Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
File:                     B87E403FD04360E1BA519D841853FF5C9E675A23.mft (raw, json)
Hash identifier:          8zcId0FeYqsLOD2QhimkoVd2EuO90PP+ouRsSat4468=
Subject key identifier:   99:28:28:E8:47:80:96:54:34:F8:FF:5B:65:FD:55:DA:6A:A1:19:75
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       648C2D6B3D159F5BEB3818D73ED1008D06245F1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
Manifest number:          025D
Signing time:             Tue 01 Jul 2025 22:30:00 +0000
Manifest this update:     Tue 01 Jul 2025 22:25:00 +0000
Manifest next update:     Thu 03 Jul 2025 00:11:00 +0000
Files and hashes:         1: 323830343a3161633a3a2f33322d3634203d3e203533313735.roa (hash: hthaHQ1W4Hhi7UR8B+WN+HOaWbENvNu2yu6xV3d/KEc=)
                          2: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (hash: w0owl7DF+mAIOGXYpwnTswecX/S7RFKkX0sboH3wAh8=)
                          3: 3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (hash: kmPbp9SIMWkNQPWpAWYgRGrTVxQTvYRtPinUblfqjEI=)
                          4: B87E403FD04360E1BA519D841853FF5C9E675A23.crl (hash: QtIduNos/ezzz7fPDAj4tuiavQE9ATZvsq/i3d6hv6U=)
                          5: 3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (hash: 8clL3fZ/UcUBet/ByyqI0tz/CBKDL/m9LuvOyhWETW0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 00:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8c:2d:6b:3d:15:9f:5b:eb:38:18:d7:3e:d1:00:8d:06:24:5f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: Jul  1 22:25:00 2025 GMT
            Not After : Jul  3 00:11:00 2025 GMT
        Subject: CN=992828E84780965434F8FF5B65FD55DA6AA11975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6c:94:4c:86:7e:d5:4c:6a:32:92:a7:21:55:
                    c5:63:2f:e3:55:45:b1:17:4c:b2:74:a1:74:dd:a7:
                    fd:a9:bc:59:49:86:af:ca:ca:a3:4c:80:8f:e6:f5:
                    38:c0:11:98:a9:6c:6f:5c:76:64:59:b6:0d:7c:60:
                    9b:a3:89:c1:e3:84:e7:6b:dd:8c:9f:bb:be:00:69:
                    f9:d3:9d:01:5f:3d:99:e2:08:fc:9e:26:2a:7e:47:
                    6f:45:e2:45:a1:3a:af:6c:db:d9:2a:54:82:1c:f2:
                    54:c2:40:64:c5:91:17:55:9c:ca:22:33:38:f4:e2:
                    9d:88:e6:13:ac:25:7e:31:a0:af:dc:44:ce:74:40:
                    07:24:04:24:2b:fe:f8:2c:03:53:a2:3e:4b:c8:86:
                    f2:a5:96:35:b9:c3:d8:a0:2d:af:bc:41:b9:9c:bc:
                    10:b0:ea:1c:cc:92:25:9f:7f:b1:7b:0a:c8:c2:9a:
                    cc:25:da:87:92:0f:e0:37:ea:a7:60:59:c5:a4:58:
                    ef:28:2f:b9:d4:e5:5d:ab:1c:46:4f:a6:c2:26:f6:
                    32:ca:3a:28:f2:bb:f6:a1:f4:fc:7d:ba:c2:89:51:
                    25:42:93:81:94:fb:6c:aa:5a:2c:6c:7b:a8:b2:5b:
                    bb:d5:80:e2:80:29:d8:73:7a:dc:d0:17:5d:aa:eb:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:28:E8:47:80:96:54:34:F8:FF:5B:65:FD:55:DA:6A:A1:19:75
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:55:34:36:7d:8e:78:ce:8f:5a:ed:94:ff:cf:76:9a:42:
         e7:fd:5c:4f:20:df:e1:97:2e:b0:ae:54:89:29:39:ff:92:91:
         87:f2:cc:f0:87:51:1a:85:77:dc:ed:99:47:c2:53:82:91:00:
         71:e4:71:c6:e7:ff:85:b3:b3:63:51:9f:a8:aa:21:61:e9:5e:
         47:46:3c:f9:23:99:18:ce:6c:b8:e5:12:e3:71:e7:e1:14:45:
         50:04:3d:41:4a:8e:e7:b0:0c:60:3f:be:77:c0:83:d0:1c:2a:
         93:e9:ac:21:bd:71:4e:b1:92:54:c4:63:d9:f8:7c:9f:ba:c6:
         ee:0c:95:19:c6:19:6b:eb:8a:0b:90:d2:7f:7d:2e:5e:10:1d:
         75:d7:98:11:73:c4:56:31:1f:e4:59:63:a3:87:9a:00:e9:a0:
         1b:f6:72:04:5f:7a:6b:cf:5e:53:0b:00:5b:6b:d3:36:04:5f:
         2a:84:66:c1:f8:c5:d7:80:bd:1c:ba:9a:74:d3:d1:2c:c8:88:
         bb:c3:f8:6a:3d:d3:3a:ab:73:8f:5b:e8:dc:ee:c1:64:79:df:
         be:a5:2a:4e:f2:71:68:f9:56:b9:e5:ba:29:c4:5a:8d:ff:30:
         5d:83:0b:db:16:3c:15:66:8a:1c:0f:f0:de:93:e1:e2:20:b9:
         23:1c:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:28:18 2025 by rpki-client