Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File:                     CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier:          w/uaGvJdQKmen3zDfu0FqGNvIfCdMzhhe5X3+fZVSUg=
Subject key identifier:   C8:20:EA:EC:7D:08:8E:B1:8A:2E:7D:3B:64:A4:45:88:83:91:A7:AE
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       0B9D8DE9F731E62C1827BD53E7C9CEAEDC5F1AC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number:          0287
Signing time:             Sat 07 Jun 2025 03:10:00 +0000
Manifest this update:     Sat 07 Jun 2025 03:05:00 +0000
Manifest next update:     Sun 08 Jun 2025 03:10:00 +0000
Files and hashes:         1: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=)
                          2: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=)
                          3: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=)
                          4: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=)
                          5: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=)
                          6: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=)
                          7: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=)
                          8: CA2ED340034D0368230850867C30E245990118A2.crl (hash: O/bdQ/S2V3R74aGEkpo7nzsoRQEAokgsYUv3+8U3+QM=)
                          9: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9d:8d:e9:f7:31:e6:2c:18:27:bd:53:e7:c9:ce:ae:dc:5f:1a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Jun  7 03:05:00 2025 GMT
            Not After : Jun  8 03:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:79:47:2e:d1:b8:c8:29:87:3f:2c:66:2d:
                    e3:88:60:b8:97:4a:23:6d:43:19:a7:85:6d:f7:ea:
                    58:ce:b7:70:8f:08:19:37:9f:0e:80:da:79:a8:0f:
                    97:d3:74:49:92:fc:fd:e3:07:60:af:3f:03:5f:82:
                    d8:6f:00:9e:81:dc:67:58:9c:c3:2c:47:88:cf:d3:
                    fd:2d:2d:16:50:95:62:cf:f9:d8:e8:e5:52:6d:fd:
                    5d:89:db:ea:46:a4:61:ef:68:72:0a:7b:7a:93:77:
                    0b:92:c3:e4:60:fe:f8:be:29:3e:c5:b6:bf:e2:7a:
                    e7:dd:1c:48:09:d1:ad:7e:b9:48:e2:ff:3a:3c:cb:
                    dd:ed:e2:2d:54:5a:d5:4e:b4:e6:65:cc:57:03:80:
                    2a:cd:d7:ff:f0:57:cc:54:b4:62:f9:db:bf:ef:ea:
                    26:1d:81:fc:28:a4:6c:2a:cc:63:fb:c8:b7:b0:24:
                    b7:81:5b:dc:38:1b:23:0c:75:cd:95:c5:65:9a:aa:
                    36:a1:a9:18:8e:f6:28:59:01:07:37:47:6c:06:3d:
                    7d:14:bf:02:74:39:cc:7c:41:79:d5:11:46:7e:7f:
                    1b:2a:82:8b:b2:62:2b:93:d7:aa:d1:49:42:d1:34:
                    20:d2:c5:69:a1:fd:85:ef:84:1a:d0:0f:36:da:28:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:EA:EC:7D:08:8E:B1:8A:2E:7D:3B:64:A4:45:88:83:91:A7:AE
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:88:55:d9:2f:88:32:88:b5:d6:26:d9:af:cc:25:d4:91:59:
         57:31:c3:06:06:18:fb:a4:0f:57:70:ba:fc:11:ff:8c:24:16:
         b8:6b:0e:ed:0f:60:59:af:3f:45:0c:18:18:73:1d:70:e1:b6:
         19:d9:87:7e:82:21:b9:3c:48:7a:b8:dc:d5:38:dd:57:5d:eb:
         fc:e2:e5:8e:e0:c6:5d:84:9f:78:f3:30:18:de:ca:ff:f9:18:
         35:59:bf:ae:fb:a9:c5:ec:c2:af:cc:4a:58:5b:c8:fa:27:73:
         b0:24:2c:9a:0c:58:cc:bf:aa:82:e5:cc:b4:df:ef:12:93:f9:
         64:de:85:d2:f6:11:02:6d:2b:d4:2f:c6:e0:cf:3d:20:5d:f0:
         ca:56:6c:3b:10:36:f1:35:a5:f2:6a:31:cc:39:f3:62:c1:a5:
         87:b7:56:9a:8a:c4:2f:87:cf:fc:b6:f8:c9:c4:06:15:78:c3:
         2c:eb:41:a4:06:bc:b5:f6:39:19:74:43:db:fa:42:b9:c8:64:
         96:fa:6a:43:45:37:66:f7:15:d6:ff:01:aa:4c:6f:9d:0f:a3:
         fd:ec:bd:a4:83:f5:6d:63:9c:98:fb:6d:22:5b:af:fc:bf:5c:
         41:04:a6:4d:80:c5:80:03:60:a0:fd:59:ee:65:e0:4c:71:37:
         e7:14:b8:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:23 2025 by rpki-client