Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
File:                     785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft (raw, json)
Hash identifier:          KNsvuS0qdpE3/o/i4eqpSr0VjciR9gpwtFPMR3ff28U=
Subject key identifier:   92:26:8F:D8:D2:AD:8B:B9:1A:7B:BE:76:84:65:FE:47:8F:D3:9E:58
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       02F39F9F409DDDF29A0AF5A36DE366D61DE4D880
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
Manifest number:          0289
Signing time:             Tue 03 Jun 2025 19:10:00 +0000
Manifest this update:     Tue 03 Jun 2025 19:05:00 +0000
Manifest next update:     Wed 04 Jun 2025 19:10:00 +0000
Files and hashes:         1: 323830343a313263633a323030303a3a2f34382d3438203d3e20323633343939.roa (hash: f2axc9NmbwwbtMomf1tyzIEV4Z3F7+8xYOQbKsgUZkE=)
                          2: 323830343a313263633a3a2f33362d3336203d3e20323633343939.roa (hash: kg8oe9S81gutxp+p5O1ZnJv10r86cMye2Fxh8cxNwg0=)
                          3: 323830343a313263633a323830303a3a2f34382d3438203d3e20323633343939.roa (hash: E9Fov4LRm+QbjL6Wh1C1f4V+hzzu8O7Au+3B9XIQmRM=)
                          4: 323830343a313263633a3a2f33332d3333203d3e20323633343939.roa (hash: rCtK/uXh7J8ybcySMJ2sgNsxEq1z2Eu0P0/+hY4gXyk=)
                          5: 785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl (hash: tTNXU9XxZuTNL0v2fM+e6hYZCIFHy3rLc6uz4pnvRLc=)
                          6: 323830343a313263633a3a2f33322d3336203d3e20323633343939.roa (hash: Isd50FLFxmfny6Tbkpy0metCBRwZ4joTCDmpwne5358=)
                          7: 3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa (hash: sXW/9ybIn9TuU3Ud4tZ+E/1zXutuOac3KC7b8Z98KEE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f3:9f:9f:40:9d:dd:f2:9a:0a:f5:a3:6d:e3:66:d6:1d:e4:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jun  3 19:05:00 2025 GMT
            Not After : Jun 10 19:10:00 2025 GMT
        Subject: CN=3082010A0282010100BBF14478360D73BE725A9956B591F3739ABD6428266307386EF0359D219ADB4BDC41A8E9995E3A5B1AE15CC4CE3B6E462E30D3D174E1A2C25B22CBE4F922CD570610CEC20012106059B5D6ABF1AA9016161770AEA257DC442FF7F466595DA12D8DED9D196A89628241AB8DB4C8A14E2C6735E2E117F2AB1926AC8AA5650D48FC8DB6529B2BB28FD8474CA0EDD3121BDBFC4D311715B8B57360F92F5CE51538093C5AABB55EFDF33C85F4390162503D50B72E3EE19EAC020ED5F256DE95ABA78A1A4869676C7FDD68771480AA865FD101085A4B255525947CEA3730AB4F7B7B54B0719FF35EF906853C61510827F2297FCFD6A31EF4756874A86B005D3DD6FBF50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:44:78:36:0d:73:be:72:5a:99:56:b5:91:
                    f3:73:9a:bd:64:28:26:63:07:38:6e:f0:35:9d:21:
                    9a:db:4b:dc:41:a8:e9:99:5e:3a:5b:1a:e1:5c:c4:
                    ce:3b:6e:46:2e:30:d3:d1:74:e1:a2:c2:5b:22:cb:
                    e4:f9:22:cd:57:06:10:ce:c2:00:12:10:60:59:b5:
                    d6:ab:f1:aa:90:16:16:17:70:ae:a2:57:dc:44:2f:
                    f7:f4:66:59:5d:a1:2d:8d:ed:9d:19:6a:89:62:82:
                    41:ab:8d:b4:c8:a1:4e:2c:67:35:e2:e1:17:f2:ab:
                    19:26:ac:8a:a5:65:0d:48:fc:8d:b6:52:9b:2b:b2:
                    8f:d8:47:4c:a0:ed:d3:12:1b:db:fc:4d:31:17:15:
                    b8:b5:73:60:f9:2f:5c:e5:15:38:09:3c:5a:ab:b5:
                    5e:fd:f3:3c:85:f4:39:01:62:50:3d:50:b7:2e:3e:
                    e1:9e:ac:02:0e:d5:f2:56:de:95:ab:a7:8a:1a:48:
                    69:67:6c:7f:dd:68:77:14:80:aa:86:5f:d1:01:08:
                    5a:4b:25:55:25:94:7c:ea:37:30:ab:4f:7b:7b:54:
                    b0:71:9f:f3:5e:f9:06:85:3c:61:51:08:27:f2:29:
                    7f:cf:d6:a3:1e:f4:75:68:74:a8:6b:00:5d:3d:d6:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:26:8F:D8:D2:AD:8B:B9:1A:7B:BE:76:84:65:FE:47:8F:D3:9E:58
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a5:f6:bb:c0:8b:38:3d:1e:67:d3:28:09:08:b8:44:42:9a:
         e0:16:11:38:cc:fa:45:62:db:4c:d6:ea:5d:b1:58:3b:d7:ba:
         ee:8c:98:7e:32:d7:b5:3c:9b:5b:4c:51:14:ab:ed:cf:e0:7e:
         c1:5e:a3:f9:39:47:38:37:52:38:ee:92:56:19:f9:da:d0:f6:
         8e:8d:4a:4f:b0:aa:d9:17:a1:7a:0b:8a:f5:ef:65:cd:c2:de:
         5e:a3:61:bf:ae:95:31:af:b8:fe:b0:9d:48:2e:dc:a1:e2:d2:
         8a:9a:03:b7:27:f2:6d:ab:f1:ca:a3:13:17:b0:5a:63:3a:ba:
         3b:f4:ca:74:67:a8:03:b9:5d:cc:78:e2:b7:e4:a7:c8:0b:39:
         1c:26:cc:56:e6:f2:01:8f:e7:4d:51:20:db:04:39:11:d9:a1:
         38:e3:3b:02:16:6b:09:36:f4:02:76:f6:2e:63:0e:2e:21:b9:
         1d:4b:70:ba:7e:b1:8e:dd:01:9a:39:5b:9b:77:d6:98:6d:6c:
         a0:94:1d:e4:8f:0b:8b:eb:9d:c9:70:f7:8c:48:22:c0:2b:22:
         3a:8e:e1:86:f0:8d:b7:f6:87:e6:a3:03:20:75:18:d0:dc:b5:
         9b:87:88:47:5e:7c:67:6b:50:d4:19:40:3e:f3:2b:4c:34:77:
         3d:19:2a:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:28:13 2025 by rpki-client