Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
File:                     2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json)
Hash identifier:          EQcmtiZ4yqGJQ0cqWUEYNRvCEF4N4zs3LIaMIIC8a4o=
Subject key identifier:   25:97:A3:17:94:A5:A7:CC:11:53:A5:B4:E4:44:89:03:23:85:90:05
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       78363F9C14D57A8321DFB75FE42BF55C1B2284E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
Manifest number:          025C
Signing time:             Sun 29 Jun 2025 20:02:15 +0000
Manifest this update:     Sun 29 Jun 2025 19:57:15 +0000
Manifest next update:     Mon 30 Jun 2025 23:32:15 +0000
Files and hashes:         1: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: pAt7PMuCKlXDwWkqDTMuFQrcxy1wO5j9TBbcPO1yU28=)
                          2: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=)
                          3: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:36:3f:9c:14:d5:7a:83:21:df:b7:5f:e4:2b:f5:5c:1b:22:84:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Jun 29 19:57:15 2025 GMT
            Not After : Jun 30 23:32:15 2025 GMT
        Subject: CN=2597A31794A5A7CC1153A5B4E444890323859005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:59:f9:6d:47:ad:a4:13:d2:8f:7d:12:19:
                    76:c0:79:a8:64:0b:bb:b1:73:85:41:6c:08:8f:aa:
                    3a:8c:46:58:1f:69:4b:f3:ca:34:04:4b:a2:f2:cf:
                    9e:6e:53:6b:f1:a3:7e:36:17:48:44:45:1f:63:81:
                    6a:87:a0:41:f8:72:1a:8d:20:43:a2:26:31:b0:07:
                    2f:71:95:1d:c9:ac:21:86:db:e2:a5:48:f5:0e:d1:
                    c3:f1:0e:9e:07:48:7a:01:a3:ff:91:1c:c0:43:92:
                    f0:31:de:e4:38:49:fd:64:d3:bb:da:42:9a:0c:75:
                    30:8a:98:3c:1e:77:44:b2:d7:81:5d:02:b9:72:40:
                    7f:4b:14:d9:fb:57:7c:97:51:54:ff:20:0b:64:75:
                    6d:93:b7:ae:d9:c6:0f:f4:6b:6b:9a:12:3c:5c:70:
                    a8:d5:2c:f0:64:f5:99:8a:6d:73:b3:a9:c1:09:30:
                    7f:bf:1b:18:b9:4e:67:7e:c8:aa:3b:c6:8c:97:cf:
                    9b:14:5a:f3:ba:60:96:80:ab:71:ac:b3:41:6f:50:
                    98:6f:1d:b0:5a:d0:08:c1:32:16:5e:aa:45:b3:ab:
                    e6:22:03:fd:75:03:fb:af:58:0e:ea:3c:27:02:cf:
                    0f:40:83:28:25:3c:d5:81:b9:69:b7:c1:e6:8e:b4:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:97:A3:17:94:A5:A7:CC:11:53:A5:B4:E4:44:89:03:23:85:90:05
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:02:37:c8:bf:e5:ef:d9:68:ea:23:d9:dd:43:f2:9f:1e:da:
         f8:35:a5:a7:2e:97:3d:d7:52:08:88:21:7f:28:d1:d8:34:aa:
         66:25:37:ee:c7:3a:2c:23:ed:98:99:41:a6:c0:9b:ed:f7:b9:
         26:8b:db:e4:50:46:10:6f:9f:6b:69:d6:d0:13:f3:10:4f:f9:
         fe:6d:29:22:2b:76:98:ac:1c:1e:8b:ae:2a:d7:f6:3c:3a:e2:
         19:05:4c:a4:89:37:57:b2:7d:16:1d:ba:4b:ce:3d:89:b6:fb:
         3a:1d:b8:a6:93:f0:7e:39:11:9f:43:c1:ad:6a:99:ef:1c:d5:
         e5:77:90:5c:12:03:b5:a5:5a:52:34:fc:2c:23:e6:aa:69:a4:
         1d:32:ee:cf:58:cc:eb:40:5f:76:4d:99:10:cf:0b:70:74:20:
         0b:47:95:52:28:bf:a9:e4:3f:50:91:fa:0f:02:b8:05:4e:34:
         0b:af:e1:53:03:03:96:d2:0c:31:5a:63:8e:7e:e8:16:3e:82:
         1d:0e:a7:87:1c:3b:a2:f2:df:05:7d:00:3d:9d:f4:d3:2f:d4:
         1c:99:79:c6:5c:80:60:af:af:30:f9:f5:64:c4:7b:42:3a:c6:
         14:54:76:b8:4a:d4:47:6d:d6:c3:17:bb:20:03:4b:ea:d2:be:
         fe:09:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:06:43 2025 by rpki-client