Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
File:                     04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft (raw, json)
Hash identifier:          +j5GoHR7+pxTkKug0Y53W8EHbUWsP0ZZ+XLQX5BAsCM=
Subject key identifier:   A6:DF:4C:A8:E8:93:9C:A8:DC:EB:BB:BB:C7:74:8C:0B:54:8E:8B:FE
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       1B1F2AC43FA9E5D90132353B6632BF5237A6A249
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
Manifest number:          BB
Signing time:             Sun 27 Jul 2025 00:05:45 +0000
Manifest this update:     Sun 27 Jul 2025 00:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 00:44:45 +0000
Files and hashes:         1: 34352e3138332e31382e302f32342d3234203d3e20323639323534.roa (hash: Q6nf8rzLSj+rYIcqyXSln7mmNq0IIseCkhPedPCNukk=)
                          2: 323830343a363163303a633030303a3a2f33342d3334203d3e20323639323534.roa (hash: ifCOVGoxYag+JgBj/8bwfs5OhPeT8sG7+b8xoFpG4s8=)
                          3: 34352e3138332e31362e302f32342d3234203d3e20323639323534.roa (hash: 0uGHHEoBjeUKh6lkMUMNjB5TiyD+gZWp5kigyF+31JE=)
                          4: 04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl (hash: C7g9Pr8ursOZkfEOTSZM00xUQ8GzJQw/gW3LtgsdBW0=)
                          5: 323830343a363163303a383030303a3a2f33342d3334203d3e20323639323534.roa (hash: P2pwoz3vHrFOLplR5fO4A3T+bD8ZY3tm5BaO9LOfd+M=)
                          6: 34352e3138332e31362e302f32322d3232203d3e20323639323534.roa (hash: T64DJqHFi8KlUuLJ/CT9gmtn5pdFMXJzlQB2yHFu3Zg=)
                          7: 34352e3138332e31392e302f32342d3234203d3e20323639323534.roa (hash: b5u6D1dGPlvdhp+RvZnpQcEfKI/NXA01576kUO0SZzg=)
                          8: 323830343a363163303a3a2f33322d3332203d3e20323639323534.roa (hash: kAUu8DfiUq2xkAi7fwbzX4nFaZIOpep1eKtCykYISfA=)
                          9: 34352e3138332e31362e302f32332d3233203d3e20323639323534.roa (hash: sggJjmqx194SHXTtxF8BTg1bkPzo9GcFyFq3xs9fSzI=)
                          10: 34352e3138332e31372e302f32342d3234203d3e20323639323534.roa (hash: P0B4MqjdcCfg0Y94tAN1P7nbZ+LrsFB5efRQWvrbk10=)
                          11: 323830343a363163303a3a2f33342d3334203d3e20323639323534.roa (hash: X06jJ6i+ESSx/OU9p9xyNsO+1vWsVJG6D5oMo0I9N+8=)
                          12: 323830343a363163303a343030303a3a2f33342d3334203d3e20323639323534.roa (hash: Dj+JNTqXkJhOjwWvSanLXi4lyzLWh0vBSVUNXXBMykY=)
                          13: 34352e3138332e31382e302f32332d3233203d3e20323639323534.roa (hash: l9etm2HopLJifur5G6iVcpAP+tWykFXzL5vSFPUwyGE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 00:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1f:2a:c4:3f:a9:e5:d9:01:32:35:3b:66:32:bf:52:37:a6:a2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Jul 27 00:00:45 2025 GMT
            Not After : Jul 28 00:44:45 2025 GMT
        Subject: CN=A6DF4CA8E8939CA8DCEBBBBBC7748C0B548E8BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:b6:3a:72:52:cc:05:e3:00:90:8b:75:e3:
                    b4:b3:59:68:36:24:06:71:ea:f1:4a:8f:fa:85:4d:
                    b5:4f:9b:c6:74:e2:c8:60:d4:04:c6:01:e8:1f:5c:
                    c4:be:54:ed:de:07:82:a3:74:d2:0e:1d:f6:1e:ed:
                    6c:79:8d:11:73:14:34:e8:a1:2a:6f:11:6e:f7:60:
                    6b:2a:88:2b:97:50:b5:22:af:3c:6f:56:02:57:ba:
                    7f:9c:01:54:8a:d2:2d:d9:69:b4:28:06:c7:b5:6d:
                    ae:bc:57:66:85:39:83:df:40:cb:d6:c9:d6:de:b3:
                    7d:41:ff:fc:73:12:f3:b7:18:7f:9a:95:0b:3c:d6:
                    98:fa:6e:09:e6:e8:fc:cf:c2:28:20:6d:2c:28:a1:
                    63:93:31:f8:87:89:d0:43:ab:12:11:2e:80:5c:b8:
                    aa:a4:57:f5:79:09:05:65:50:4c:7b:fe:b3:3c:1b:
                    40:8a:2b:2b:fb:6e:c4:8c:f1:5d:9d:53:fe:37:89:
                    34:e3:34:fd:6d:61:71:08:5f:3d:b6:91:31:40:66:
                    88:61:93:0f:c3:f1:4d:35:df:43:74:08:73:3f:f6:
                    a3:a0:6e:a8:f5:6e:1c:3e:f7:41:df:35:b6:32:8a:
                    bb:a8:69:3f:9c:bb:0c:e2:fd:9d:da:d4:a3:0f:cb:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:4C:A8:E8:93:9C:A8:DC:EB:BB:BB:C7:74:8C:0B:54:8E:8B:FE
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:1f:16:5e:82:ad:06:63:da:6a:07:91:08:0c:82:b2:06:
         cf:65:e0:16:c1:22:32:ee:9a:ed:d7:30:63:d9:e6:e3:c8:1e:
         5b:b7:1f:a1:7b:f9:3a:d2:ba:ee:9f:77:c1:fa:4e:45:87:33:
         e4:86:68:fd:c5:9e:25:2f:61:6f:65:64:79:8a:cd:39:a2:9d:
         fc:d2:69:f0:7b:11:d3:67:32:0a:39:58:85:70:8b:66:d1:7f:
         fe:87:bf:bc:59:7b:a7:8f:1c:1f:72:53:26:85:3b:76:f9:e8:
         5b:33:5f:96:fa:0b:7b:df:17:da:e9:97:a2:83:a8:0a:b9:d9:
         f8:8a:ae:d5:1c:1f:98:fa:e6:7f:44:19:ef:05:44:91:cb:f5:
         c5:28:4d:f6:30:fa:ad:a8:dc:66:2c:96:18:db:b9:8e:14:04:
         7e:67:d7:17:73:0c:eb:1d:52:8f:8e:3f:30:7d:d7:2e:58:d4:
         b5:c1:5a:8a:9f:e2:29:54:99:06:e6:6b:13:61:2c:ce:ba:e9:
         c5:25:77:64:62:74:b5:82:7d:e4:91:6a:b0:97:db:74:b7:16:
         db:b8:68:0a:5a:1e:8d:46:2e:3f:5e:3a:8e:8f:34:28:67:8f:
         64:9f:a2:dc:79:7f:e9:b0:da:be:3d:45:00:0e:65:86:8f:18:
         a7:9c:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:50 2025 by rpki-client