Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File:                     CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier:          EgWPhXifqKKG7Vy+fSvpeKX1JjKuI6Ft6iGqa2QQhKA=
Subject key identifier:   CC:C6:8E:65:F6:61:24:A5:3C:17:4E:B2:3A:EE:A3:6E:9C:1C:9B:12
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       4A86FBC5ADB03D48504DB7E322864779C3ACBC1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number:          0323
Signing time:             Fri 19 Sep 2025 03:10:00 +0000
Manifest this update:     Fri 19 Sep 2025 03:05:00 +0000
Manifest next update:     Sat 20 Sep 2025 03:10:00 +0000
Files and hashes:         1: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=)
                          2: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=)
                          3: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=)
                          4: CA2ED340034D0368230850867C30E245990118A2.crl (hash: rfz7dAnV2FH4V8oDIuGOynSFbn5fZ5B5pHegMexVU+8=)
                          5: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=)
                          6: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=)
                          7: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=)
                          8: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=)
                          9: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:86:fb:c5:ad:b0:3d:48:50:4d:b7:e3:22:86:47:79:c3:ac:bc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Sep 19 03:05:00 2025 GMT
            Not After : Sep 20 03:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:56:68:74:de:6b:eb:5a:84:26:2e:bc:1a:
                    24:10:bd:3f:81:c4:db:98:14:97:fd:46:9a:3a:68:
                    b5:3a:75:c4:58:5b:a1:f4:8a:44:a9:81:bf:6d:48:
                    b0:a2:9d:a3:f5:28:f5:7f:21:2b:6f:8e:04:e5:4d:
                    5e:60:27:e7:ab:91:09:b0:d1:86:74:0c:a6:35:32:
                    79:1e:08:61:d6:ff:7f:f4:5c:e1:7f:84:be:58:94:
                    e9:dd:e0:04:94:36:30:8f:2e:d1:47:d5:f4:ac:77:
                    9a:5a:5d:44:74:81:8f:2d:64:18:ce:4e:c7:a3:d6:
                    d0:8d:e0:c6:66:a9:22:06:41:13:52:fa:30:35:1f:
                    50:92:a5:14:df:de:9f:09:b3:e1:c7:90:98:62:75:
                    d2:ee:5d:7d:5f:eb:b0:d6:a4:fb:d9:2e:a9:9b:ad:
                    54:6c:37:3e:d2:85:76:2b:f6:f7:aa:06:ad:4b:9f:
                    92:93:61:d7:8e:e6:15:b3:a6:90:ed:71:20:20:f5:
                    56:54:a8:cc:70:bb:c3:88:34:55:2e:7c:54:c4:70:
                    82:eb:07:b7:71:72:34:f7:9f:fd:df:24:40:ee:15:
                    5e:93:5d:fb:7e:9e:2e:61:13:d0:c3:0a:0a:53:a7:
                    84:1c:6c:ac:43:88:7e:0a:b7:9b:3a:b6:f7:c9:89:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:8E:65:F6:61:24:A5:3C:17:4E:B2:3A:EE:A3:6E:9C:1C:9B:12
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:1a:d1:60:e5:56:15:64:51:82:fc:f0:13:49:2f:0b:07:
         eb:43:37:29:92:42:d9:53:b0:54:59:7c:b9:ab:ea:09:67:3b:
         2b:ad:3a:2a:ae:22:e6:4a:1b:19:54:29:fc:77:d4:1a:3f:2f:
         de:69:28:98:b2:1e:43:6e:48:52:a2:bd:fe:89:b3:42:e0:ce:
         09:3c:67:00:2e:07:cd:ea:a0:1f:07:6f:64:5a:a4:c8:62:9d:
         5f:f7:0e:eb:e5:61:b8:1a:cd:3f:a2:2c:b6:5b:ac:25:1a:5f:
         d7:74:94:47:aa:e7:20:83:88:3b:1d:91:7e:09:a8:14:97:68:
         1f:ec:e6:a8:30:c9:bb:76:44:4e:65:59:64:3b:43:b1:05:d6:
         2c:68:8d:2f:33:3e:f9:81:ef:c6:41:08:ea:a4:5c:30:0e:04:
         4a:d4:2a:07:4d:b1:23:d4:41:11:b7:3e:b4:8e:c2:d2:c3:b6:
         0a:8a:c8:e4:48:9c:2f:1a:c5:a6:2c:5a:67:39:cd:eb:9c:b3:
         9e:c5:c3:ac:83:4f:29:f2:43:04:c9:f0:25:bc:ee:3f:fd:04:
         32:fb:8b:d2:2c:08:29:ed:f4:4c:e7:da:ea:8a:ab:28:00:f8:
         a0:24:67:c8:b1:de:f9:8e:20:1c:52:8d:81:cc:9b:16:0f:1e:
         6f:b7:c1:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:07:09 2025 by rpki-client