Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
File:                     28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft (raw, json)
Hash identifier:          2YY44p5C1YcK9T0A3zx9xDW+N7JD/iAXe//EXdAKXiQ=
Subject key identifier:   E5:A8:53:59:A3:B1:A6:59:BB:47:84:C4:68:DA:6C:27:B5:4D:27:4B
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       5C1463B6984E2A49BB8B77ED278C20A29B41AACF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
Manifest number:          01AE
Signing time:             Wed 20 Aug 2025 02:01:48 +0000
Manifest this update:     Wed 20 Aug 2025 01:56:48 +0000
Manifest next update:     Thu 21 Aug 2025 04:50:48 +0000
Files and hashes:         1: 323830343a346665303a383030303a3a2f33332d3333203d3e20323638333535.roa (hash: mMl7wlYuzGSlDQ2nHjYdGu//3PyUaH2Xt2k5g7X2vaE=)
                          2: 34352e3233392e37352e302f32342d3234203d3e20323638333535.roa (hash: RgnoKFClmNRtewnKCRwSqAa5h1gEHZxmH5aWSuKAkeQ=)
                          3: 34352e3233392e37332e302f32342d3234203d3e20323638333535.roa (hash: pj2rkzXC5heyicoXDJqmGclxsIH5pfRf3YRsHWEeYsM=)
                          4: 34352e3233392e37322e302f32332d3233203d3e20323638333535.roa (hash: YZpBE85fhiEWpT9hgqTEKnve1qKRjDiQqERw4Ns7DgE=)
                          5: 323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (hash: g7m9AQh54t2L2ZMjySnubrKB2J4cpKd2etOHhoDIevE=)
                          6: 34352e3233392e37322e302f32322d3232203d3e20323638333535.roa (hash: 15C4dlRSUsfUV3XEhTov22tZeeDT5wLsZzUnb57iSgE=)
                          7: 34352e3233392e37342e302f32342d3234203d3e20323638333535.roa (hash: JjIenFO2WhvOy+hdCWl/7+s2ilfmMUmcvdW7J8aNHL8=)
                          8: 28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl (hash: fDQIzzvW1FPdsHMI23SSVzrmqPDXxStkRvc/wfTUM/k=)
                          9: 34352e3233392e37322e302f32342d3234203d3e20323638333535.roa (hash: 78wfBpVDSOFC/4ZthELtkna9z5TaZbutDlVWiZjBxEY=)
                          10: 34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (hash: tx4vYFia5s9x8ZTS1vI+1dUl9XQjT+LaffJGWLFdUgE=)
                          11: 323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (hash: /HF2q+WAJf2rEC5Q3l5gYnv2VlmZNRUWMSBC46flQGw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:14:63:b6:98:4e:2a:49:bb:8b:77:ed:27:8c:20:a2:9b:41:aa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Aug 20 01:56:48 2025 GMT
            Not After : Aug 21 04:50:48 2025 GMT
        Subject: CN=E5A85359A3B1A659BB4784C468DA6C27B54D274B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:ce:cd:10:8c:bf:91:a7:2b:c1:38:20:54:
                    92:e0:77:e1:47:9b:dd:b0:8e:c8:e3:d0:9a:3e:89:
                    ab:e0:ff:1c:06:e0:46:d1:db:5c:05:dd:84:fc:4f:
                    ae:81:07:72:a3:fd:f5:b7:19:c2:89:3c:be:13:69:
                    81:b8:40:be:a8:ce:40:1e:87:f8:1e:65:f3:34:fe:
                    98:34:5b:1d:01:da:3a:13:9b:3a:48:a6:aa:bf:ad:
                    0d:10:1f:e6:cb:01:1d:0d:8c:bc:cc:f8:7e:a5:94:
                    30:fd:21:40:40:ad:ae:be:05:7f:56:a7:f7:b6:d5:
                    cf:49:ea:87:00:59:3b:a7:2b:4d:c0:68:49:bd:b1:
                    6f:cb:ce:f0:75:68:65:77:73:6f:be:c3:97:a8:e3:
                    fd:be:fd:a9:b9:10:c0:d5:0a:a9:68:c8:4c:40:bf:
                    fb:31:0b:7a:01:ca:bc:e0:ca:6c:c4:28:45:91:0b:
                    0e:99:6b:d0:89:47:dc:67:0a:cc:da:ba:12:cf:93:
                    9a:dd:5a:1e:1e:2e:10:20:1b:55:2a:68:13:7e:b3:
                    61:e1:06:b7:ac:7c:91:dd:b9:e2:dc:91:28:60:3d:
                    43:e3:0a:87:93:c3:c3:88:04:12:80:19:95:45:f8:
                    bb:d4:ad:b2:fa:21:1b:4d:15:1f:a6:81:1e:97:c0:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:53:59:A3:B1:A6:59:BB:47:84:C4:68:DA:6C:27:B5:4D:27:4B
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:27:57:86:ea:15:e6:2f:86:32:0f:fd:48:03:8e:5c:23:37:
         bf:b1:f3:b6:22:5e:e6:10:18:f1:95:3f:37:3a:cb:7b:ac:28:
         c4:d6:e3:fe:9e:15:fa:78:63:93:b5:7e:bd:33:33:06:d0:e0:
         1d:d0:d2:05:ab:19:60:a1:47:b8:a0:68:f7:af:c9:4c:73:4f:
         9b:d7:ce:e3:98:80:8c:ab:3e:92:fa:18:5b:d9:4d:11:83:b8:
         33:ca:67:f0:34:28:6f:5c:ca:29:e8:1b:54:61:ee:5e:01:8b:
         5b:25:22:14:8a:73:26:df:ed:24:47:61:8c:b4:f9:9f:e5:c1:
         40:36:32:ef:a6:c8:bd:0b:1f:8f:bc:8d:2d:05:3e:fc:6e:6c:
         11:a9:09:0d:71:94:34:9c:de:74:1f:04:5c:14:68:fd:a3:b2:
         cb:2d:4b:d8:aa:ff:09:ce:85:ee:c3:fc:33:47:e9:02:9c:b9:
         c3:4d:e3:6e:ae:88:3c:d4:39:07:2f:5f:29:44:89:53:44:f5:
         a8:ab:81:9f:4b:9d:8f:9a:81:85:d8:95:22:74:90:4f:11:77:
         27:33:10:f2:6d:c8:56:e6:fd:5d:af:82:1b:29:18:85:2b:1b:
         62:11:c3:97:b3:72:9b:61:8b:3b:bc:21:c8:65:68:86:8c:2d:
         75:2a:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:06:51 2025 by rpki-client