Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
File:                     2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft (raw, json)
Hash identifier:          RcUWF4ASRhbG+6yuXz/2VZMkDh12alvjcaLV5LJdqxI=
Subject key identifier:   8B:B8:28:D5:0D:D8:B9:21:45:36:33:E0:97:33:1A:54:4C:31:5E:DF
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       3FE0D8BB193CAC4FB54F23EA97F2AFA242DCA3DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
Manifest number:          02A8
Signing time:             Sat 23 Aug 2025 08:49:51 +0000
Manifest this update:     Sat 23 Aug 2025 08:44:51 +0000
Manifest next update:     Sun 24 Aug 2025 12:27:51 +0000
Files and hashes:         1: 3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa (hash: tm4DhsxHeSlJV5JNGpJrHhKVERq+PG1gxBqe0ATxftw=)
                          2: 3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa (hash: oXTwamZBdeJN2EAApic5UDNV2NLZz87vu3DcDlPv/ro=)
                          3: 323830343a333264633a3a2f3332203d3e20323632333232.roa (hash: vrmB5Sh0GVnhMtwphxYGPAIHR2ptBuVrk31o33vBN9k=)
                          4: 323830343a333264633a3a2f33322d3438203d3e20323632333232.roa (hash: 95wtn2PtjN3o486AsXSu7sv3jIID5Q0ukqej/ydy1MY=)
                          5: 2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl (hash: puhTAGlNsnV1YTTEz5wkY4zeCKdCeVEU8Dv2P+37pFo=)
                          6: 3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa (hash: C91+mf1p8hxh/d285BQtBAiWKg3jMftQf0sBi2hDcEc=)
                          7: 3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa (hash: rrNIzMkOetutqSWFRXAvvZbZjyZznAEfNKm17cvcB2g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e0:d8:bb:19:3c:ac:4f:b5:4f:23:ea:97:f2:af:a2:42:dc:a3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Aug 23 08:44:51 2025 GMT
            Not After : Aug 24 12:27:51 2025 GMT
        Subject: CN=8BB828D50DD8B921453633E097331A544C315EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:8a:e0:54:b6:fe:6a:37:fc:7b:67:5a:34:
                    3c:f9:de:ba:c9:4f:2b:c1:ba:be:a8:e4:d3:5b:51:
                    3f:42:65:d4:03:31:ab:37:2d:f2:7d:20:2e:cb:c0:
                    64:a5:f4:35:64:41:18:bf:85:52:47:17:d5:ee:2f:
                    94:19:df:fa:38:25:1b:93:05:f2:fe:98:59:1a:27:
                    2d:70:71:7f:96:99:22:5f:b1:d3:bc:5c:02:5b:d8:
                    5e:23:df:55:b9:5d:83:43:f7:94:a1:89:82:39:11:
                    45:d8:37:2e:85:d5:85:cc:97:9c:39:41:35:53:d6:
                    32:23:b4:fc:5d:81:a4:7a:ed:1a:5c:37:42:f6:0e:
                    fb:a6:4f:03:5a:a4:91:d0:c0:f8:3a:c4:86:d5:2c:
                    e6:dc:43:b9:0e:d7:87:01:ab:2f:0e:06:53:87:28:
                    46:7b:97:99:e7:70:bf:08:3e:98:44:2b:08:03:98:
                    80:e7:73:4d:8d:dc:07:b7:3b:15:68:68:66:fd:b4:
                    eb:10:7d:c6:e6:be:81:01:49:6e:29:70:82:60:11:
                    04:11:cb:4f:1a:c7:12:76:69:ef:44:b3:9c:6d:ff:
                    e0:92:25:e1:6b:ab:93:fe:91:8d:99:6a:30:52:52:
                    9e:a2:39:6c:e0:15:22:16:62:62:97:d4:15:5b:1b:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B8:28:D5:0D:D8:B9:21:45:36:33:E0:97:33:1A:54:4C:31:5E:DF
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:22:f5:79:c7:9c:5a:0b:eb:f8:0c:a8:0d:2e:4a:9a:42:
         b9:a0:b9:1c:f6:3c:67:e6:f8:25:43:60:26:75:33:bb:07:b5:
         e8:c6:9b:c6:df:ce:6a:9e:13:6b:4f:8b:09:12:51:00:be:07:
         d8:ff:f6:d6:5d:bf:93:10:fb:1c:79:6f:11:72:17:55:14:cb:
         75:ff:7e:a1:9c:ad:23:1f:7a:50:70:11:5e:8b:d3:01:3c:06:
         19:5b:db:c5:32:f4:cc:0a:a0:4e:dc:1a:dd:ce:08:b7:41:b8:
         be:8f:ab:48:47:03:e0:3e:a4:36:b3:6b:95:83:17:3b:2f:05:
         73:e4:96:ca:60:8c:43:72:57:c3:34:9f:3e:a1:a3:20:99:cf:
         37:a8:57:28:5e:f9:10:69:8c:1a:93:88:85:d0:0a:6b:2f:ca:
         c4:ba:ea:a1:79:99:fd:de:ee:7a:64:cc:cd:a4:bf:82:c0:08:
         b1:a9:95:98:2f:d3:f1:19:a9:0f:c4:a3:01:e5:ca:29:f1:f2:
         20:2c:6d:dd:a6:df:bf:e0:29:aa:b2:d1:b1:63:73:46:fc:5d:
         fb:dc:f8:02:50:45:6e:bb:fb:07:8c:4b:5f:39:d9:e2:f6:bb:
         0e:64:24:6f:50:1e:f2:fa:ec:ae:28:6d:c2:ef:16:ef:ef:70:
         20:c3:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:53 2025 by rpki-client