:90:b7:74:57:f7:37:09:82:93:44:55:84:95:
                    25:eb:8a:f6:8d:95:31:e7:4a:ce:bb:62:54:40:15:
                    e0:a1:4d:c5:67:15:a4:0e:70:a8:15:db:c8:80:b3:
                    f9:e8:85:f1:ef:70:de:c4:88:98:06:24:3d:7b:40:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:B2:1E:C6:A4:E3:71:F5:82:1E:DE:60:F2:F0:9F:C1:3A:77:B4
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:37:1d:39:2f:34:36:40:9e:5e:98:52:3e:be:90:5e:b9:
         1f:a3:95:8c:c0:28:ff:5e:29:11:ce:86:ab:f0:e0:d4:eb:4d:
         cb:a4:4f:63:1d:fa:af:e6:dc:c6:f4:15:48:f7:ca:67:35:52:
         ec:d2:30:47:36:2e:39:47:1f:d0:2e:93:e5:93:78:de:f9:55:
         6c:8c:7c:8a:53:ab:97:50:50:a2:1d:00:64:ac:9d:84:6b:cf:
         f2:16:8f:c8:50:4d:40:66:51:8a:75:41:03:ee:f6:f2:66:64:
         75:ba:a7:4e:e6:48:80:23:e6:1e:2f:60:18:61:4f:13:26:8c:
         f8:5f:6f:3b:78:16:3b:a0:f4:99:c7:ac:6c:df:e8:42:8a:7a:
         61:7a:bc:72:df:0b:f5:76:3b:2c:43:ab:88:09:a6:76:2f:1a:
         66:e1:97:2c:e9:f3:1d:60:5d:ec:c6:ba:ff:f2:6f:7e:19:41:
         86:fd:b8:5f:2c:6d:47:11:a0:32:cf:7b:38:5c:66:b8:92:f4:
         95:5b:9a:99:f9:c3:0d:3e:9b:21:1d:69:95:36:56:85:25:4b:
         1e:19:1f:e2:85:36:be:10:88:51:cd:63:6e:a0:70:f0:e2:d7:
         e6:ee:ef:7f:fc:bb:1b:5c:a5:13:a2:5c:61:d6:35:33:c1:c2:
         51:73:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:09:46 2025 by rpki-client