Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
File:                     5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json)
Hash identifier:          JD1XL+j2u0Z9EBn4O2riHVfG9IkfIuxNbbEC9WxUPfg=
Subject key identifier:   2C:A0:CD:7D:91:D8:A2:CA:D0:D8:22:F7:41:3F:24:0A:B2:49:28:6E
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Certificate issuer:       /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial:       11EF8D91FD4D07C64FF5DD16FFA282A986580572
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
Manifest number:          01CA
Signing time:             Wed 02 Jul 2025 21:53:59 +0000
Manifest this update:     Wed 02 Jul 2025 21:48:59 +0000
Manifest next update:     Fri 04 Jul 2025 00:51:59 +0000
Files and hashes:         1: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: 0nfaEfHwdQI5BdLajmRxzlZpzr/zR2hc07bBmvu/aWc=)
                          2: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: K2lOoGMPlluWYta8yFFSPE1Y2MAx/WN2bGaz6d0VOcQ=)
                          3: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: RUhPVJbcOr4gT219vmEfw5IpzZ4PVK7OTvfZxHJfvHY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
                          rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ef:8d:91:fd:4d:07:c6:4f:f5:dd:16:ff:a2:82:a9:86:58:05:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
        Validity
            Not Before: Jul  2 21:48:59 2025 GMT
            Not After : Jul  4 00:51:59 2025 GMT
        Subject: CN=2CA0CD7D91D8A2CAD0D822F7413F240AB249286E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:7b:75:a4:56:73:8f:3e:0f:6f:7b:96:26:
                    37:61:20:ac:57:00:d0:4f:2c:a5:96:8e:5a:d5:22:
                    d6:61:03:7c:3b:f5:a2:9d:35:e1:54:6e:ce:fb:f9:
                    52:ce:2c:27:55:93:4a:38:06:7b:2e:4a:c7:1d:b7:
                    0d:16:a2:65:cc:d4:3b:b2:29:50:aa:5c:9e:08:28:
                    6b:b5:6a:f4:15:93:aa:8a:01:71:3b:f1:80:ca:67:
                    42:42:db:95:a3:d1:28:b5:85:b5:86:65:64:19:bd:
                    70:4c:07:d5:40:a1:79:e5:93:27:34:ab:71:04:d0:
                    eb:09:69:37:bb:fe:47:39:ee:d3:91:0d:da:34:a6:
                    c1:1a:e4:5b:15:f3:f8:59:f1:1a:28:ae:eb:a2:67:
                    07:d0:9a:e7:35:e8:d0:bc:ca:98:ce:dc:ff:27:b4:
                    ba:d9:e0:d2:33:3c:ea:a5:08:ab:53:9c:34:ba:de:
                    96:8e:b8:d3:17:40:b9:6d:a7:d7:a0:a1:5c:4f:b8:
                    ae:e1:b7:56:21:6b:7c:fa:1c:d5:64:04:5c:33:96:
                    96:5b:a9:38:be:e6:98:20:eb:84:42:22:b3:49:c6:
                    fe:04:02:3b:28:cb:c1:0c:a1:36:70:7b:94:16:6a:
                    11:c5:05:e8:de:45:f1:65:85:41:8f:db:5f:5d:c6:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:CD:7D:91:D8:A2:CA:D0:D8:22:F7:41:3F:24:0A:B2:49:28:6E
            X509v3 Authority Key Identifier:
                keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:88:b0:51:78:a2:c6:a1:5f:50:01:81:3a:a2:50:8d:c2:bd:
         b8:e4:ea:ed:85:c5:bc:2f:46:07:95:9b:2c:c6:6e:f1:12:7b:
         f6:dc:17:57:cf:00:4c:d1:9a:ce:ae:37:32:5d:3c:62:21:64:
         cf:6b:12:2b:94:6f:15:3c:8e:ae:a7:65:fc:fe:c5:1a:51:d8:
         4d:f8:0e:36:e9:d1:ab:29:a2:9c:31:30:47:25:4c:55:d3:b4:
         8d:9e:be:78:f4:70:c5:dc:df:6e:ba:59:74:5b:d8:5e:03:31:
         3d:76:7a:71:4f:6f:00:41:1f:b3:e9:59:0d:1e:da:b3:bc:2e:
         8b:d0:de:1f:e3:a3:fd:34:be:c0:65:41:44:c3:28:48:d5:71:
         50:42:25:96:c6:f1:cd:67:71:30:97:20:e5:75:9b:e8:d7:c4:
         1f:a6:ff:59:45:0e:a1:5f:a1:2d:87:da:09:37:9d:03:1e:e4:
         f8:2c:6d:36:bd:fd:b2:73:5b:fb:f0:63:ba:3e:22:0d:5c:3f:
         4c:60:09:75:5c:79:e6:fe:07:71:21:ed:64:5b:46:a6:87:31:
         68:43:20:14:18:fc:d3:51:c4:8d:49:cc:aa:24:ac:27:7e:67:
         81:f0:98:82:9a:02:b4:78:20:14:39:27:28:a7:b4:02:14:bf:
         76:60:05:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:40:45 2025 by rpki-client