Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
File:                     AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json)
Hash identifier:          dbKM+oMLSmT/eI42gTKp2YVCN3wtBAFzJeB6s01cf1U=
Subject key identifier:   5B:1C:84:DE:C2:70:4D:30:9D:67:B7:78:A5:BA:D4:19:CA:75:A5:9A
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Certificate issuer:       /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial:       5358ABFE8509C8F924A56795911E8C7C6B22791F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
Manifest number:          E8
Signing time:             Mon 09 Jun 2025 22:38:32 +0000
Manifest this update:     Mon 09 Jun 2025 22:33:32 +0000
Manifest next update:     Tue 10 Jun 2025 23:13:32 +0000
Files and hashes:         1: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=)
                          2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=)
                          3: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: GiXA2dg16yH9P8XCcPOSvkXXxVVfmWhf6/8qppi+Mn4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
                          rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 23:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:58:ab:fe:85:09:c8:f9:24:a5:67:95:91:1e:8c:7c:6b:22:79:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
        Validity
            Not Before: Jun  9 22:33:32 2025 GMT
            Not After : Jun 10 23:13:32 2025 GMT
        Subject: CN=5B1C84DEC2704D309D67B778A5BAD419CA75A59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:15:3c:b7:b5:73:d2:a3:5c:28:c0:d7:7e:
                    c2:68:05:f9:17:fe:9d:7c:01:bd:9d:e8:55:58:17:
                    3c:fa:fd:b3:38:7d:9a:61:cc:3d:19:fd:94:8c:3e:
                    0c:e5:c3:bd:7e:24:ab:c5:da:38:51:bc:d6:eb:6d:
                    83:73:60:a7:d7:95:dc:14:60:91:d9:e6:63:af:cd:
                    85:2f:28:8e:fe:12:6f:2f:de:f0:9b:ba:98:b9:f4:
                    ba:5e:e8:41:85:4c:6a:47:89:79:c2:e3:b8:ca:55:
                    00:ce:37:57:c7:87:d8:7f:7d:b1:0f:82:65:f2:b4:
                    6d:0a:bb:ae:36:d2:43:dd:5a:c5:ed:0d:1e:bd:b4:
                    2b:56:04:d2:d2:c7:c0:8a:7e:94:a5:af:99:99:52:
                    68:10:3a:b5:98:52:d5:ac:c9:06:5f:8d:fb:8a:de:
                    d1:41:39:6f:b3:9f:12:84:d8:d9:92:d8:59:13:bb:
                    cf:90:0f:8b:31:57:a2:d8:d6:4f:40:1f:ed:dd:c1:
                    d7:86:70:f9:0a:9c:4e:3f:c2:c0:cd:8d:d0:a2:b0:
                    08:98:a3:fa:ba:19:3f:2e:6c:9b:7b:2c:ce:2a:df:
                    37:2e:fa:3a:ac:ca:8e:47:59:77:ac:75:61:e7:da:
                    3a:87:e8:6b:91:ac:09:36:34:e8:10:4f:d8:0f:b3:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:84:DE:C2:70:4D:30:9D:67:B7:78:A5:BA:D4:19:CA:75:A5:9A
            X509v3 Authority Key Identifier:
                keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:c1:12:e3:f2:7b:8b:4e:9f:a1:8a:4f:72:89:16:4b:bf:cf:
         22:13:2f:11:83:76:5d:da:2b:e7:8b:79:c6:8d:ed:82:63:8d:
         dd:43:41:f6:10:ef:2c:80:a8:6a:d9:d8:5f:87:29:70:55:1d:
         1e:40:a4:c0:76:a4:2f:37:2a:d1:ca:69:18:fd:ca:30:70:e3:
         33:8b:93:b5:76:ba:48:fb:66:67:0c:b9:6f:f1:2a:a5:60:f2:
         ad:1a:35:ed:a0:86:7a:28:af:2b:4c:1e:ad:b6:8c:1a:13:d6:
         0d:22:a9:c4:22:78:12:42:52:cc:67:2e:b9:c2:0b:f8:ae:0c:
         02:ce:d3:b7:3d:f2:b3:05:26:91:9e:96:3f:52:6f:13:02:fe:
         4f:51:bc:b0:08:2b:a4:6e:c8:02:fc:b0:ed:32:11:3b:3d:97:
         3c:73:3e:48:17:54:0d:a6:82:a0:61:81:b5:15:bb:09:a5:58:
         66:9e:eb:b1:81:b3:58:fe:d4:a6:48:95:24:30:09:55:4b:1a:
         99:f4:55:5f:e7:e9:14:02:72:c3:42:ec:e0:e7:b9:f4:81:c5:
         bf:52:fb:c4:e4:69:c0:01:2f:c7:b0:cb:1a:04:f3:8f:6d:8e:
         65:bf:d3:00:f7:a8:ca:4e:74:14:a8:72:54:d6:d9:34:42:ab:
         bf:e0:a6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:33:05 2025 by rpki-client