Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
File:                     2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft (raw, json)
Hash identifier:          yMmznePt6LmbsJm6QHLOS5GBmB6XMpdM2y4EzydcNSY=
Subject key identifier:   CF:46:58:FF:2C:4F:96:45:B5:F7:75:D3:C5:A2:AD:B4:A5:CF:9B:EF
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       42325800137DC82F5A1B47D5871B803101DD5DF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
Manifest number:          025F
Signing time:             Tue 01 Jul 2025 01:33:59 +0000
Manifest this update:     Tue 01 Jul 2025 01:28:59 +0000
Manifest next update:     Wed 02 Jul 2025 04:17:59 +0000
Files and hashes:         1: 323830343a333264633a3a2f3332203d3e20323632333232.roa (hash: vrmB5Sh0GVnhMtwphxYGPAIHR2ptBuVrk31o33vBN9k=)
                          2: 323830343a333264633a3a2f33322d3438203d3e20323632333232.roa (hash: 95wtn2PtjN3o486AsXSu7sv3jIID5Q0ukqej/ydy1MY=)
                          3: 3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa (hash: oXTwamZBdeJN2EAApic5UDNV2NLZz87vu3DcDlPv/ro=)
                          4: 3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa (hash: rrNIzMkOetutqSWFRXAvvZbZjyZznAEfNKm17cvcB2g=)
                          5: 2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl (hash: zXLyYpN5EQW0eHkN9YQsddW95af4PxuyzvRT9I8t3s8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 04:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:32:58:00:13:7d:c8:2f:5a:1b:47:d5:87:1b:80:31:01:dd:5d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Jul  1 01:28:59 2025 GMT
            Not After : Jul  2 04:17:59 2025 GMT
        Subject: CN=CF4658FF2C4F9645B5F775D3C5A2ADB4A5CF9BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:a8:b1:02:f6:e8:ca:4f:5f:8e:7a:05:98:
                    4d:3f:f7:ea:a3:1f:8e:36:24:f3:0e:96:98:5f:a1:
                    1e:a3:9d:e1:a9:56:27:3e:95:2b:6d:f2:6b:4e:e7:
                    0b:f5:5a:96:d6:40:92:de:72:f4:6a:39:07:e8:e2:
                    bc:29:98:8f:5a:7b:bf:6a:05:8e:f6:46:0d:a4:11:
                    62:42:2d:56:8c:da:af:3b:2b:87:c3:94:16:63:b8:
                    f5:c4:7e:a3:c0:e6:a7:c2:65:39:6b:72:9b:86:b9:
                    14:7c:36:41:72:7a:19:dd:9f:a4:d2:88:99:df:24:
                    8e:a1:15:ac:54:5b:07:33:26:f0:02:9a:f1:55:61:
                    1e:d6:f6:46:7f:7b:72:f3:9f:8c:e8:56:da:4f:2a:
                    13:83:b0:19:13:e5:67:fd:0d:c4:29:7b:2c:93:78:
                    a8:02:d0:be:64:b1:a2:49:50:5f:15:5b:46:a8:f9:
                    fb:ee:29:22:6f:9f:3e:5f:53:41:a9:26:0f:d3:49:
                    bf:45:12:59:be:03:e3:21:7b:58:3a:d1:a7:d1:0b:
                    c1:43:e1:aa:d2:de:3a:43:b5:81:ca:b5:92:c6:61:
                    5a:43:38:d1:f3:fd:e8:96:f0:03:27:e0:1e:d5:88:
                    5c:98:c2:da:00:37:5e:7f:4b:17:33:b6:4c:3c:41:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:46:58:FF:2C:4F:96:45:B5:F7:75:D3:C5:A2:AD:B4:A5:CF:9B:EF
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:15:5c:19:49:36:7b:a8:d1:a7:bf:9e:c3:f3:de:96:ef:08:
         45:99:31:27:5d:30:ce:96:c3:cf:23:fc:31:e1:1b:70:c5:ae:
         9d:eb:08:53:32:4e:9b:9e:00:0e:f8:92:dc:70:f0:36:09:15:
         49:f4:6c:dc:1d:e3:7b:b6:17:85:13:01:2a:52:cc:c0:23:88:
         b8:55:c0:a2:f4:73:d0:88:ae:e6:28:62:9b:32:4f:83:25:26:
         8c:5e:c0:92:49:55:8f:67:7b:99:a6:b0:60:6d:af:99:72:73:
         68:0f:42:c0:cc:cc:d5:79:ad:8f:5b:5a:2d:55:62:1a:3e:a2:
         d1:c8:2e:bc:8a:fb:48:21:ba:1b:88:95:56:18:15:a1:27:a3:
         fe:57:ac:1e:65:b9:71:32:6b:5d:a1:37:d6:7d:f8:dc:e4:bc:
         cd:a8:0e:7b:60:e1:70:23:10:6b:32:08:b8:03:dc:1d:93:08:
         20:0f:47:11:f4:72:a0:3b:45:7d:52:a4:10:7e:58:db:00:af:
         55:c5:d4:7c:64:8b:53:95:72:8a:af:7f:ff:45:3b:10:61:a5:
         bd:0a:2b:ad:0b:db:da:2a:a3:ca:fc:33:84:6b:c4:46:42:cb:
         65:fc:30:ac:e0:98:40:6a:f6:6c:5b:06:5b:4d:11:ab:c0:89:
         39:b4:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:38:41 2025 by rpki-client