Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
File:                     D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft (raw, json)
Hash identifier:          2xkvduOBIQ82im2OAT07+G6YrlxRrjCpNMXrHx583dc=
Subject key identifier:   38:7E:43:1C:D4:EF:32:52:7B:8D:5D:58:C0:92:D1:73:79:86:D9:C8
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       10BB388950FEF93B7D7EA385D9EDA76719BA1987
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
Manifest number:          23
Signing time:             Tue 19 Aug 2025 22:36:26 +0000
Manifest this update:     Tue 19 Aug 2025 22:31:26 +0000
Manifest next update:     Thu 21 Aug 2025 02:17:26 +0000
Files and hashes:         1: 34352e3138322e33322e302f32342d3234203d3e20323639323635.roa (hash: gDKF4Wwnv8nYlZMHxKheOOJRwPHFzRP2IDSa3GY2Mi4=)
                          2: 34352e3138322e33352e302f32342d3234203d3e20323639323635.roa (hash: mySaU6fwlINwOm8Fs2UnMlGXQ421idH9Xpz0cducaT4=)
                          3: 34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (hash: mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=)
                          4: D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl (hash: ebNgGYCIrD+ieG8RYixAQzxogenk+KtYQ7+jJVjKfDI=)
                          5: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: pCzDonosnG1M/FMYP6mGKnR9D//kOSapxlVj/nSW3nk=)
                          6: 34352e3138322e33342e302f32342d3234203d3e20323639323635.roa (hash: xOoERlEhSi9M48UCfsW4Jh3De+JMGZNiha1TchGUW94=)
                          7: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 02:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bb:38:89:50:fe:f9:3b:7d:7e:a3:85:d9:ed:a7:67:19:ba:19:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Aug 19 22:31:26 2025 GMT
            Not After : Aug 21 02:17:26 2025 GMT
        Subject: CN=387E431CD4EF32527B8D5D58C092D1737986D9C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:75:81:e0:54:d2:ff:32:27:ef:11:bf:de:
                    92:08:93:e9:50:74:46:de:51:5d:f9:26:2d:d9:9c:
                    2d:cd:3d:f2:0b:1f:54:76:0e:98:96:e6:dd:70:25:
                    a2:1a:82:cd:0f:09:ef:77:cf:e2:49:92:c6:3e:7e:
                    2a:31:21:02:e8:c0:f8:da:4e:e5:22:81:57:80:fc:
                    cb:e7:93:86:70:86:19:ed:2c:1c:76:76:af:7c:86:
                    31:07:d4:7c:71:35:e4:6c:24:97:f5:78:60:0e:fb:
                    e0:9c:1e:ea:02:66:9e:11:4e:50:80:b8:f5:eb:38:
                    2b:e2:1e:02:67:b7:63:12:f0:fe:8f:99:4a:ce:d2:
                    97:e6:ca:2a:1b:8a:37:ab:00:ad:ee:c4:26:9e:fe:
                    01:57:9f:11:a4:34:e4:da:22:3b:25:61:1d:d5:b4:
                    93:54:f7:cc:44:38:e7:21:9b:53:a4:a9:d2:f7:0a:
                    be:38:b9:a9:4c:08:f1:73:ed:75:65:77:f6:c4:08:
                    ac:21:5f:b0:ed:a4:8f:ac:84:27:d2:e3:b4:ca:03:
                    8b:b9:64:56:c6:f2:ef:33:18:46:d5:67:92:96:b9:
                    02:20:e5:1c:ee:de:58:39:a0:46:aa:4f:04:19:1c:
                    05:07:07:48:75:4a:c5:14:b1:1c:09:96:26:8a:4f:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:43:1C:D4:EF:32:52:7B:8D:5D:58:C0:92:D1:73:79:86:D9:C8
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0d:5d:47:e3:a8:1f:2d:73:21:6e:cf:ef:c0:6d:a3:e9:5e:
         ec:65:f0:6f:41:d8:96:fd:76:2c:09:86:a6:cd:87:1b:96:ef:
         e0:5e:5a:49:31:5c:68:3a:95:2c:63:7f:9f:9b:a4:64:6c:58:
         cd:ee:ac:3b:2a:e8:c5:b8:04:2a:2a:00:2b:c8:e8:4d:dc:9f:
         4b:64:25:07:04:4c:c8:36:89:2e:3c:be:85:d7:e4:d7:09:cb:
         74:04:78:c0:3d:d4:ac:0a:03:ec:e2:41:67:8c:e9:7c:92:6e:
         67:cc:f5:ba:52:ec:bc:a5:95:60:85:86:49:e2:17:70:a7:3b:
         39:13:bc:94:8c:35:f5:4a:bb:11:8a:79:23:ee:e9:79:eb:f9:
         20:82:41:90:a6:6f:e6:8f:18:7e:f6:64:4a:a8:8b:95:df:cf:
         de:bd:ae:2b:cf:f7:b7:e4:ea:95:d8:8e:4e:22:e5:6d:6b:a6:
         28:c9:d1:07:63:65:6f:60:f2:85:53:9e:35:99:0d:ac:6d:68:
         fc:cd:e4:23:8c:40:e7:53:a7:a4:18:f8:82:ca:5a:85:3a:db:
         60:8e:df:a7:0d:77:1d:5a:2b:9b:e2:75:a0:97:c5:9f:1d:31:
         5c:74:6e:25:62:65:c9:0c:22:cb:c7:d4:3c:b6:c6:62:98:12:
         0e:9b:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:31:37 2025 by rpki-client