Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
File:                     785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft (raw, json)
Hash identifier:          jjY+I87pyu8I9/CMVS2TpCZi63Uv52QpZU7CXir6qVw=
Subject key identifier:   4F:3E:0E:36:AC:17:B3:5C:83:7A:B5:25:1C:3B:45:55:CA:AB:06:28
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       24AAC04409CF6875C6F49CCD9FE2E3C5B38524BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
Manifest number:          02B5
Signing time:             Thu 03 Jul 2025 03:10:00 +0000
Manifest this update:     Thu 03 Jul 2025 03:05:00 +0000
Manifest next update:     Fri 04 Jul 2025 03:10:00 +0000
Files and hashes:         1: 323830343a313263633a323830303a3a2f34382d3438203d3e20323633343939.roa (hash: E9Fov4LRm+QbjL6Wh1C1f4V+hzzu8O7Au+3B9XIQmRM=)
                          2: 323830343a313263633a3a2f33362d3336203d3e20323633343939.roa (hash: kg8oe9S81gutxp+p5O1ZnJv10r86cMye2Fxh8cxNwg0=)
                          3: 323830343a313263633a3a2f33322d3336203d3e20323633343939.roa (hash: Isd50FLFxmfny6Tbkpy0metCBRwZ4joTCDmpwne5358=)
                          4: 785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl (hash: Jfm1hW6TF8eOMjQxamgty9LCad5yLBmmZrXMTW/npm8=)
                          5: 323830343a313263633a3a2f33332d3333203d3e20323633343939.roa (hash: rCtK/uXh7J8ybcySMJ2sgNsxEq1z2Eu0P0/+hY4gXyk=)
                          6: 323830343a313263633a323030303a3a2f34382d3438203d3e20323633343939.roa (hash: f2axc9NmbwwbtMomf1tyzIEV4Z3F7+8xYOQbKsgUZkE=)
                          7: 3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa (hash: sXW/9ybIn9TuU3Ud4tZ+E/1zXutuOac3KC7b8Z98KEE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:c0:44:09:cf:68:75:c6:f4:9c:cd:9f:e2:e3:c5:b3:85:24:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jul  3 03:05:00 2025 GMT
            Not After : Jul 10 03:10:00 2025 GMT
        Subject: CN=3082010A0282010100EA675EF4A0E57F7CCAD085B36B2F6CC8B8C8AD7632D6F22AE9F45C1568631497B0BDFF268792F6AA8787C5575FBD8B9A1EB99758F6532EFBB114EDADD11C43EF733ECC134ADC92A9C5BA6055DF61B68E6FB5D3419946BD270C3BEA70DFC496B994DA68FF803DF6DEAFF517C5C8429263C47647CBF24288F936949CC477B630632710EA02E2276C77F61B26C5FDC9C3F8510704ADE62A1D5DE7B3D63E4A0FC468D855B8B4B84CFF6E353825AAC67E4C5F949E1311A2E84D8468236F7A9D0850C9B0EBE6F77F482C823811C5E0609344627C7EC1469557E45F0F5E538D698CACCF7FC74EADBF5B01C78F16FCA1726DD3EC25B4B031D1037239D81EC383EBEEE8550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:5e:f4:a0:e5:7f:7c:ca:d0:85:b3:6b:2f:
                    6c:c8:b8:c8:ad:76:32:d6:f2:2a:e9:f4:5c:15:68:
                    63:14:97:b0:bd:ff:26:87:92:f6:aa:87:87:c5:57:
                    5f:bd:8b:9a:1e:b9:97:58:f6:53:2e:fb:b1:14:ed:
                    ad:d1:1c:43:ef:73:3e:cc:13:4a:dc:92:a9:c5:ba:
                    60:55:df:61:b6:8e:6f:b5:d3:41:99:46:bd:27:0c:
                    3b:ea:70:df:c4:96:b9:94:da:68:ff:80:3d:f6:de:
                    af:f5:17:c5:c8:42:92:63:c4:76:47:cb:f2:42:88:
                    f9:36:94:9c:c4:77:b6:30:63:27:10:ea:02:e2:27:
                    6c:77:f6:1b:26:c5:fd:c9:c3:f8:51:07:04:ad:e6:
                    2a:1d:5d:e7:b3:d6:3e:4a:0f:c4:68:d8:55:b8:b4:
                    b8:4c:ff:6e:35:38:25:aa:c6:7e:4c:5f:94:9e:13:
                    11:a2:e8:4d:84:68:23:6f:7a:9d:08:50:c9:b0:eb:
                    e6:f7:7f:48:2c:82:38:11:c5:e0:60:93:44:62:7c:
                    7e:c1:46:95:57:e4:5f:0f:5e:53:8d:69:8c:ac:cf:
                    7f:c7:4e:ad:bf:5b:01:c7:8f:16:fc:a1:72:6d:d3:
                    ec:25:b4:b0:31:d1:03:72:39:d8:1e:c3:83:eb:ee:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:0E:36:AC:17:B3:5C:83:7A:B5:25:1C:3B:45:55:CA:AB:06:28
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:76:cc:53:44:60:dc:5d:7a:df:26:6b:e5:98:41:3f:8a:
         8e:ea:5f:d1:c6:a7:19:4d:ac:2f:55:00:35:fb:39:57:63:85:
         1f:bf:60:42:87:cb:2c:57:d4:0d:21:86:f5:ab:77:e3:6a:91:
         93:02:86:ca:d2:3d:3d:b6:01:e8:a2:cf:b0:c6:b5:a0:b9:13:
         3b:5f:d0:a8:ff:25:4c:72:a5:e8:89:b6:75:bb:0e:60:8e:d5:
         c5:b5:34:b4:01:e1:c6:61:95:77:cb:d2:a7:fe:74:98:d4:12:
         d3:b7:f5:93:e4:3d:18:3a:c6:3e:1b:1b:5a:e3:b4:d5:ad:c9:
         ba:1a:5b:02:da:6e:15:d4:22:45:a9:55:02:ad:f5:34:b6:5d:
         a2:a8:40:57:a5:d9:bb:d3:31:05:fd:e0:a5:68:57:d1:9c:d1:
         9e:64:cb:d1:f5:1a:5d:08:28:ea:f1:97:e1:1d:36:92:f7:2e:
         8a:b0:33:38:b0:8e:68:4a:55:2e:d9:8e:fd:86:b7:4d:2e:a5:
         10:f1:43:78:69:b6:d2:46:dd:97:3b:ff:90:6f:95:d2:d1:00:
         4b:d5:43:77:e3:aa:67:4a:ee:27:bb:d2:d1:01:8f:3f:54:ea:
         22:4b:74:f3:12:c2:a8:7b:7c:ae:ef:89:e0:3f:41:70:1a:66:
         ec:be:a2:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:01:02 2025 by rpki-client