Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
File:                     9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft (raw, json)
Hash identifier:          e7wSJJNQ21RiGakUOptp8UszNHdD4cA/EW2sW+GOa4o=
Subject key identifier:   B5:24:75:5A:A5:C0:24:BA:08:9F:98:71:A7:78:82:FE:83:DF:70:28
Authority key identifier: 92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB
Certificate issuer:       /CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
Certificate serial:       5BBACCBFD82BE8C261514CF2F1B05072743C7698
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
Manifest number:          57
Signing time:             Mon 30 Jun 2025 13:45:01 +0000
Manifest this update:     Mon 30 Jun 2025 13:40:01 +0000
Manifest next update:     Tue 01 Jul 2025 15:23:01 +0000
Files and hashes:         1: 34352e3233312e3132322e302f32332d3233203d3e20323637323131.roa (hash: fGfiIQx8IGoNdAz62bgecZ58p4JrC2xl6Dsp7BoXc0U=)
                          2: 34352e3233312e3132332e302f32342d3234203d3e20323637323131.roa (hash: y4PAY1WdI9s0IpVA+5L9Wk1gUhm4EjMzYQVHzhs28Mg=)
                          3: 9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl (hash: 3TuUNYlNxfzB7ywpGhrcR+Q2sN5FG2IXzb5fa3ykta0=)
                          4: 34352e3233312e3132312e302f32342d3234203d3e20323637323131.roa (hash: iFjWGW2wsuTHYcVZKi4BmaWBAxygP+CD2RJuxvyFXXA=)
                          5: 34352e3233312e3132302e302f32342d3234203d3e20323637323131.roa (hash: eucSio1ZgqQSEYIbgZh+U5b+dT6QL7rVvfizHWjky80=)
                          6: 34352e3233312e3132302e302f32332d3233203d3e20323637323131.roa (hash: CyCgQgSZjuv4wVb9P7eMVerpprnry+KDzCk9mtKJajs=)
                          7: 34352e3233312e3132322e302f32342d3234203d3e20323637323131.roa (hash: 2QT40wjDP2a1e2mgr9R45aVDZs5BQ7idYM9V2kEpV8k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl
                          rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 15:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ba:cc:bf:d8:2b:e8:c2:61:51:4c:f2:f1:b0:50:72:74:3c:76:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
        Validity
            Not Before: Jun 30 13:40:01 2025 GMT
            Not After : Jul  1 15:23:01 2025 GMT
        Subject: CN=B524755AA5C024BA089F9871A77882FE83DF7028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:b9:3b:29:59:3b:08:2b:b1:58:18:eb:bf:
                    47:65:48:6c:d8:c2:42:b2:21:96:06:07:7b:04:bb:
                    55:bd:20:32:ac:fd:12:c4:8e:b6:8a:3e:da:67:81:
                    e4:88:a4:68:f0:f5:a8:28:ea:69:77:9b:fd:77:d6:
                    5b:3d:07:93:14:43:70:1d:e7:eb:1d:64:49:0f:fb:
                    6e:fe:be:03:18:dc:35:86:9b:5a:d3:6f:9c:78:a3:
                    8d:3f:4e:03:dc:d6:3c:93:88:c7:8c:ee:0e:48:ab:
                    43:af:d4:a4:5c:fd:6a:f1:5d:c9:3f:c0:35:4d:54:
                    2d:40:63:8d:04:15:63:ba:6d:4d:c0:20:bb:8a:59:
                    11:2d:93:9f:97:e0:43:17:c7:1f:42:98:b9:c9:1e:
                    72:61:31:18:72:e2:8d:09:d8:e2:5e:e5:3d:07:ce:
                    34:78:2d:45:fb:02:8a:83:44:42:7d:ca:89:40:ff:
                    b1:17:10:34:81:c4:6e:4f:de:d9:3c:61:44:ac:0c:
                    42:e8:bb:d7:6e:04:5e:f7:bd:76:a7:c0:a9:6f:36:
                    80:15:e3:c2:79:53:fc:c8:28:99:d0:ab:aa:98:23:
                    2d:c8:01:9b:41:32:d5:8e:6d:fc:67:52:05:35:db:
                    e6:94:58:69:a5:c1:ad:ae:04:fc:02:09:d4:5f:23:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:24:75:5A:A5:C0:24:BA:08:9F:98:71:A7:78:82:FE:83:DF:70:28
            X509v3 Authority Key Identifier:
                keyid:92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:36:02:d6:a1:8c:d1:36:9a:23:90:c7:98:5d:1d:79:32:
         f9:09:2c:d5:98:37:59:c3:52:ba:df:c6:d8:33:41:58:36:60:
         5d:da:14:d9:9c:5b:7f:4b:c7:bf:d9:f7:c6:77:15:93:3a:c8:
         2c:90:de:e4:5e:52:6a:17:36:18:db:ee:8d:5f:20:d5:c3:2a:
         9d:7a:a8:4a:c0:99:66:d3:ea:8f:f9:bc:f9:d7:af:45:e2:c1:
         37:ad:5a:d2:55:91:6e:92:99:6c:d9:db:b6:db:0b:fb:1c:eb:
         ab:02:74:2c:43:30:e7:26:32:13:a4:36:ea:53:94:99:cf:ef:
         82:ca:b1:ad:6f:c6:aa:49:d8:68:e0:6e:07:67:c2:94:55:43:
         96:b7:52:7f:ca:f3:6c:3e:c5:8e:95:fc:bb:4c:24:75:29:99:
         cd:20:19:5f:33:5c:4e:15:50:c3:be:07:d9:56:30:42:04:92:
         22:50:21:35:55:ff:af:0c:46:9e:59:4e:87:c3:c3:69:11:2c:
         4d:0e:03:fe:42:8c:59:b0:f3:b6:3d:9f:6f:4a:cb:2a:3d:2f:
         06:5c:52:9d:90:c7:b2:4c:5c:9a:d7:7d:9a:49:9b:a2:f7:3c:
         d1:fa:cb:03:38:35:e4:7e:db:ca:a9:bf:a0:4b:f8:dd:0d:cc:
         97:21:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:03:10 2025 by rpki-client