Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File:                     98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier:          JbvmRuIxLvI7zDhkwTU7cEmOmQzLU9LLj3vFpAzjWXA=
Subject key identifier:   7F:22:97:C5:16:64:55:01:94:C9:AC:30:85:C0:27:6D:CC:36:F6:EA
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       42A5EFBEE36F9008DB0AA240F270FBCFA768C6BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number:          023B
Signing time:             Tue 10 Jun 2025 13:51:30 +0000
Manifest this update:     Tue 10 Jun 2025 13:46:30 +0000
Manifest next update:     Wed 11 Jun 2025 17:27:30 +0000
Files and hashes:         1: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: oxjQRGVdgBIIIUSH26/VmV6NbSjuLnOQbtY6pEUcqrk=)
                          2: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: ZGz/qxMNOnn8ZRQqWAjpD7CsiHW3hsbP55xHl3KH4L0=)
                          3: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: Kun2CCgPn8Q+q8HC0X//kGwa1c8M6wEv2En3ue4bLs0=)
                          4: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: OQsyr4hQzOps8+kdBeNAr7uKiF3uTb5N4ZdmAkvuw4M=)
                          5: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: xYKUjGDvB4ohftGmPkBCTmPGZBuO+nqUhKkaIhxMrJg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 17:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a5:ef:be:e3:6f:90:08:db:0a:a2:40:f2:70:fb:cf:a7:68:c6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Jun 10 13:46:30 2025 GMT
            Not After : Jun 11 17:27:30 2025 GMT
        Subject: CN=7F2297C51664550194C9AC3085C0276DCC36F6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:3e:ca:4e:6b:87:d7:f1:b3:bd:cd:92:7b:
                    51:fe:6c:79:89:e6:4c:15:7b:e3:f4:ba:34:ca:ae:
                    c3:39:bb:07:aa:0f:d1:31:55:d3:82:b9:78:50:53:
                    c5:9a:99:25:eb:fc:f5:2d:8a:89:34:46:82:c0:68:
                    6d:00:fa:29:cd:7c:e4:6a:73:c7:d2:79:a7:7f:53:
                    bf:c8:8a:b3:85:b3:1c:60:c9:6a:8e:82:03:85:d1:
                    11:30:ad:f9:79:55:9a:0b:32:5d:eb:b5:72:bf:73:
                    93:e9:a2:9d:71:60:4f:64:c8:5f:3e:fe:da:c0:c6:
                    79:70:a8:d2:a1:af:9f:7b:c2:f7:09:a1:48:7c:f0:
                    88:d9:91:fb:b7:e7:03:bb:f4:87:89:ec:b6:8a:23:
                    51:0f:59:3a:4a:1e:be:96:92:87:a6:88:fe:b7:0c:
                    03:56:3e:98:0c:5a:30:14:6e:db:ad:50:95:18:44:
                    cc:a4:a4:11:c8:b2:f4:5a:f7:e8:be:93:94:75:29:
                    91:35:f0:29:9e:c4:07:07:06:82:9f:14:83:27:56:
                    38:41:1b:25:dc:da:48:91:7d:c0:75:83:59:bd:e5:
                    4c:13:4c:45:fc:7f:a2:22:d4:56:1f:28:07:0e:1f:
                    74:02:ec:0a:a7:35:85:c3:66:86:e8:d3:c2:23:69:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:97:C5:16:64:55:01:94:C9:AC:30:85:C0:27:6D:CC:36:F6:EA
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:21:f7:03:8d:0d:27:a7:b1:46:43:07:08:65:75:a3:93:
         db:b7:35:45:1d:28:41:85:98:ef:2c:5b:21:2a:3f:76:c2:39:
         7e:a4:f7:ae:ba:23:a6:ea:01:58:29:54:29:5f:52:63:16:8a:
         9b:ab:2b:a7:cb:e6:5c:a3:d1:2f:ec:47:5d:ce:7b:82:73:b4:
         0d:93:9e:31:49:e7:ce:8d:4f:ff:a4:8a:9f:e9:9a:a5:fd:b1:
         ec:d6:75:7c:00:6a:c1:66:92:23:25:fa:3f:5f:d5:f1:0b:57:
         41:e3:c6:8e:a0:8b:db:6f:ef:b4:c8:20:19:66:81:50:f8:a0:
         3a:68:74:09:07:50:82:7d:e6:f6:af:76:ce:f5:e8:70:71:1a:
         7a:cd:2b:41:bf:ce:5d:c4:e3:63:bf:67:31:a1:ec:9f:a6:6e:
         c6:a2:e5:8f:c0:2e:7a:bd:53:9d:25:ca:ad:3a:cf:aa:d7:4e:
         74:60:f6:fb:e0:54:48:a2:11:c4:e9:14:90:9b:af:f1:30:9a:
         82:e1:98:bf:40:22:13:c6:c8:b2:64:22:38:93:d0:19:07:4c:
         1b:b5:73:d3:9c:26:de:ca:af:57:cb:19:4d:c2:49:41:c5:9d:
         0c:72:0e:a4:e2:f7:78:c7:4b:c9:64:2b:10:1d:3b:31:d8:43:
         ce:a8:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:21:44 2025 by rpki-client