Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
File:                     7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft (raw, json)
Hash identifier:          k9WR6oqu23ty6ICggFr3vVbqMvFHkxjOpa7bvbzj5Do=
Subject key identifier:   A5:34:E2:0C:38:33:34:CF:9D:93:C6:24:AC:A5:CB:F7:60:56:EF:3B
Authority key identifier: 7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD
Certificate issuer:       /CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
Certificate serial:       098744AC7B95CD863E8D33AB9D45183CC146ACE8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
Manifest number:          028F
Signing time:             Sat 23 Aug 2025 16:04:03 +0000
Manifest this update:     Sat 23 Aug 2025 15:59:03 +0000
Manifest next update:     Sun 24 Aug 2025 17:31:03 +0000
Files and hashes:         1: 323830343a383736383a3a2f33322d3438203d3e20323732373037.roa (hash: Gf6kRHE/BYttRO2gxXuE06CMuXfyfOfoTiE+t1hg/KU=)
                          2: 7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl (hash: 6l3wnCPHkkMko7kYhEY/oUTVGhhroBQbTsZCrwFVl8w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:87:44:ac:7b:95:cd:86:3e:8d:33:ab:9d:45:18:3c:c1:46:ac:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
        Validity
            Not Before: Aug 23 15:59:03 2025 GMT
            Not After : Aug 24 17:31:03 2025 GMT
        Subject: CN=A534E20C383334CF9D93C624ACA5CBF76056EF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:12:c7:62:1f:f6:77:09:fa:e9:1b:4b:6f:b8:
                    bd:42:20:e9:09:49:f7:b7:38:88:37:ef:5c:86:3c:
                    97:dd:7c:c8:15:e3:0c:f5:c3:9f:ea:85:ac:54:dc:
                    38:e7:01:a6:94:f6:51:3c:a9:30:12:29:d2:1c:75:
                    04:1f:a9:0d:42:8f:46:d5:7b:56:1c:8c:3e:91:52:
                    1b:e9:fe:dc:f5:0c:48:83:6c:77:9e:92:ef:e6:50:
                    58:a2:54:39:ab:95:d4:04:b4:c1:7f:f0:77:9c:54:
                    95:ab:cc:f7:8f:93:b4:19:cf:92:10:a9:fc:a5:1c:
                    45:a8:4e:17:40:04:6d:98:9c:b9:e8:99:d3:2d:a1:
                    9d:99:73:d3:d8:19:4d:6e:0a:f2:06:5e:17:a0:7d:
                    c2:09:1d:20:df:de:3e:2a:c4:24:ac:f8:59:64:9e:
                    69:7e:42:94:37:df:1d:46:10:40:7c:af:4c:eb:d5:
                    c3:be:82:b0:2a:67:22:ad:6a:0c:5f:35:f0:7c:cc:
                    b7:f2:c9:76:94:5e:1b:c0:39:a8:d9:d1:9e:87:b1:
                    03:e8:0c:a9:79:9d:5d:08:85:6c:f0:82:51:c8:47:
                    5e:a1:81:b4:1f:b4:f2:20:11:ec:2b:e4:14:a7:ba:
                    d8:85:ff:2e:71:44:04:7b:93:9d:33:44:b6:17:3f:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:34:E2:0C:38:33:34:CF:9D:93:C6:24:AC:A5:CB:F7:60:56:EF:3B
            X509v3 Authority Key Identifier:
                keyid:7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:31:d8:e6:e4:c2:cf:c2:f1:78:eb:cb:e2:85:62:2a:8b:74:
         42:38:ac:b0:12:f4:87:10:bb:ef:2e:5b:37:c6:42:ce:2a:c0:
         fb:67:ac:36:56:29:4b:c1:1c:af:cb:04:d0:c1:6d:66:94:c1:
         f3:38:f6:19:7b:be:f9:22:49:5e:4e:75:ad:3b:bc:3b:38:ef:
         d9:79:2e:43:bd:6d:23:31:93:0d:b6:00:7a:98:d9:f6:01:80:
         ea:9b:1e:2d:e2:c6:65:f8:d9:2d:ec:8d:23:3a:fc:ce:60:f3:
         3d:16:25:8e:20:55:c2:6e:eb:19:ae:1e:53:17:f6:1c:85:b7:
         73:60:a1:41:35:ed:1c:ad:1a:86:14:97:29:5b:c9:14:54:e9:
         ac:87:31:7c:15:b4:cc:b4:b6:16:d1:6d:fe:b9:2e:44:7e:c5:
         be:c8:7a:c6:41:5b:33:34:c6:a7:15:54:ae:11:94:d1:fb:98:
         28:83:a6:3c:70:85:26:7e:f8:ab:ef:e0:11:e5:8b:80:fa:7d:
         6a:86:79:78:c3:80:5a:7c:50:9e:03:e4:c8:8e:46:02:b4:5f:
         3d:b6:c1:31:b5:e1:ff:17:5c:1f:35:56:4e:67:63:8a:de:50:
         d1:d1:e3:84:2a:ad:60:06:36:45:d5:80:6e:02:92:59:08:71:
         02:5c:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:21:44 2025 by rpki-client