Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
File:                     117560A27F42885C52E66148007C2989B0339DAD.mft (raw, json)
Hash identifier:          AW6U3USYlHPI/n0ljjparwKwNnpRukvm2Uhx567ihNc=
Subject key identifier:   03:1D:0F:EB:A7:5B:E1:D4:05:27:B0:D0:32:3A:26:DE:08:6A:31:C9
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       0565CB5F79B0D486D9CB0099FA1860DD22A208C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
Manifest number:          0118
Signing time:             Sat 23 Aug 2025 12:20:14 +0000
Manifest this update:     Sat 23 Aug 2025 12:15:14 +0000
Manifest next update:     Sun 24 Aug 2025 12:20:14 +0000
Files and hashes:         1: 3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa (hash: EHaBubJbNTvMDQfi91UInX9N43xy0AaDbLvzR5QAJj4=)
                          2: 117560A27F42885C52E66148007C2989B0339DAD.crl (hash: 7KBCLF/R2xuCDtfLBWpEajcMyHWsvpfPz8+Fh7vB8wI=)
                          3: 3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa (hash: eaPmTPN0pKkcKOtrEquMUQp+UXQF/ookE75h2R2/ipc=)
                          4: 323830343a316363383a3a2f33322d3332203d3e203631363735.roa (hash: h0sAlKSBteG5e9UspnLUj4TrJvUGL24yn03JgzFpoR0=)
                          5: 3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa (hash: lfUAYU5muERMvqqEjkRPAiv8iff9paIqhjH2W5tHNnc=)
                          6: 3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa (hash: TpMe21/y7N0hpatEwrFUwO3jGlX7QHMEgWX4xeJ/TDA=)
                          7: 3133312e3130382e3136302e302f32342d3234203d3e203631363735.roa (hash: FAmEwKo3j5jFWrWKgpWyWqsqYmyhwf3nFZ/D+5dSzUM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
                          rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:65:cb:5f:79:b0:d4:86:d9:cb:00:99:fa:18:60:dd:22:a2:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Aug 23 12:15:14 2025 GMT
            Not After : Aug 24 12:20:14 2025 GMT
        Subject: CN=031D0FEBA75BE1D40527B0D0323A26DE086A31C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:2a:dc:9a:b4:ba:42:89:a2:17:c2:29:94:
                    8f:b4:72:a1:a4:d3:07:21:35:9c:fd:fc:a3:d7:dc:
                    a8:ae:d2:3f:15:5b:74:ad:ed:e7:25:ab:da:1a:fb:
                    b4:89:a7:bf:37:aa:fe:99:09:f5:a0:56:11:a1:8b:
                    f7:23:d6:2f:39:f8:f2:82:cd:4c:95:e4:e3:3f:1d:
                    a9:b8:cc:6c:d9:8e:51:4d:4e:3e:5d:be:78:89:b2:
                    47:48:7a:9b:80:fa:b0:e1:0a:e1:90:73:3d:61:8d:
                    9d:55:41:4b:9c:4f:38:1c:ce:66:d1:71:c1:bf:80:
                    05:0d:67:eb:86:de:9a:83:68:74:44:5e:10:f0:6b:
                    63:a6:0d:5f:77:b6:0a:56:dd:36:24:56:c5:41:60:
                    14:32:55:c0:04:ed:f8:96:54:02:35:a3:5a:be:43:
                    9e:d9:cc:fb:b0:a7:f5:8f:8a:8e:a7:ea:8c:f2:83:
                    ee:23:c2:26:96:a9:56:ac:18:2a:fe:70:ab:96:db:
                    8f:75:e2:a3:5d:dc:a8:1b:3c:73:d3:ac:8f:1c:b3:
                    ca:d6:29:1a:c9:ac:21:70:aa:f6:70:f9:23:21:e8:
                    75:3d:34:46:b9:d2:98:95:ce:ef:c1:cc:06:54:58:
                    d6:eb:0e:0f:ba:ab:28:e2:df:fd:54:29:31:89:be:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1D:0F:EB:A7:5B:E1:D4:05:27:B0:D0:32:3A:26:DE:08:6A:31:C9
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:b6:aa:b2:9a:56:69:d0:e6:06:7e:42:a2:f5:20:e4:0d:
         6e:75:17:e9:77:90:4a:17:2b:44:4e:a0:30:2d:21:5e:31:b8:
         3f:07:93:84:9f:5b:29:f8:68:3c:d0:66:2f:e5:a3:30:cf:27:
         08:8b:ed:e6:a9:16:94:d2:5a:06:97:de:53:4a:d8:ae:98:d6:
         86:36:8a:52:ad:43:9a:46:22:4d:8d:e9:3b:d8:37:34:1b:34:
         b7:a2:c1:67:c2:ed:ff:94:04:6e:9d:ff:a0:cf:03:e6:9a:7c:
         02:75:14:08:09:1e:72:3c:83:b4:b0:b1:3e:00:df:ae:fe:29:
         e8:a0:84:49:4e:ae:3c:04:cc:34:f5:0c:55:65:b5:0d:4f:2e:
         b3:86:1b:00:5a:01:95:e4:6a:99:47:9d:ec:28:e2:ae:63:b2:
         7b:35:d4:56:f7:33:da:4c:f3:c1:84:a5:8b:1e:ea:95:2c:27:
         0e:55:5d:b9:2b:76:4e:76:d6:ec:5a:6f:3c:2d:ab:cd:cc:35:
         ed:15:05:b0:ef:15:d0:6e:13:14:8c:3f:a2:15:15:11:e1:d5:
         f2:5d:55:f1:83:f5:a8:67:54:67:6d:6c:f6:67:eb:c4:c7:08:
         cf:d2:68:e9:f1:6c:15:94:a5:fe:02:55:27:93:c4:63:22:ea:
         72:cf:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:08 2025 by rpki-client