Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
File:                     72D4C5EE34A043798ED938051AE717D10692045C.mft (raw, json)
Hash identifier:          xHqOXw+i0L3eoLLGIdjJR0r4XWSo76e3yYhScKsspBc=
Subject key identifier:   43:90:3E:1E:DF:F0:D8:FF:05:11:4B:C5:FA:80:FA:01:5D:5D:C5:D1
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       0B2C11EECD30DFA96EE917E0EBC82E033C821B96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
Manifest number:          01E5
Signing time:             Wed 02 Jul 2025 09:52:55 +0000
Manifest this update:     Wed 02 Jul 2025 09:47:55 +0000
Manifest next update:     Thu 03 Jul 2025 12:56:55 +0000
Files and hashes:         1: 323830343a353136343a3a2f33322d3332203d3e20323638343439.roa (hash: Cl16DiwJNumyv71pOGojDv+nWVRm7Lg2IzVvJEaSZoQ=)
                          2: 34352e3136312e37322e302f32322d3332203d3e20323638343439.roa (hash: zAn1qOZ9n78ahUJASXYoTNIQ5Gx5qj3HDdM0RWpF6/k=)
                          3: 323830343a353136343a383030303a3a2f33342d3334203d3e20323638343439.roa (hash: JN32EgrgjizqbUbAtX1SYDeqmguBgQpzKTPi+awddl8=)
                          4: 323830343a353136343a633030303a3a2f33342d3334203d3e20323638343439.roa (hash: W4stWl4poow/vUNiwEsPZ57lYpsOS4HGOeMKxmH7ZCA=)
                          5: 323830343a353136343a3a2f33342d3334203d3e20323638343439.roa (hash: 47kMw0n/UxRcH30I3DPJKfeyYgmG0drCHwI8ptwKAQw=)
                          6: 72D4C5EE34A043798ED938051AE717D10692045C.crl (hash: AHSpubiusmlUFjvbZqiCeQCBuADUYYC3p6OEqWoWQ2E=)
                          7: 323830343a353136343a343030303a3a2f33342d3334203d3e20323638343439.roa (hash: SAhtDrJAdKnYw+Wa3lyp+gm3tO9xH8/Pc/H2wqu8A/w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 10:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2c:11:ee:cd:30:df:a9:6e:e9:17:e0:eb:c8:2e:03:3c:82:1b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Jul  2 09:47:55 2025 GMT
            Not After : Jul  3 12:56:55 2025 GMT
        Subject: CN=43903E1EDFF0D8FF05114BC5FA80FA015D5DC5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:3c:14:f1:4a:97:3d:63:76:48:fd:e5:c1:
                    e0:cf:bc:c5:8b:24:5d:a9:93:70:38:d0:93:2c:a5:
                    74:88:73:01:c7:99:0d:f4:7b:eb:e1:b7:d4:9f:03:
                    99:58:9f:2c:16:89:c5:b2:75:33:4f:43:ff:80:a4:
                    02:05:74:cf:c8:d8:64:fe:ff:2d:a5:e7:1f:07:03:
                    48:85:b9:0a:77:e2:c5:14:b9:35:ee:3f:42:c5:04:
                    f2:7a:6b:0c:8c:b8:ac:20:48:01:33:b6:7c:99:e0:
                    3f:19:f2:98:72:42:75:59:1e:13:34:6a:fb:16:c6:
                    fb:d8:c4:f6:e3:cf:75:c5:d4:e6:a2:a2:42:e4:2e:
                    61:c1:f0:fa:63:e0:1e:41:59:b5:bc:80:e5:92:7f:
                    74:85:99:45:81:d5:1a:1a:a5:12:38:f8:20:26:67:
                    6a:d5:2e:ad:87:fb:75:f2:31:ef:0a:4e:40:26:7a:
                    3d:b0:b0:f3:1c:d3:2d:4b:d1:e8:04:a0:f0:60:68:
                    77:ce:62:40:00:71:01:1e:60:50:fd:a4:fc:53:e5:
                    37:ca:4d:e4:03:4b:cc:50:ec:d4:3d:a8:6e:70:68:
                    4d:6a:ca:a7:88:87:21:77:b1:e3:b5:36:14:4a:72:
                    1f:5b:fa:a7:f5:36:3b:d2:4b:7e:fb:33:42:99:d0:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:90:3E:1E:DF:F0:D8:FF:05:11:4B:C5:FA:80:FA:01:5D:5D:C5:D1
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:13:a0:1c:41:df:3d:0c:12:37:b2:db:9d:6d:7a:f3:ab:b6:
         37:ce:40:be:48:d2:db:10:87:23:ca:16:95:99:fb:39:9d:d9:
         e4:d2:2d:6b:a2:58:d5:d6:ea:73:6f:a3:a9:8b:7c:1f:23:61:
         46:27:2e:72:44:fd:41:c2:f9:4c:db:6c:42:68:dd:4e:66:12:
         66:a9:e9:ea:d0:26:5e:29:d8:fb:58:e4:36:b8:5e:d6:49:b7:
         61:69:4b:73:1e:0b:1e:6d:11:b3:8a:bd:98:6a:c7:9a:cd:a9:
         35:e7:5d:9f:d6:fd:80:28:36:a7:5a:33:8b:20:2c:d9:a1:0f:
         05:ee:06:7e:b7:0a:05:29:ca:2d:ee:94:c7:54:ea:a5:89:7b:
         4c:f8:89:c7:49:0c:bc:3f:78:05:e5:a0:d8:8f:4a:e2:f3:41:
         8f:80:0c:a1:90:33:2f:61:7a:59:d5:1d:28:8f:d7:53:e6:09:
         4c:8d:63:d2:7c:f7:8b:6b:91:28:bb:24:b2:2c:9c:c1:ca:7d:
         8b:ab:8a:e7:c2:38:3e:95:ec:e0:64:3a:1f:be:40:4d:56:4d:
         9a:65:ad:b8:98:69:a0:d6:50:79:63:1c:e4:2f:6b:4a:d6:0c:
         4e:1e:34:db:ae:01:c8:27:da:5b:5b:29:39:dc:79:0e:4c:f2:
         47:30:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:25:52 2025 by rpki-client