Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
File:                     D88B454BC594C5A1800134E375B465D91C070DFD.mft (raw, json)
Hash identifier:          v9mxIq7outEwW4iUp5U6L91EPz12JGzSqNfHEF7KH2w=
Subject key identifier:   7E:72:74:4A:D2:DE:A8:B0:F6:F6:F4:E9:A6:1A:B0:34:1B:1E:EB:D1
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       3911221CF90E88EF986152A411B02392C2061FB7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
Manifest number:          2A
Signing time:             Wed 02 Jul 2025 10:00:01 +0000
Manifest this update:     Wed 02 Jul 2025 09:55:01 +0000
Manifest next update:     Thu 03 Jul 2025 12:58:01 +0000
Files and hashes:         1: D88B454BC594C5A1800134E375B465D91C070DFD.crl (hash: SKxNgu6ScMZsNYat1y85wLT7M7eEA05qsGvXUkdgdtU=)
                          2: 3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa (hash: KbZ+qNpkBGT3I9oVhnyT8DmgMDvWtfrQzIY/Ox8k91U=)
                          3: 323830343a326564343a3a2f33322d313238203d3e20323635333639.roa (hash: CMPuVa43M/mtSeZmA5q7/xTl8XIpukeF40GbTH+b8DU=)
                          4: 32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa (hash: B0g0/6dpDwpXEPB2OXlQQy2yzhoKUdtgY5moX7NXSJg=)
                          5: 3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa (hash: JYM/ddqp6VUTUxpc3tV7MQMhhwucHwZ22I/OI4yVnUs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 12:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:11:22:1c:f9:0e:88:ef:98:61:52:a4:11:b0:23:92:c2:06:1f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: Jul  2 09:55:01 2025 GMT
            Not After : Jul  3 12:58:01 2025 GMT
        Subject: CN=7E72744AD2DEA8B0F6F6F4E9A61AB0341B1EEBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:20:21:53:3f:e3:3e:d7:99:76:5b:26:70:5c:
                    9b:10:78:35:d6:18:5c:33:73:49:2d:fe:28:ac:94:
                    b0:80:e6:5f:c1:fb:71:4b:ba:46:28:4c:c3:ba:1d:
                    8c:37:15:71:43:f2:d4:f1:06:83:fc:da:d9:ba:a1:
                    cd:79:83:69:5f:44:8c:2f:55:21:81:42:e7:36:d9:
                    78:dc:06:0a:ad:80:91:21:98:0c:b0:fe:d5:c8:08:
                    1f:da:2f:ae:cd:06:76:43:a7:21:45:c1:67:70:05:
                    0e:e6:53:f0:ec:a2:e4:09:71:29:ed:26:0b:0d:81:
                    82:a2:78:88:7f:52:5e:c1:b2:45:79:e4:52:eb:ec:
                    18:5f:42:9a:cc:c0:53:ce:c7:d6:81:00:74:e5:87:
                    2a:e0:fc:93:87:04:f6:0b:78:6a:a3:5e:a3:d8:69:
                    bf:ac:11:76:55:12:7d:bd:bb:9f:35:e4:05:dd:75:
                    23:4e:a5:30:de:3a:06:4c:25:3a:13:69:aa:68:b3:
                    52:ad:9c:3b:b6:46:8b:0d:33:c8:1b:1c:a8:12:ad:
                    a9:ab:a9:3e:61:15:99:fd:c7:31:cb:46:5b:61:68:
                    ba:55:f4:4b:b8:01:e5:15:6b:3e:d6:f1:d5:19:21:
                    ad:d9:26:92:c6:ca:35:55:28:5c:c1:2a:0f:e6:53:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:72:74:4A:D2:DE:A8:B0:F6:F6:F4:E9:A6:1A:B0:34:1B:1E:EB:D1
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5f:6c:3c:22:91:94:0e:4d:07:54:6b:0d:41:e5:7b:f7:c6:
         2f:47:26:51:91:df:fa:93:b4:64:71:76:ae:93:a2:d6:19:34:
         f1:97:30:ee:e5:ea:b7:f8:45:14:69:c0:e1:58:0f:aa:52:d5:
         ef:52:0b:6a:25:24:13:04:e0:c1:a5:5d:af:c5:ab:87:3f:4f:
         e3:86:f7:30:b2:78:e7:33:e1:46:4e:ca:f7:df:74:97:bd:0c:
         19:2d:96:02:29:88:3f:76:6c:82:d9:ca:28:d5:61:d1:ea:dd:
         79:89:ca:0b:0e:a2:cc:a4:c4:27:9c:5b:3c:b8:54:3f:b3:1a:
         a7:c2:ea:a4:e0:79:d7:35:75:20:d4:5f:bb:24:29:f9:28:e0:
         dd:fa:85:48:27:f7:23:5a:1d:45:ea:ba:82:75:ec:03:8a:37:
         9b:53:78:de:f6:cb:4c:22:44:ab:3e:dd:3d:37:d0:74:c2:59:
         ff:79:f4:33:aa:c8:a5:9b:ca:01:e9:a9:e6:fc:bb:91:50:39:
         dc:4c:a6:40:fa:1b:db:8b:f9:3e:1a:fb:97:29:6c:dc:f2:5b:
         f4:3b:d9:42:03:5d:97:7a:d3:d5:41:1f:40:5d:4c:1d:38:d4:
         13:6c:56:8c:2a:5f:06:94:e2:14:af:a2:32:5f:9f:d9:50:b5:
         7b:88:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:29:27 2025 by rpki-client