Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft
File:                     099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft (raw, json)
Hash identifier:          nO//WSs1RaizHmjTJ8rqqVN/6FBA1p1IIJKg+cLMS6g=
Subject key identifier:   9D:2F:81:F1:51:E3:27:3A:36:14:49:B5:FF:57:C3:66:4A:F4:F8:0E
Authority key identifier: 09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37
Certificate issuer:       /CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
Certificate serial:       2A00E9E993013DB850CE011FF6A1B96F8CE57ED2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft
Manifest number:          02AA
Signing time:             Tue 01 Jul 2025 07:30:00 +0000
Manifest this update:     Tue 01 Jul 2025 07:25:00 +0000
Manifest next update:     Wed 02 Jul 2025 07:30:00 +0000
Files and hashes:         1: 3230302e302e382e302f32312d3234203d3e20323633323531.roa (hash: l1Q29OsHW5uvKlsALc5e3lJ40T/OBW1wo6Bxuah0Ag8=)
                          2: 099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl (hash: D1slr5rbpTH4TG974AjJYewtDOe6kbccKfPKqwxP+U0=)
                          3: 323830343a313763383a3a2f33322d3335203d3e20323633323531.roa (hash: dLtgWFo3Ut4Jpy9K/rkuZ219OW32xVuCAPOdnOBe8+M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl
                          rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:00:e9:e9:93:01:3d:b8:50:ce:01:1f:f6:a1:b9:6f:8c:e5:7e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
        Validity
            Not Before: Jul  1 07:25:00 2025 GMT
            Not After : Jul  2 07:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:f9:95:9c:59:ca:11:ab:fb:8f:e5:33:b2:
                    2e:08:c3:fa:7c:a6:4c:2d:2b:da:f4:8a:fb:ae:fb:
                    9a:8d:eb:f3:46:1e:0d:e0:01:33:4c:0b:2e:24:c8:
                    69:87:39:0d:15:2c:fc:8f:26:b3:f7:f8:0f:62:94:
                    0a:24:f2:a1:0b:7e:f0:9e:7e:ef:72:d5:29:98:65:
                    18:99:73:47:1c:69:cd:f4:95:d0:18:ce:8e:5e:84:
                    26:32:02:8a:90:2c:8f:6a:20:78:14:f3:3b:25:59:
                    60:84:5c:74:85:72:7c:d6:2e:7f:ba:51:79:34:8e:
                    35:40:64:82:be:03:23:e3:dc:17:7a:4f:56:68:a9:
                    18:5b:2a:03:26:c8:48:ea:5a:7d:c0:a5:4b:21:97:
                    81:42:59:e8:88:36:f4:1b:57:db:e0:4d:bd:7d:e0:
                    10:20:39:20:90:85:80:01:93:6d:43:d2:a3:38:91:
                    61:c1:fe:66:49:4f:e0:88:8d:50:94:20:55:7f:91:
                    01:91:aa:13:b5:6a:e9:fe:11:5f:d9:f0:e9:8a:99:
                    37:e7:f8:c4:80:73:54:80:2a:62:8a:0d:d3:3f:7d:
                    02:02:d3:66:0c:b5:18:bb:81:04:10:bf:56:7b:2c:
                    5f:7f:88:4a:69:02:fb:73:8f:e2:d7:3f:2c:8c:fb:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2F:81:F1:51:E3:27:3A:36:14:49:B5:FF:57:C3:66:4A:F4:F8:0E
            X509v3 Authority Key Identifier:
                keyid:09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:45:42:fe:1f:57:34:49:43:a9:3a:81:99:29:47:0a:04:1d:
         0c:4a:13:45:bb:05:15:47:ad:da:e6:48:58:a0:b5:ba:12:e8:
         f2:9b:d0:a8:77:94:86:b2:8b:38:90:83:97:fa:17:49:f4:1c:
         69:a1:5e:72:74:9d:4c:e1:0e:71:5e:7d:49:ed:47:aa:f5:33:
         91:3e:90:67:0a:9d:76:6b:c1:c0:77:f0:d0:77:4d:82:1c:b0:
         91:96:f2:2e:f7:d3:86:9e:27:ee:64:a1:6d:c8:37:23:40:dd:
         ad:14:2c:2d:d1:84:73:3c:2e:86:55:15:14:5d:0d:9a:5d:52:
         7d:88:47:66:5d:fb:7d:47:44:0a:e0:ce:46:77:d7:9c:09:7b:
         61:d2:a5:4a:6b:c8:87:9f:55:aa:1d:38:3a:08:98:58:55:e0:
         76:0f:77:f9:2f:ab:68:f6:d7:37:e4:33:31:ad:db:a4:c8:df:
         fe:99:9a:dd:3f:34:fc:6c:c2:73:65:a1:96:d1:09:a4:90:be:
         bb:79:a6:9b:8d:2f:69:b7:9b:15:e1:09:c2:86:e1:8a:7e:e2:
         cd:bb:3f:70:f5:90:03:c7:58:09:2c:32:69:d8:e8:70:ce:67:
         eb:a8:1f:e4:cc:ea:0f:3c:3f:0b:9c:36:59:fa:e0:97:52:c1:
         66:63:4f:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:20:50 2025 by rpki-client