Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          IhUYyDqx/pC+JDcjhny2ivNwU26FCZdIqnrAFStSGBs=
Subject key identifier:   1B:99:1A:2E:05:1B:CF:24:D1:AF:AE:A4:1B:10:09:94:E9:54:80:E5
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       09949DD81EE2783695CA0189EE91C69CD1990A56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          02C4
Signing time:             Wed 17 Sep 2025 14:34:25 +0000
Manifest this update:     Wed 17 Sep 2025 14:29:25 +0000
Manifest next update:     Thu 18 Sep 2025 16:30:25 +0000
Files and hashes:         1: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: sqv4PJRsVf1fbuPiqi5aE4THOHXbUo9nkuAmPfa1rXE=)
                          2: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=)
                          3: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 1GNUZSNPHTUgvUkppz4F7t0eGoRsad2SmjP7A9wBQ4U=)
                          4: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: jFOKmZdUzrqB7DuIgqBanfryUkoDH0GXcs2RL/VGiII=)
                          5: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: cKhZX/lPM4fjDbhhersFJnVoVbMGB7sHeqVvUk01ZoQ=)
                          6: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: C2Urw1CANF3BYR4oYboPvzubkyeHTC4GKOwLeRX1lQY=)
                          7: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 16:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:94:9d:d8:1e:e2:78:36:95:ca:01:89:ee:91:c6:9c:d1:99:0a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Sep 17 14:29:25 2025 GMT
            Not After : Sep 18 16:30:25 2025 GMT
        Subject: CN=1B991A2E051BCF24D1AFAEA41B100994E95480E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:56:76:59:cd:4f:90:e8:a2:99:36:50:9a:
                    64:26:58:ea:b4:59:93:9b:54:73:e3:6e:0f:26:22:
                    ee:de:34:1c:99:34:e0:3f:47:d9:d9:12:ee:b7:ae:
                    23:9e:56:18:83:9f:ac:7f:7c:79:a1:0d:8e:5f:50:
                    d5:88:c9:10:92:75:94:b7:ec:ef:3f:e6:aa:6b:9b:
                    fe:b8:72:45:41:0a:a6:ee:36:7e:d3:b7:0c:32:52:
                    a5:81:ae:ea:1a:e4:b4:3b:c2:4c:20:6b:77:a0:67:
                    a9:29:da:a6:78:e0:5a:3e:b8:77:28:f7:7a:73:81:
                    9a:0f:e8:23:72:c8:73:81:04:40:48:e4:41:e3:38:
                    87:25:bf:aa:31:b2:ad:ac:35:62:a2:dc:7c:1f:34:
                    a3:2a:6e:32:c0:65:ba:b2:b1:8e:8c:26:5c:da:32:
                    c7:0d:b5:e1:ae:64:71:b2:af:a5:4f:ae:a2:5e:96:
                    a6:e7:f4:3e:65:e3:44:04:2b:10:65:78:99:9e:6b:
                    a5:c5:dd:e9:54:a4:4d:3d:fd:fe:fa:3c:91:f2:75:
                    58:18:9a:f0:b7:a7:03:ce:2c:8b:ef:c4:97:17:58:
                    c1:24:d8:21:53:4c:d4:fe:f0:30:6f:13:c7:06:fa:
                    27:00:27:d7:e5:f1:cf:9e:01:2a:35:d9:c5:b3:e4:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:99:1A:2E:05:1B:CF:24:D1:AF:AE:A4:1B:10:09:94:E9:54:80:E5
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:8e:1d:97:ed:be:66:8f:04:58:ca:17:04:55:12:9b:cd:
         4a:34:9f:94:b4:6e:c8:b6:c6:04:ba:9f:01:7e:68:c6:c9:6c:
         7a:85:15:59:09:76:63:74:05:2b:d9:eb:af:61:1c:14:2a:c2:
         c1:38:68:16:e3:88:86:9c:d1:b3:3a:20:87:35:eb:1f:22:4a:
         e6:94:82:96:e3:eb:06:b5:25:76:9a:07:da:ad:f5:5b:f4:80:
         d9:6e:46:c6:37:02:22:c1:18:41:b8:75:b1:c3:7d:5a:da:5e:
         fe:ce:c2:95:0a:79:30:ba:b4:34:f6:9b:d5:ac:d0:b0:1c:18:
         50:68:5d:1d:3a:3c:46:b1:3f:3a:98:1c:e5:8f:79:82:c5:01:
         ac:55:f1:b2:6c:f2:4e:c3:0d:bb:b2:11:fa:b3:c8:02:7a:da:
         ab:f0:0e:f9:21:e6:a0:6c:be:e0:38:9b:0b:32:4a:90:87:e7:
         59:85:00:a0:b4:8e:a3:ee:ab:1f:82:c6:60:d0:55:89:78:37:
         25:77:47:ed:19:c9:48:d6:d5:69:ee:0c:04:ad:1c:36:21:13:
         bd:1e:8f:02:fb:1c:58:6b:a9:10:bb:5e:a1:91:3e:21:94:b9:
         0c:05:3f:01:15:c2:a3:30:0f:c8:c7:11:d2:4d:d2:39:0f:fb:
         30:70:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:05:28 2025 by rpki-client