Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
File:                     9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft (raw, json)
Hash identifier:          bgj0GF15dIlfkj/QnL2Gt98un4B52aD4qmvVJ3AvJTg=
Subject key identifier:   8C:A7:2F:AC:CD:D6:B1:95:E0:8D:5F:28:C5:A7:9A:73:27:48:06:78
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       0FDF676B722FC1D335C6E27575279E59558DBC8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
Manifest number:          025D
Signing time:             Tue 01 Jul 2025 16:07:13 +0000
Manifest this update:     Tue 01 Jul 2025 16:02:13 +0000
Manifest next update:     Wed 02 Jul 2025 17:03:13 +0000
Files and hashes:         1: 34352e3136312e372e302f32342d3234203d3e20323638343234.roa (hash: vxk5tWYlE9yDZqQjYzC2pc06MP0XwXRfA8UcN2iHFyI=)
                          2: 34352e3136312e362e302f32342d3234203d3e20323638343234.roa (hash: Xr4pWJPal3nJE6xppgvr7xz7oIRlMWjORJpopMQ9J5M=)
                          3: 34352e3136312e342e302f32342d3234203d3e20323638343234.roa (hash: y2xxl+f0IHPatxKbiaHjpIkGw4Nxjs2kpMYYZRhmhuY=)
                          4: 323830343a353130303a3a2f33322d3332203d3e20323638343234.roa (hash: Cyh+Qf6VC+kxYp2uwlfrxEuuDL8HkDdYlRIVulv0Kto=)
                          5: 34352e3136312e342e302f32332d3233203d3e20323638343234.roa (hash: QatToQSLbpjeRdrVZDqHWmMbY9N4NJRJBWgNUSS2orQ=)
                          6: 9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl (hash: L3X7okYUhkq4ItIOInn/9dkXGiF/e4aRtu2dYhzFZgs=)
                          7: 323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa (hash: csKxTAKkO6v4RZtlc7LaAZsO5dGze8hhw7R79s5y/aA=)
                          8: 34352e3136312e352e302f32342d3234203d3e20323638343234.roa (hash: jxYq20MJWQKARPmt1Glw2ZeHsv2iNn23gkIsYP80OM4=)
                          9: 323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa (hash: 4FNNRC0Mr9pjywieMGcS2m7OnLqv/xVCP97zSre4zkw=)
                          10: 34352e3136312e342e302f32322d3232203d3e20323638343234.roa (hash: zx9I+engVq+FPIS+3kiagJAgpLTTZi4DsqeQ2MQJwZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 17:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:df:67:6b:72:2f:c1:d3:35:c6:e2:75:75:27:9e:59:55:8d:bc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Jul  1 16:02:13 2025 GMT
            Not After : Jul  2 17:03:13 2025 GMT
        Subject: CN=8CA72FACCDD6B195E08D5F28C5A79A7327480678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:1d:93:16:94:78:32:8e:de:58:e3:9d:df:
                    b2:80:73:1b:59:c4:71:6e:cd:6b:08:53:fd:15:4a:
                    ba:bc:85:90:8b:70:63:91:c4:fc:ef:e9:e6:e4:16:
                    44:f7:0c:50:8a:69:c9:5e:da:10:44:68:24:43:21:
                    73:a4:e0:12:34:4f:b7:4b:73:88:37:e2:36:0a:46:
                    0b:24:1c:6c:33:fe:45:b2:27:2e:9d:be:f7:32:8e:
                    69:cd:1c:fd:cb:55:33:17:ea:e4:43:c1:98:9e:ef:
                    ec:24:69:2f:a1:5b:d8:91:53:da:b5:eb:ed:df:7b:
                    34:ac:0d:c3:d6:b9:af:18:f2:c7:47:01:fe:0b:a7:
                    e1:92:85:ac:6f:7d:49:3c:1b:91:9b:60:b0:51:fb:
                    d2:2e:fc:84:2c:42:95:3d:52:9f:58:d0:e7:b8:13:
                    c6:5b:d9:7c:c7:2c:a9:d1:7a:91:25:82:11:dc:21:
                    90:05:b4:ea:37:47:40:ee:5a:da:08:cf:b7:b3:6a:
                    16:d9:9b:27:84:aa:e4:37:f6:b0:bb:33:43:b1:80:
                    3d:e3:25:60:c5:40:25:64:08:12:46:34:93:86:f2:
                    1e:70:05:05:ac:ce:21:2b:5f:87:49:57:5b:c3:a6:
                    0c:6f:16:94:cb:5a:eb:fb:dc:88:bf:5c:2e:3a:2b:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A7:2F:AC:CD:D6:B1:95:E0:8D:5F:28:C5:A7:9A:73:27:48:06:78
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:52:8c:6c:e0:92:bc:ea:a7:e4:cd:bf:0c:49:f3:04:ce:48:
         7d:14:8e:b6:d5:ac:fb:5e:a3:85:54:db:dc:c8:3b:6a:23:43:
         a8:dd:ea:ae:22:09:16:63:df:12:d9:53:1f:ef:09:45:54:5f:
         a5:0b:7e:e2:24:7a:4a:f5:cb:54:f6:4f:3d:92:69:63:d8:03:
         c6:9c:f4:6e:71:86:f3:cd:47:08:40:23:1c:28:25:11:aa:4e:
         32:a5:8a:d4:1e:8f:cb:f6:a2:bb:52:da:24:b7:6b:8f:66:00:
         5f:9e:40:d8:67:46:96:2a:b8:c5:30:12:55:a2:32:9a:1d:3c:
         25:5a:e7:7a:24:09:b7:50:00:d2:53:7f:27:8b:40:71:d5:52:
         33:55:f1:c7:6b:56:b0:e2:c8:01:59:26:52:45:2e:51:8e:cb:
         62:b5:d5:3f:0c:86:f4:81:1d:14:29:c6:08:db:fa:0d:4e:9a:
         5a:83:7a:95:e8:e2:57:f3:78:9b:b4:3d:55:54:37:26:c5:5a:
         35:b9:02:82:c7:0a:14:a0:fe:2f:94:8f:4e:4a:4b:08:8c:ed:
         0f:b5:77:4c:2a:37:7c:0f:09:8b:72:5a:03:cc:9a:36:bc:2f:
         95:4f:f3:f3:29:2e:db:8c:06:6d:d4:89:8c:98:8f:07:d1:19:
         3f:2e:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:50:32 2025 by rpki-client