Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
File:                     AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json)
Hash identifier:          1LAxMvINZOXyyuB8TEis7ERpGm7zGoO3TjFs2/CACF0=
Subject key identifier:   12:76:52:65:25:8B:4D:55:38:D0:7C:9D:E2:28:AB:71:D5:74:66:7B
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Certificate issuer:       /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial:       78456BB3F125FF95D74CA48EE8CEDF1339DE8EA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
Manifest number:          E9
Signing time:             Tue 10 Jun 2025 15:13:40 +0000
Manifest this update:     Tue 10 Jun 2025 15:08:40 +0000
Manifest next update:     Wed 11 Jun 2025 16:08:40 +0000
Files and hashes:         1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: CrWQ8txYXAvzK+pe5zua5TDbxvFXIGHnfA1FDfEJZ8I=)
                          2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=)
                          3: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
                          rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:45:6b:b3:f1:25:ff:95:d7:4c:a4:8e:e8:ce:df:13:39:de:8e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
        Validity
            Not Before: Jun 10 15:08:40 2025 GMT
            Not After : Jun 11 16:08:40 2025 GMT
        Subject: CN=12765265258B4D5538D07C9DE228AB71D574667B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:ab:66:01:7b:a5:1b:ff:48:5e:25:74:1b:
                    63:80:24:e4:4a:da:5e:98:16:1e:82:51:94:fb:ff:
                    92:6c:6f:f6:33:0c:eb:9a:e5:b5:b3:f6:7c:78:4f:
                    69:ef:21:ce:1d:08:dd:9f:5d:ce:d8:a5:17:a8:f0:
                    81:d0:dc:b8:e7:5c:88:b9:06:34:4b:ae:6a:9b:63:
                    3b:84:c8:21:38:82:c6:2e:e9:3a:81:dd:66:21:50:
                    a8:79:6a:44:f7:1c:e9:1e:f5:c1:a8:65:dd:09:cc:
                    c0:72:8c:7d:40:6f:f1:0d:72:1a:a9:c7:87:fc:48:
                    20:58:fb:a5:4f:b5:d5:af:64:2c:76:6b:ad:9f:21:
                    02:e7:34:c3:62:07:db:4f:d1:ce:8f:d6:24:96:d4:
                    73:43:39:29:7f:8e:42:31:9b:50:43:2d:1b:a6:38:
                    bb:7a:c0:7c:aa:6b:c7:cc:db:f1:c5:54:22:bb:a1:
                    1c:a2:85:47:e1:7f:25:a1:b3:a2:82:b5:65:23:71:
                    aa:d1:f4:fd:bb:b3:3a:b1:9e:aa:3d:c8:54:80:c0:
                    e2:db:3c:b0:98:d5:71:4d:07:89:a8:55:06:a6:de:
                    7b:f0:7f:27:7e:67:b8:73:b3:b3:2c:fc:79:f2:bf:
                    7e:fd:4a:b9:08:bb:c6:ad:79:a9:07:e4:5d:08:50:
                    4f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:52:65:25:8B:4D:55:38:D0:7C:9D:E2:28:AB:71:D5:74:66:7B
            X509v3 Authority Key Identifier:
                keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:32:92:cf:23:7b:d5:3a:1a:a2:64:48:54:a0:7b:14:0d:e7:
         77:b6:74:11:b0:32:75:cf:c3:9a:ea:1f:75:96:0c:85:bd:c9:
         b8:75:3d:0b:b7:11:5b:bf:40:56:f7:3e:91:d7:24:7b:41:73:
         e9:6c:9c:bc:ab:d8:fe:c0:ff:a2:6a:5c:b9:34:9f:79:62:7c:
         38:2f:0a:32:9f:71:e0:57:9c:fd:80:df:e1:87:ac:d2:6f:7f:
         68:25:9f:bf:d6:d5:15:bf:ce:26:96:a7:71:57:9a:82:1d:fc:
         c7:54:ca:8a:b2:05:05:fa:b6:ed:7b:9e:d6:58:0b:c3:be:ea:
         ec:94:31:30:2f:1a:42:79:2e:b7:cb:43:47:57:27:80:47:ed:
         d2:99:17:76:38:fd:53:a9:f4:4e:f4:8c:c9:3d:fd:aa:a2:51:
         95:ea:78:a1:b9:0f:a6:2c:52:1c:ce:66:eb:76:f3:32:a8:59:
         ea:54:dd:82:cb:ab:52:5d:21:f7:74:77:1c:cc:7b:a5:2d:ea:
         c0:fa:45:dd:dd:15:bb:cd:48:fb:f1:1c:0a:b7:c3:59:13:62:
         d0:95:fc:c2:5a:80:1a:75:df:7f:e5:ef:47:2c:c9:af:13:d7:
         97:36:91:e9:b9:1d:7b:c2:ee:fd:75:73:ef:01:ab:fc:36:df:
         86:2a:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:40:41 2025 by rpki-client