Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
File:                     32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft (raw, json)
Hash identifier:          YUcdyRChW1bNMFUqfRPrS97omj0zxK7e54taeKghqck=
Subject key identifier:   E9:07:E9:C4:71:E1:57:DD:E3:6E:D6:34:2A:73:E0:98:E9:EA:40:18
Authority key identifier: 32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0
Certificate issuer:       /CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
Certificate serial:       5CDEF43CF3598F77937B50588CA8C0A7383FBD17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
Manifest number:          0121
Signing time:             Mon 30 Jun 2025 10:53:00 +0000
Manifest this update:     Mon 30 Jun 2025 10:48:00 +0000
Manifest next update:     Tue 01 Jul 2025 13:44:00 +0000
Files and hashes:         1: 3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (hash: rop4d3c5H1BlFCl8sb/JrVZsMIWJYPAeE2mZAUHcq/Y=)
                          2: 32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl (hash: XbHoVhlTD0kcntC1ndGUH6J2/8R/Z8+Y9L8tiLAGVog=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 13:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:de:f4:3c:f3:59:8f:77:93:7b:50:58:8c:a8:c0:a7:38:3f:bd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
        Validity
            Not Before: Jun 30 10:48:00 2025 GMT
            Not After : Jul  1 13:44:00 2025 GMT
        Subject: CN=E907E9C471E157DDE36ED6342A73E098E9EA4018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:6e:26:2a:b8:81:da:b7:cf:17:d6:c1:09:
                    07:1e:cf:2b:9b:f5:35:a2:4c:4a:7b:c5:b9:03:98:
                    8c:c3:bb:6c:07:bf:e7:1d:04:8f:cf:1b:77:ed:f6:
                    d2:5a:96:c5:b4:29:e0:e5:66:22:c1:2d:de:da:34:
                    20:77:28:5f:2b:57:75:35:7a:44:7c:bb:bb:99:6d:
                    29:93:d8:41:2a:82:74:37:56:ce:b1:80:ea:41:df:
                    70:2e:67:05:5d:d4:62:e9:45:80:49:f8:d5:38:17:
                    39:6c:49:bd:cd:82:d1:7c:5f:cd:bd:55:0f:a9:f3:
                    0f:b2:19:96:2e:f3:40:e4:5f:77:ee:eb:6e:1f:4b:
                    62:9b:85:0f:c4:f0:7e:a1:a8:d2:a3:cb:49:3f:3b:
                    fb:c3:a6:b4:1f:a4:76:62:59:70:01:09:59:dd:73:
                    b5:8c:45:c8:70:1f:75:82:30:a0:ce:cd:d8:bf:cf:
                    17:be:25:78:eb:d7:e9:e8:1a:9a:1d:3f:64:da:21:
                    2f:ee:f0:bb:40:b1:e5:32:3f:39:22:a4:dd:ea:a0:
                    b8:1e:90:49:9f:60:1f:11:e4:b2:24:f6:da:6a:ab:
                    7f:60:d0:56:88:9c:22:17:01:bb:c1:e2:eb:6a:9d:
                    de:df:d0:d4:d5:c2:ec:60:c0:a2:79:84:e4:51:9e:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:07:E9:C4:71:E1:57:DD:E3:6E:D6:34:2A:73:E0:98:E9:EA:40:18
            X509v3 Authority Key Identifier:
                keyid:32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:52:90:54:60:0d:20:c6:bf:b9:2c:3f:cc:cb:6c:03:0a:
         c2:a5:71:6d:49:f5:c1:ed:c0:74:ea:f8:8b:8e:6a:56:4b:87:
         f3:fb:1a:48:4d:f9:79:c5:ab:be:c8:70:3e:13:04:9c:e0:05:
         7a:05:48:37:cc:f9:68:07:38:84:47:1c:1c:89:c9:bf:b2:62:
         40:1d:a9:e7:be:ab:4f:5a:d5:ff:16:af:ea:54:82:25:e3:cb:
         d9:02:37:30:21:96:d5:64:b7:93:ac:53:ec:a7:b1:3a:ea:47:
         de:e1:62:ca:dc:18:0a:49:63:77:4d:1d:bc:7e:aa:88:02:c8:
         80:18:6e:56:6f:06:6b:70:09:98:e0:77:e1:4f:d2:f7:b1:c9:
         15:76:fc:df:ff:84:dc:ba:f1:3e:d0:3b:a5:75:48:1b:86:27:
         91:56:ea:05:44:21:c8:66:88:e8:f2:ca:fa:79:87:2d:6b:a2:
         f8:e2:24:e3:79:e5:f1:75:5f:ee:a6:29:fd:4d:ee:35:3e:72:
         22:6d:69:5d:f4:67:6c:cc:89:77:21:bd:6f:c3:8d:6e:04:08:
         56:1c:63:bd:b3:0e:ad:08:01:1a:51:7b:aa:79:ab:73:96:94:
         83:4c:1c:e6:8c:1d:6c:bb:f5:4b:67:fc:de:6a:11:e0:ea:3a:
         c5:27:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:59:07 2025 by rpki-client