Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
File:                     185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft (raw, json)
Hash identifier:          7CQML8CG96skpTE/rlOmaGC9KvtaIOTRZdUs4c6N3tA=
Subject key identifier:   F3:56:77:B2:C8:37:6C:5C:49:95:B9:36:7D:81:AC:0C:77:F8:07:AF
Authority key identifier: 18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0
Certificate issuer:       /CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
Certificate serial:       0870253220E793CC693496EBEB5B8FB0E263B4C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
Manifest number:          021F
Signing time:             Tue 01 Jul 2025 18:57:37 +0000
Manifest this update:     Tue 01 Jul 2025 18:52:37 +0000
Manifest next update:     Wed 02 Jul 2025 21:57:37 +0000
Files and hashes:         1: 3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa (hash: cxl0gDvfOJYeS8W0mxIoZ1bwetw+e7AZFnXJkuIZvyE=)
                          2: 185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl (hash: R4kenRN1fCTmG1nm3JSDzqn/f/CR4F/nxoppU/PgSvY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl
                          rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 20:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:70:25:32:20:e7:93:cc:69:34:96:eb:eb:5b:8f:b0:e2:63:b4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
        Validity
            Not Before: Jul  1 18:52:37 2025 GMT
            Not After : Jul  2 21:57:37 2025 GMT
        Subject: CN=F35677B2C8376C5C4995B9367D81AC0C77F807AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:b6:a9:e4:c8:7e:79:48:09:7b:28:45:44:
                    58:70:86:f3:e9:3f:d5:78:34:4f:dc:8f:6b:06:93:
                    fd:3a:1f:a2:94:dc:a7:4a:27:79:c5:77:38:8d:60:
                    43:68:bb:e8:12:60:72:8b:8e:db:74:eb:be:99:4e:
                    3e:00:dc:42:f5:a0:04:3b:17:46:8b:28:f6:e0:c3:
                    b7:53:7a:af:f7:fa:e2:23:1f:a5:a2:23:fe:18:29:
                    4c:70:12:47:92:29:5f:da:97:b6:66:21:5e:0a:de:
                    d7:45:2a:24:52:4b:04:48:ee:60:29:ae:42:b6:f4:
                    af:76:cc:53:44:08:f0:1c:22:d4:39:e0:56:b2:55:
                    92:8b:b9:15:1d:2b:e6:f3:aa:75:a1:31:72:00:db:
                    7e:d3:92:15:6b:68:be:f5:f7:61:1a:f4:d6:de:03:
                    e1:af:9f:d4:87:18:ab:b5:8b:0e:c7:c4:ac:bc:80:
                    5e:4c:4c:a2:06:b7:0b:c5:62:c4:a9:73:9b:f0:d1:
                    12:0f:e9:a5:95:b7:32:2f:c3:4a:ab:ba:34:bb:9a:
                    2f:66:20:3a:6e:3c:68:9f:fb:04:cc:c1:c6:3a:67:
                    87:02:0a:7c:d3:43:6d:88:01:90:7f:9e:61:f7:37:
                    ba:e3:e6:c8:93:c7:a1:4e:91:6e:c8:46:bc:4e:3f:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:56:77:B2:C8:37:6C:5C:49:95:B9:36:7D:81:AC:0C:77:F8:07:AF
            X509v3 Authority Key Identifier:
                keyid:18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:16:94:e4:4e:1b:be:e5:08:c6:d3:e9:b7:d6:6a:40:b6:
         da:86:5b:cc:20:00:66:20:a9:a7:55:9f:04:b2:bd:1e:a2:b9:
         0d:92:23:12:a8:f3:94:97:d0:35:9d:3f:ed:5d:d4:f7:ff:5d:
         4f:ab:16:3e:ec:1b:d5:fc:72:9a:f8:43:1a:bb:23:b4:28:8d:
         f8:2c:ec:87:3b:93:6b:e9:e6:8e:08:1a:f7:80:88:9f:7c:b9:
         c2:42:2c:61:c6:5c:17:b5:7d:93:04:ea:a7:e9:74:d5:db:8b:
         4c:ce:3e:26:47:f1:be:4e:94:9c:b2:9e:46:c1:de:7b:e6:4c:
         ae:02:4c:5e:e6:4c:65:f4:46:76:ca:f2:04:15:bd:b9:fd:d6:
         8e:09:08:54:d9:77:64:6d:ec:c5:c2:1c:51:9b:92:2b:4c:49:
         0e:75:b5:53:41:05:5c:a7:10:b6:3e:82:84:5f:43:fe:5f:47:
         48:f8:62:9f:97:67:99:0f:ea:59:4b:9b:3c:22:81:06:b7:52:
         f8:b7:fb:50:2e:b0:56:0b:17:5e:48:6c:24:ca:a2:b0:a4:ae:
         89:85:ac:31:64:de:f7:e5:a7:04:97:5e:92:67:e0:21:9e:e6:
         7d:a4:27:81:ae:f1:62:53:f9:e5:50:66:e5:9b:20:68:ed:e1:
         e2:3c:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:02:12 2025 by rpki-client