Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
File:                     9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft (raw, json)
Hash identifier:          1IFjpNzEAma7pMAH7cfZR7jZu7pHaPCs7htPlNQC+X8=
Subject key identifier:   1F:50:ED:C0:B1:FA:5D:D3:89:CD:AE:02:32:CE:E7:41:42:31:9F:48
Authority key identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
Certificate issuer:       /CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
Certificate serial:       7CA83B15F199473FB92815FDD68022824D70A985
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
Manifest number:          025E
Signing time:             Tue 01 Jul 2025 13:11:23 +0000
Manifest this update:     Tue 01 Jul 2025 13:06:23 +0000
Manifest next update:     Wed 02 Jul 2025 15:03:23 +0000
Files and hashes:         1: 34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa (hash: N+mGNgubbJekFWOnADVO5cKOOG5Dw1zgNdMh+bSebuE=)
                          2: 323830343a346263343a3a2f33322d3430203d3e20323637333238.roa (hash: 8YCQ1pEqfG8TZim2Qgau2Oe74gxnsmxIp/lq/UEeQbc=)
                          3: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl (hash: 2aSHPQuepdabtLBBqAGEN2My7vDBsXyMYchI3Up7kaI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl
                          rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 15:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a8:3b:15:f1:99:47:3f:b9:28:15:fd:d6:80:22:82:4d:70:a9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
        Validity
            Not Before: Jul  1 13:06:23 2025 GMT
            Not After : Jul  2 15:03:23 2025 GMT
        Subject: CN=1F50EDC0B1FA5DD389CDAE0232CEE74142319F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:ec:46:4e:1e:18:bd:92:ea:ec:c3:23:a1:
                    cb:c0:b5:f2:ab:3b:d5:7b:80:3d:b2:de:7b:64:db:
                    75:3d:9a:19:5e:99:99:a1:95:55:d2:e7:6d:5b:7b:
                    c4:e5:22:b8:59:8d:a7:1f:88:e8:a6:0d:fc:9a:28:
                    1f:7d:8d:fe:ef:93:65:3e:c0:94:01:d1:47:fb:ae:
                    58:ed:e2:3c:1d:19:7e:21:3a:8e:86:5c:80:e2:b4:
                    e5:e9:df:76:85:24:d6:01:ff:e9:89:f7:61:6a:6f:
                    b6:db:9c:bd:54:ca:13:2d:7d:a0:42:fb:f6:d9:f7:
                    52:51:ef:9c:d2:09:14:70:07:88:e1:c8:20:ce:68:
                    db:81:22:8c:4e:6d:50:b3:ad:c8:51:b8:82:f1:0a:
                    f2:fe:93:a6:6c:45:b4:fd:77:5a:13:5e:4d:f0:65:
                    27:ac:1e:a3:66:40:c5:84:f1:f2:f4:5f:3f:42:39:
                    22:1f:9a:aa:2e:82:f5:df:3c:27:f8:28:a6:3f:c4:
                    93:85:8e:d3:95:46:7c:b3:23:41:cb:69:ea:04:cc:
                    ce:5c:31:43:2c:75:45:b8:e3:32:65:5d:79:0c:9a:
                    79:3a:0d:ec:3e:85:80:de:df:79:4e:17:41:9e:42:
                    07:9f:b5:8e:08:02:99:2b:0c:e7:6d:f7:3f:e2:b0:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:50:ED:C0:B1:FA:5D:D3:89:CD:AE:02:32:CE:E7:41:42:31:9F:48
            X509v3 Authority Key Identifier:
                keyid:9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0f:c2:28:c2:7b:64:18:6c:cd:f5:ab:d1:7a:3b:52:23:75:
         ea:48:38:0b:37:3c:f3:12:57:13:82:96:da:6d:0f:47:d1:b4:
         35:5a:a3:ff:0e:b4:59:03:e7:73:e6:4c:f5:27:f8:d6:44:95:
         07:44:2a:ae:a2:7d:2b:25:97:63:d5:38:60:c2:57:94:d8:5e:
         e8:66:b1:ef:c6:48:19:09:77:2b:c4:e0:30:69:8f:57:a7:6b:
         7f:af:d7:cd:54:f3:32:48:07:36:4b:5e:ed:85:bf:c8:c5:7e:
         e8:f1:bc:8e:8a:ff:64:21:93:ed:21:8e:db:51:39:28:9b:58:
         1f:92:7a:62:3e:c8:cb:5b:7a:60:63:71:ad:af:c8:1a:48:6a:
         e0:16:e8:98:cc:41:31:45:10:b1:a0:0e:2f:ff:09:65:ac:15:
         ae:55:02:0b:67:c0:98:cb:ba:92:70:75:d5:00:37:28:a2:80:
         73:ca:7d:40:49:80:cc:59:ff:bb:6c:7e:8c:4e:fa:2f:ea:3f:
         0e:71:62:da:c0:bb:4f:17:ca:87:37:27:08:31:12:c8:3d:64:
         de:c4:1a:6e:15:ce:f2:5f:7c:85:9c:30:3e:24:f6:a3:5f:f5:
         d9:85:85:2a:bb:00:e3:6d:f8:3b:0e:0a:a6:20:a8:cb:f4:ca:
         70:50:20:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:37:01 2025 by rpki-client