Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File:                     2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier:          F+OzsJwV6igWo0yOIWuhVMft3NiD+3BPH5WF0qTe1ho=
Subject key identifier:   41:FD:84:A7:E3:E1:80:7F:CC:E5:D1:EB:7A:8D:91:93:75:5A:E0:0B
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       27E7642084903E28011C684AC10D80F60B28BA84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number:          0138
Signing time:             Wed 02 Jul 2025 04:27:47 +0000
Manifest this update:     Wed 02 Jul 2025 04:22:47 +0000
Manifest next update:     Thu 03 Jul 2025 07:48:47 +0000
Files and hashes:         1: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: 5z/9B2lDD9Y2z6ddTWA/M1t9+scwLoPNHb2Cu/S9FHo=)
                          2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: bjB36eXT1omwtQwFXGbvPepzMnB1MFoBrlOgByGOe8o=)
                          3: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: pQEQlRwKVVCvE7av7lhBHP+xdFaTf6Yo50+yHZSAJFg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 07:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e7:64:20:84:90:3e:28:01:1c:68:4a:c1:0d:80:f6:0b:28:ba:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Jul  2 04:22:47 2025 GMT
            Not After : Jul  3 07:48:47 2025 GMT
        Subject: CN=41FD84A7E3E1807FCCE5D1EB7A8D9193755AE00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:a0:fc:31:ae:99:78:27:9f:6c:b5:76:0b:
                    39:42:f8:61:42:de:6d:0a:c1:5f:92:19:56:a0:13:
                    2f:07:18:f5:10:9f:32:3b:8b:26:35:0e:6a:2f:82:
                    6a:2d:49:a2:bf:0b:d4:b5:5e:c8:cb:b5:9c:83:7a:
                    08:af:ea:41:bd:88:c3:d7:17:18:2e:67:60:89:41:
                    f0:a8:fb:e4:3c:42:f8:9a:a8:31:55:db:08:f4:e7:
                    ea:f3:70:f0:ba:2a:5d:10:36:12:f9:f1:28:06:2f:
                    0c:f7:1e:b8:04:27:ba:7f:8f:45:2b:82:21:70:e1:
                    75:35:db:c1:93:a0:40:1e:bd:fc:67:ab:b2:b1:0d:
                    ff:ad:b1:78:78:79:da:97:71:b4:55:ec:d5:82:c4:
                    28:87:3d:28:33:9a:59:5f:25:51:5e:ae:57:78:82:
                    ef:22:d3:2c:f9:70:e3:77:64:1c:96:31:ef:9b:26:
                    90:76:e6:06:9c:0b:7a:ac:76:c6:57:1b:8e:b8:9c:
                    82:bb:e8:07:7d:9f:f6:3a:3f:d4:90:dc:b7:47:f6:
                    6a:d1:86:6d:e9:94:77:3a:b5:e9:f6:26:38:09:24:
                    a2:0d:3b:d3:9a:a6:ea:ee:f8:e7:fd:fe:37:12:40:
                    dc:9d:95:11:0c:d3:a0:da:8f:5d:88:8d:e8:67:fc:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FD:84:A7:E3:E1:80:7F:CC:E5:D1:EB:7A:8D:91:93:75:5A:E0:0B
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3a:20:2e:3f:cf:7b:da:f3:c1:92:fb:e3:33:da:be:72:81:
         52:43:60:57:6a:e3:db:3c:ef:b0:4e:37:b7:99:59:75:07:22:
         c5:a4:06:51:56:6d:cf:ad:1c:da:b2:03:2b:a7:bb:60:e8:aa:
         94:53:94:3d:e3:b7:e2:cd:8b:c7:51:dd:b8:73:72:69:5c:c8:
         e3:3c:b6:1f:45:da:8d:66:85:cb:77:2e:04:c6:9f:3f:5e:48:
         a8:0a:fa:8c:ef:24:d1:d7:16:65:d5:a6:3e:00:af:36:99:55:
         6b:a2:b4:df:3a:99:a6:9a:b4:bb:c3:65:f7:2f:ee:95:1e:28:
         d7:57:00:c5:1b:e1:bc:7d:e8:94:60:95:b9:77:78:aa:96:79:
         ff:99:28:f0:1e:74:8b:f4:48:3e:d4:d1:ae:b0:48:ef:22:7b:
         03:c3:9c:c4:14:cb:0d:b6:f6:fd:70:22:79:56:17:fd:3d:53:
         30:95:21:8e:c2:67:25:6e:8b:c6:17:d6:9b:02:2f:2e:dc:3c:
         29:ed:51:87:fd:89:e4:3b:be:d4:48:ac:df:df:8b:d8:c0:26:
         25:8c:af:b9:72:6e:dc:16:2a:38:06:66:d6:31:9a:ed:8a:0f:
         e6:f5:18:60:f0:c8:20:9e:56:87:ed:93:4c:9c:af:9d:dd:9e:
         76:f6:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:03:12 2025 by rpki-client