Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
File:                     5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft (raw, json)
Hash identifier:          aa8whIs2BCSRZY8RhmnUVnuiYedFniPlVjtInPhnSXU=
Subject key identifier:   B7:E4:DF:32:16:C9:EA:AA:97:B0:37:22:DB:45:17:F2:A8:02:C4:96
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       31E680C4BCB08361A1E8D41CADC6035EE1168A5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
Manifest number:          86
Signing time:             Thu 03 Jul 2025 09:15:13 +0000
Manifest this update:     Thu 03 Jul 2025 09:10:13 +0000
Manifest next update:     Fri 04 Jul 2025 10:52:13 +0000
Files and hashes:         1: 323830343a316131343a3a2f33322d3438203d3e203238313533.roa (hash: sICBEbPkhEpTj1NGD/5Ilx722zpX8Op3r4MzgNRxF1o=)
                          2: 3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa (hash: 51n3ayew2h/v7obVWbgYFaLOL9OhzyAWSOIqWxXONuY=)
                          3: 5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl (hash: PuUsb0Ynv2aMkFBP0Iv0FxUdn7afFqO5qvK8ZkAxUI4=)
                          4: 3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa (hash: /sqM7c+yfY3dj6gOKT1QCBbetiEWE4aTZ9+G4l1+RoA=)
                          5: 3137302e3233332e36302e302f32322d3234203d3e203238313533.roa (hash: I3Edz0N7BkPOy03876avlis+79tYwC4DD47mOHaDbCI=)
                          6: 3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa (hash: CijY/x6+D8joAqsuz8leADzcy10p8WZ0yiPQhbQPUfE=)
                          7: 3138372e36302e3134342e302f32302d3234203d3e203238313533.roa (hash: 2/hRqsuQ/FHgaSrA97sa0U5IEyEyB8zh1AVYNTassEk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 10:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e6:80:c4:bc:b0:83:61:a1:e8:d4:1c:ad:c6:03:5e:e1:16:8a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Jul  3 09:10:13 2025 GMT
            Not After : Jul  4 10:52:13 2025 GMT
        Subject: CN=B7E4DF3216C9EAAA97B03722DB4517F2A802C496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bc:be:22:af:3d:99:57:9e:24:b3:0e:eb:34:
                    29:98:73:b3:32:e0:ad:eb:b1:4d:1c:11:00:d7:7c:
                    ea:f6:4f:3f:8b:ab:d0:64:05:ee:61:0e:9a:01:4b:
                    40:38:f4:0e:16:01:d2:c8:66:d5:ca:b8:55:31:d0:
                    6c:6e:e0:7d:d3:5e:22:16:57:0f:f9:21:71:f1:5a:
                    1b:2e:dd:ec:66:64:45:29:7c:dc:03:64:1e:a3:81:
                    3a:20:6d:e6:03:4f:b4:42:ce:e6:69:d6:10:9a:84:
                    95:c6:50:30:11:c0:d3:41:9a:0e:71:5f:43:69:70:
                    01:00:54:6d:af:d4:2a:0b:b0:11:33:28:5c:e9:ba:
                    00:37:5e:67:f3:60:e2:8d:45:d5:d4:a1:5d:40:4f:
                    5b:1a:9c:fe:f4:0d:e3:12:0d:8c:03:08:f9:7e:af:
                    8a:88:52:28:b0:f8:7b:51:69:5f:8b:38:15:2b:12:
                    15:86:a2:de:7b:32:5b:6c:e3:fd:9b:53:7d:ac:17:
                    0a:4a:5f:65:da:a2:23:a8:73:1d:db:ae:e3:0c:0d:
                    0b:ff:49:f1:d7:66:ea:c3:ee:35:bf:86:4e:eb:a2:
                    96:cb:3d:f6:23:f6:60:f3:76:32:86:ad:cd:f6:1a:
                    c5:db:bf:be:a3:5b:c5:9e:f0:c2:e6:ea:2e:5e:05:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:DF:32:16:C9:EA:AA:97:B0:37:22:DB:45:17:F2:A8:02:C4:96
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:49:40:04:a2:63:4e:19:c5:61:25:1a:cb:d9:64:02:4d:83:
         63:fc:fb:a4:63:43:58:4f:65:62:4e:9b:d9:77:bf:83:40:cd:
         4e:a4:9a:7f:55:39:7c:42:df:7e:71:55:bd:f1:dc:f0:97:be:
         c3:53:0b:7d:eb:48:5a:3d:cc:e2:e7:84:09:8e:64:6b:48:00:
         a8:d6:17:55:8d:a3:1a:47:60:d2:f0:6c:20:50:ed:dd:df:ab:
         6b:17:bc:f9:f7:4a:10:95:53:8d:33:fd:6d:f2:c8:0e:34:7f:
         45:3a:b0:c2:2c:68:b4:7a:b4:72:4d:61:1c:61:ad:8c:08:df:
         8c:cb:12:d7:3e:1d:28:f3:52:7a:ee:a9:a3:a8:97:da:a0:4b:
         76:49:8b:87:4e:3b:8d:be:41:43:58:82:32:0c:ee:57:b6:2d:
         4b:7f:70:ec:24:97:b0:36:b7:ad:eb:43:e7:cb:02:27:39:7c:
         d2:ec:f9:90:61:cb:81:19:1d:b6:09:83:67:02:fd:e7:49:e2:
         d1:a3:03:51:fd:b4:05:69:e9:03:63:77:40:4c:66:c1:8b:ec:
         d8:80:8c:b3:87:2e:19:15:cb:3e:50:b4:e1:ee:bf:95:01:67:
         5a:cb:38:c3:86:53:1e:3e:d5:b9:c1:49:d4:32:a5:eb:11:5d:
         81:d3:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:31:32 2025 by rpki-client