Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.mft
File:                     7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.mft (raw, json)
Hash identifier:          jRURqTT9Thmsa/6IIUXOjz5KCQxGp4jjAyiQXvM7bSg=
Subject key identifier:   17:7A:7F:E1:82:F1:0B:04:82:D0:9A:5E:B0:6E:DC:9F:2F:E5:7E:80
Authority key identifier: 7F:02:CF:06:C2:4F:E5:3E:D3:52:07:2A:D2:B5:F9:7F:3C:F8:93:F1
Certificate issuer:       /CN=7F02CF06C24FE53ED352072AD2B5F97F3CF893F1
Certificate serial:       7FBD57B2A029EC0D0CF97DF536B8597C312C8F28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.mft
Manifest number:          13
Signing time:             Thu 15 May 2025 14:40:31 +0000
Manifest this update:     Thu 15 May 2025 14:35:31 +0000
Manifest next update:     Fri 16 May 2025 17:01:31 +0000
Files and hashes:         1: 323830343a346632383a633030303a3a2f33342d3334203d3e20323638333038.roa (hash: iRF+mhDmjcLyXES+yc0gZpzd389+myNf45wVNimO0pc=)
                          2: 34352e3233382e342e302f32332d3233203d3e20323638333038.roa (hash: vPMuDfmHt/BmOWfbCpIkpOrftrWAL70jFtUPHD3iR1M=)
                          3: 323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa (hash: zOt4iu4nf8f8zxwFFEGnzo+aV1as2sKZEXpoowfDv3M=)
                          4: 323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (hash: Guw0XwCYs+a1xHnBuzWJbodgMI80ntaTMRLZWOflW8A=)
                          5: 323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (hash: I/aqgxGbp5ZqDjPmCzjriRDWl3sX2qMortLoVzDbWXg=)
                          6: 34352e3233382e342e302f32342d3234203d3e20323638333038.roa (hash: X6OuEMriiIEuj27iOJQXN5k4t55UArU+G1R8aJdWwcc=)
                          7: 7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.crl (hash: mK9700GAltI8Eu38kj29jQ6ilsyDWJ0avG/CFy1sjHM=)
                          8: 34352e3233382e352e302f32342d3234203d3e20323638333038.roa (hash: Uj2GGNbGrjWczWTrHfD7wjGKbsMbQq9OQoa4pnEp0OI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 17:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bd:57:b2:a0:29:ec:0d:0c:f9:7d:f5:36:b8:59:7c:31:2c:8f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F02CF06C24FE53ED352072AD2B5F97F3CF893F1
        Validity
            Not Before: May 15 14:35:31 2025 GMT
            Not After : May 16 17:01:31 2025 GMT
        Subject: CN=177A7FE182F10B0482D09A5EB06EDC9F2FE57E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:cd:85:cf:01:57:cc:34:6a:94:2a:1d:cc:
                    0c:3c:ae:bf:c0:83:30:9a:73:23:e1:a4:1a:d0:c6:
                    27:4c:6b:8a:d0:c3:c2:ba:90:b5:90:9d:fe:05:db:
                    8f:72:f9:35:a5:75:30:e6:8e:67:11:4f:5b:1b:5a:
                    e2:d2:21:b8:ec:18:3c:2a:ee:f5:8f:51:b9:38:82:
                    26:84:85:34:e8:7c:bc:9f:a5:99:84:78:c8:94:be:
                    06:6c:27:c7:06:31:a5:33:24:d3:f7:51:54:bd:a9:
                    4c:a5:05:32:d8:4b:cc:cd:c4:49:4a:29:32:4c:bb:
                    5b:c3:e1:c3:be:83:39:f0:a4:72:66:f4:39:ec:4c:
                    18:fc:4a:11:ab:9c:ee:fa:5e:fc:c3:14:20:43:f0:
                    56:bf:85:74:7d:05:d5:fd:00:ca:0f:24:60:93:72:
                    3d:44:5f:51:1a:6a:b0:27:8f:ca:6e:3c:5e:25:3a:
                    89:31:7d:25:9f:66:72:d4:ad:3e:ab:ee:22:ad:13:
                    c5:28:4a:bf:a4:b3:33:e2:ba:a8:8a:7b:be:f8:e4:
                    ef:85:78:1a:76:11:4d:52:2e:8a:b1:6b:7e:e9:82:
                    46:f6:80:ae:99:75:80:b5:8d:ea:04:6b:8c:88:5f:
                    2b:8a:52:17:6b:92:75:d1:7d:82:30:71:fa:10:56:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7A:7F:E1:82:F1:0B:04:82:D0:9A:5E:B0:6E:DC:9F:2F:E5:7E:80
            X509v3 Authority Key Identifier:
                keyid:7F:02:CF:06:C2:4F:E5:3E:D3:52:07:2A:D2:B5:F9:7F:3C:F8:93:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2d:0f:a1:7b:1b:bc:0b:bd:35:6a:49:7c:eb:6e:43:5d:43:
         b1:04:e8:df:cc:7c:64:00:26:29:a0:05:a7:23:17:4d:91:2d:
         7f:a5:62:92:bd:9c:80:32:73:2c:ca:d0:0e:2b:09:84:a6:25:
         c7:d1:59:9d:4d:c7:bf:53:38:ec:d8:45:18:64:9a:e0:0c:94:
         d4:ba:4c:bb:3a:40:4b:1d:11:c6:92:01:fc:de:90:ad:81:01:
         30:23:16:14:9d:70:56:72:b0:29:57:95:7d:2c:39:07:e9:45:
         ae:d3:ca:6b:38:a2:b5:31:c3:fb:c4:65:23:53:8e:a1:0d:79:
         b6:2d:01:fd:a1:2b:28:af:c3:fd:b5:c3:70:0a:e4:a6:bf:e9:
         98:bb:26:72:b7:2c:36:ad:d9:89:45:a2:27:43:04:48:4e:44:
         17:56:5e:98:1e:92:59:19:c5:00:05:98:44:f2:4a:ce:02:e7:
         3a:06:be:d4:eb:df:b2:e5:f1:0c:ee:01:98:fa:20:86:ce:6f:
         24:35:81:87:fa:e1:3e:fd:80:ba:64:0e:8c:aa:a8:5e:a4:99:
         a9:70:1a:48:74:ef:78:5e:b5:9d:ec:44:9e:da:36:c0:04:72:
         2f:a1:7f:4d:5e:e2:ae:66:ba:2e:7d:d1:65:0b:76:3f:79:b3:
         79:e4:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:14:02 2025 by rpki-client