Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
File:                     7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft (raw, json)
Hash identifier:          Q/XMuRiV2nmCALUaayBnzucg9TAsQKTyf+LidXNSclU=
Subject key identifier:   CB:95:D8:04:CA:AA:EA:8E:0E:B8:FE:84:7F:84:01:83:19:A7:0C:E6
Authority key identifier: 78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7
Certificate issuer:       /CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
Certificate serial:       563B5B2A4BAA23B23C90BADEE939EC7EE49CC8FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
Manifest number:          4C
Signing time:             Wed 20 Aug 2025 05:53:49 +0000
Manifest this update:     Wed 20 Aug 2025 05:48:49 +0000
Manifest next update:     Thu 21 Aug 2025 08:16:49 +0000
Files and hashes:         1: 323830343a353635383a3a2f33322d3332203d3e20323637393932.roa (hash: UjLqPLh3sIodco2OZOdv6oxQ1f7DqERyP7MTiGmXrRs=)
                          2: 34352e3136372e36382e302f32342d3234203d3e20323637393932.roa (hash: DLDSM/FDd3lP38ym35N36xtum1+EmzYJAe+qg8z2z+A=)
                          3: 34352e3136372e37312e302f32342d3234203d3e20323637393932.roa (hash: t0jI/lpJTTHc7VQBupwX5avG5WMBOlXTvMCoYSu63DE=)
                          4: 34352e3136372e36382e302f32322d3232203d3e20323637393932.roa (hash: se2nPIzk6VDeXQmoUSmZNOvM4bkS/I8UevXMTmIqMWU=)
                          5: 34352e3136372e36392e302f32342d3234203d3e20323637393932.roa (hash: 4fIw/t0WifAbr8TwjAyHaAMJ6sHkTrtPIyfphMNEKk8=)
                          6: 7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl (hash: rTUDUIT45+c8QxKB6DGW0Pf+kNfGh2+k3ALieGanfVs=)
                          7: 34352e3136372e37302e302f32342d3234203d3e20323637393932.roa (hash: megso2uVTj3Fvi2WCJTfvWEA8qO6YpEM+v5DNs2j1ko=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 08:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3b:5b:2a:4b:aa:23:b2:3c:90:ba:de:e9:39:ec:7e:e4:9c:c8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
        Validity
            Not Before: Aug 20 05:48:49 2025 GMT
            Not After : Aug 21 08:16:49 2025 GMT
        Subject: CN=CB95D804CAAAEA8E0EB8FE847F84018319A70CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:4f:a6:e1:ff:54:92:23:c1:b6:b4:ac:04:
                    42:e8:e4:75:06:29:c4:d8:c3:7f:e6:71:5c:4d:e5:
                    73:4b:3b:b7:a5:bf:4a:0c:ad:5f:fa:bb:5f:1c:f5:
                    a9:c8:66:4d:17:57:2e:97:cd:a5:3c:8c:83:b4:ac:
                    ae:e6:e4:b3:37:b7:b9:0c:bb:94:3d:25:d1:12:a8:
                    e7:1a:28:30:27:f6:8e:f6:fd:f0:d3:80:f9:7d:8a:
                    4c:6b:df:08:32:99:eb:8c:5f:d8:ff:dd:c4:c0:bb:
                    be:ef:1b:39:94:9d:e1:7b:f0:0c:03:63:37:bd:9a:
                    58:5a:11:b2:48:d8:fc:4a:0e:0f:11:88:82:70:1d:
                    d6:a0:c2:95:d1:d4:a1:83:df:12:ae:12:b6:30:97:
                    d5:cf:fa:8c:57:ea:99:c4:23:dc:09:82:02:6d:2e:
                    96:98:26:c1:a3:d5:b5:0a:cb:dc:d6:a0:f0:9c:3b:
                    d0:94:6c:75:89:3c:95:b0:67:1e:ac:3b:82:31:18:
                    19:5e:97:60:b3:0b:39:9a:34:c8:b7:7d:28:6d:cd:
                    00:f7:ba:0c:2b:d2:7b:2a:26:76:6e:c0:fe:83:5f:
                    a5:62:0d:a3:e4:46:24:16:3e:d5:36:cb:20:02:b4:
                    1d:25:9a:e5:32:2d:e4:a5:da:2f:6b:74:c9:00:b2:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:D8:04:CA:AA:EA:8E:0E:B8:FE:84:7F:84:01:83:19:A7:0C:E6
            X509v3 Authority Key Identifier:
                keyid:78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:9d:ba:e4:da:38:bb:8f:59:b7:79:ee:c9:e5:0a:a6:cf:4f:
         e8:23:0d:2c:0b:b6:fe:4f:c2:54:15:cd:48:6a:ec:4f:36:f7:
         68:a2:8c:f2:02:e5:d5:5f:7a:23:35:2f:48:b0:98:ce:f1:72:
         30:bc:5b:11:6e:39:30:05:f5:82:fb:91:a9:7d:da:19:5b:ce:
         63:f5:ca:4b:c8:c5:76:0d:b0:16:b5:70:25:ab:1d:ea:a6:06:
         fc:92:a3:6b:73:a4:c7:22:f5:ea:5c:bf:4d:11:9b:25:84:f7:
         1c:10:56:68:28:ab:eb:d5:39:0d:8a:b0:ce:f2:e3:a9:ce:b0:
         8d:05:c6:41:c8:4e:62:53:cc:3a:85:b1:10:04:84:b9:57:cd:
         7d:79:a2:75:64:71:cb:5d:d7:82:ce:8f:6b:68:7d:c1:50:23:
         0d:b8:1b:5e:c1:38:06:44:75:75:3d:87:9e:ee:29:17:c3:cf:
         83:62:9d:7f:27:de:60:71:06:ff:86:5c:24:c3:42:ba:ce:1c:
         0b:42:9e:24:5e:7c:f8:3d:5d:ba:52:81:ff:48:1d:8b:62:2a:
         21:46:a6:16:12:7b:f9:86:af:8a:66:55:5b:4d:68:e4:94:a2:
         ca:c2:8c:f6:2f:31:de:09:3b:59:eb:40:79:df:38:f3:4f:5c:
         d4:f0:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:43:59 2025 by rpki-client