Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json)
Hash identifier:          J1JCySX66fvegfFoodiYIohQmsKWw/uXjQX7J+viVPc=
Subject key identifier:   C0:E4:72:5D:E6:05:0D:76:D3:26:01:C0:5A:84:E7:63:99:6E:2B:C7
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       0824019A1A1CDBE0BB1574E9866515CFC2B1431A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
Manifest number:          01F8
Signing time:             Sun 27 Jul 2025 06:42:43 +0000
Manifest this update:     Sun 27 Jul 2025 06:37:43 +0000
Manifest next update:     Mon 28 Jul 2025 07:02:43 +0000
Files and hashes:         1: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: ESPKyBn9k2Tj8mx8/vctfD0aZVU4OT6BupSSD8qOqhg=)
                          2: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: bBA4YJnUAawjGiuamZaJBjW4CIb/F/ARVaXg+y15IiE=)
                          3: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: znoCnr6e93GYcQiATLXvvDwtHsiWt69jotK53/EWZEc=)
                          4: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: Gz4R4n6ddPNEgcLYzpGOER3sBhOV1kE13prUdEAeqzA=)
                          5: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: ikb/eeov6bRBVVWN56xhzBR63CMjpkK522BDfSEzQU4=)
                          6: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: NyhFyeCKsyzw9N/AuH1BDhS76oUWXd9+od5LyOG1qmk=)
                          7: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 4ExtZvI8MqUvFVTsDf2h2l9l2Z/3J8appcSPENQekV4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:24:01:9a:1a:1c:db:e0:bb:15:74:e9:86:65:15:cf:c2:b1:43:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Jul 27 06:37:43 2025 GMT
            Not After : Jul 28 07:02:43 2025 GMT
        Subject: CN=C0E4725DE6050D76D32601C05A84E763996E2BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:78:73:a4:e3:f3:31:e8:ae:bf:47:80:76:
                    07:4c:32:6f:b4:54:02:7e:7c:c0:c5:97:75:a6:40:
                    bc:29:b7:f8:ee:00:f8:5f:8b:bc:db:c3:31:95:a4:
                    19:f8:41:52:a6:1e:84:08:37:14:8e:14:a6:de:41:
                    a7:f4:d8:de:b1:e8:04:f5:51:4b:2b:a1:09:1e:99:
                    52:ee:1f:e9:50:ff:b1:4f:22:2f:5a:ae:4e:da:2f:
                    c2:57:84:d0:f7:94:9d:a9:d2:ad:71:4b:1c:77:5c:
                    2b:6e:7c:d1:77:ee:53:96:7b:40:4f:c7:50:88:a5:
                    9e:4f:f4:2f:34:c2:61:e4:44:90:5f:7d:1f:56:a8:
                    d3:a1:08:a4:dc:c9:54:7d:39:87:74:90:7f:ca:2a:
                    fd:c2:5a:fa:8d:f4:3f:fe:a1:5c:c6:54:b9:b9:13:
                    75:1f:64:7b:d3:3e:98:4d:75:6f:08:a2:35:57:fd:
                    f3:bf:2c:dd:d3:09:4b:69:a1:ce:47:db:a9:3b:20:
                    04:49:b3:89:ab:b4:d4:56:a3:e0:8e:b9:d6:cd:68:
                    0e:c4:99:6b:18:19:10:e0:e2:a1:35:a7:0f:7e:ee:
                    28:1b:dc:3e:ba:45:85:b7:1a:d5:90:15:05:b7:81:
                    1e:d3:13:5c:5b:9c:d3:30:c4:9c:2e:31:77:c9:23:
                    92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:72:5D:E6:05:0D:76:D3:26:01:C0:5A:84:E7:63:99:6E:2B:C7
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:a8:d9:78:5f:00:63:6a:13:20:57:19:00:ba:11:3f:4b:
         a7:23:23:df:ef:6f:92:58:74:08:42:9e:6c:3c:0a:46:15:18:
         08:23:60:1d:50:9e:71:d1:2f:c1:dd:bf:a9:b9:83:29:84:af:
         af:46:f3:10:8e:6b:bc:aa:7e:51:a4:28:97:92:4d:c2:b5:50:
         67:69:79:98:11:40:0b:e5:64:e5:3e:09:75:44:5e:b9:08:e8:
         fa:31:3b:ad:5e:e1:94:34:91:a0:90:9f:a5:5c:90:ad:d2:24:
         ce:83:de:4a:d3:0b:80:a3:4a:db:37:4e:cc:db:e6:32:67:41:
         54:55:33:9d:c3:72:22:6e:34:a4:9e:8d:b4:7c:39:20:45:b8:
         65:81:85:03:2b:41:97:4f:c8:8d:bf:81:a1:71:2b:ca:7e:d3:
         f1:a3:40:f2:54:30:69:3e:59:d6:eb:d2:68:39:83:7b:fa:5e:
         32:b1:04:55:59:95:7f:38:65:f5:71:eb:c8:86:f9:4f:4f:81:
         69:d3:5a:0a:ad:55:da:c8:e5:b7:af:40:5d:01:7f:cc:a2:ad:
         b3:6a:30:f8:0b:f9:e1:10:ae:3e:0b:93:0d:73:2c:15:b6:8e:
         0b:89:3f:57:67:4f:5c:00:f2:75:27:8f:60:74:e6:8a:7d:c4:
         54:f9:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:28 2025 by rpki-client