Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
File:                     0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft (raw, json)
Hash identifier:          t7zpX34kF8RE4N2iQ88NGRM6PhczgvUwpBjZHbCe5i8=
Subject key identifier:   D6:3F:03:34:D6:A8:87:68:F2:9A:D5:C0:24:0F:A1:9B:6A:72:FD:AD
Authority key identifier: 08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
Certificate issuer:       /CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
Certificate serial:       35F48B748E8A9477DA51E9FF87433C373B4A0191
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
Manifest number:          025E
Signing time:             Mon 30 Jun 2025 21:03:09 +0000
Manifest this update:     Mon 30 Jun 2025 20:58:09 +0000
Manifest next update:     Tue 01 Jul 2025 21:44:09 +0000
Files and hashes:         1: 3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa (hash: E5qoBXr4oTY6QTX7EYkjyrfuGgD2aWcgq+lD1ik24wk=)
                          2: 0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl (hash: djCyX01y+/oMd0VMhccoGeoFzp/RB4syp3sd8wb05Hk=)
                          3: 323830343a333464343a3a2f33322d3438203d3e20323635343833.roa (hash: yLrtH58xC+1jIEbmKu34Mf1Eyz2Ki/HA5JUGdH+ENgY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl
                          rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 21:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f4:8b:74:8e:8a:94:77:da:51:e9:ff:87:43:3c:37:3b:4a:01:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
        Validity
            Not Before: Jun 30 20:58:09 2025 GMT
            Not After : Jul  1 21:44:09 2025 GMT
        Subject: CN=D63F0334D6A88768F29AD5C0240FA19B6A72FDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:ba:3a:2e:c1:8e:24:f5:c2:a9:1c:45:1c:
                    eb:d9:60:a8:b8:56:46:81:29:65:a3:49:a7:25:6f:
                    03:6f:62:df:fb:81:01:43:bf:06:0f:a6:9a:de:a5:
                    96:a4:44:3e:ef:75:f5:af:28:08:04:39:07:ac:c0:
                    cf:79:36:d2:9f:a3:7d:7b:65:e1:d8:9d:b2:fd:2f:
                    9d:c7:e8:f6:15:f8:3a:65:be:50:e3:ca:26:f8:cf:
                    81:21:46:98:6c:a9:c4:f7:6e:14:d7:aa:50:c0:28:
                    8f:91:c1:8d:6a:d3:ab:ba:a6:1f:78:04:ce:ae:ed:
                    20:c4:40:21:6f:0b:f9:49:0b:94:50:df:6b:1c:42:
                    10:c1:7d:81:0d:1a:f5:26:00:39:fc:66:bb:71:1c:
                    d6:93:ec:04:26:40:c1:60:6f:20:c5:5a:86:e4:ad:
                    c7:19:09:6c:9b:c0:65:be:ba:d1:4d:92:ba:2b:9e:
                    5a:f1:1e:4e:6a:26:5c:4b:91:ff:f1:d3:a1:93:63:
                    4e:d2:a3:81:f7:be:11:f0:c7:a3:64:b2:d5:50:a2:
                    d2:5c:2b:ab:67:11:58:ce:ad:87:e1:8b:bc:82:fe:
                    d4:ec:ac:da:db:ba:31:a0:bd:3b:48:12:aa:ea:aa:
                    2e:dc:08:1c:ce:18:20:c8:c4:e2:0d:65:c0:df:9d:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3F:03:34:D6:A8:87:68:F2:9A:D5:C0:24:0F:A1:9B:6A:72:FD:AD
            X509v3 Authority Key Identifier:
                keyid:08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:58:39:7d:98:17:86:07:39:cf:0e:d0:84:2a:51:7a:21:68:
         30:ce:39:0a:4b:f2:70:c2:71:c0:32:e7:83:ef:49:63:6f:b4:
         9b:b1:7b:ef:72:32:d2:75:7a:20:2f:27:0b:e8:8f:53:92:e1:
         16:ca:e7:c7:9a:20:bf:88:35:a9:0f:77:fb:93:36:65:c4:dc:
         18:32:e8:48:b6:d6:41:27:1c:37:74:81:07:f7:4f:f3:ef:06:
         a1:b5:e8:ba:08:ac:3b:9f:7b:6b:a9:2b:7b:87:89:2d:5f:8d:
         b1:e7:87:d2:ab:08:29:19:56:37:cb:9d:12:bc:61:ed:ae:cf:
         4c:71:11:9d:ad:db:4c:8e:4d:a5:f1:06:63:d6:98:7b:69:69:
         93:a4:a8:57:b2:3f:e8:52:70:cd:2c:31:44:5a:82:ba:7f:d7:
         a5:f8:98:5f:e1:7b:8a:bb:49:24:93:82:60:c8:f0:41:1c:5b:
         ec:45:d6:ab:1d:dc:a6:bf:51:40:6a:f6:ca:51:43:63:73:3e:
         73:8c:6d:27:66:d2:c5:aa:6b:c7:27:3f:ba:9b:34:03:71:15:
         dd:12:4e:7a:bc:9b:cb:52:4b:5b:81:8f:d3:59:e9:ac:14:12:
         17:e4:20:0a:28:0b:b4:ce:a6:b8:46:34:86:dc:52:8a:64:e6:
         1a:fe:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:31 2025 by rpki-client