Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          jiDq5rcCKE+ygchd/7wIcquhDWaOA/aVHZ5qbQnhW0I=
Subject key identifier:   EF:9F:A1:54:D8:D4:9F:D8:18:3A:9D:F3:E8:B3:DA:8D:C8:F4:11:75
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       1A7DB59ACA3CC6B5EC0214281D6563DE80D3B8F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          025A
Signing time:             Wed 02 Jul 2025 13:50:00 +0000
Manifest this update:     Wed 02 Jul 2025 13:45:00 +0000
Manifest next update:     Thu 03 Jul 2025 15:10:00 +0000
Files and hashes:         1: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: WisQ1JL2FAAn8kaZqf230Nksj1G0DtPacu/DRaDBIZA=)
                          2: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: G0SWK+jmKHTG0ctDczQrKf6TxfRS64Q9op8j2QG1tjc=)
                          3: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: U2eH9NqttfTafC3EBRQM8TEtkvvFsyjejY/7ctga6eE=)
                          4: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: sBpa4s503VeZUYCOt+l0MWz+VMtYiBSEsylwD1QPHFw=)
                          5: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: TO6Eb49up/wmLJo6dXO2I0VlV7zMLlLB/b9vOIm4NVc=)
                          6: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: 16TbMKZdTZfIkFgwAstb/ibbX/bvn7/DJ8wvTNDWTQU=)
                          7: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: s33PSXpxa+feIqxQQLgD8WhWjRYj/Ljx3lAloc84cEQ=)
                          8: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: IvMpdw39E7yHBfdNRqRjqhm3M4HxFQsnyvqHbu0ZRt4=)
                          9: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: noH/6wQklcBAaxEAf8opJx4ehieMk2GZ8QTzCrekJZE=)
                          10: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: Pcjq5j9L01oqldGDpHJ1/0Fhghry022+OEJwmG3qykg=)
                          11: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: r+oC/tP9cVlGYdiKnaYO/EjxupaEl0ebrhGSL23ifBg=)
                          12: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: sXeIiddgIsbS+sATicLgnnXS6mGcpy75xY5FDmKS1hQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 15:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7d:b5:9a:ca:3c:c6:b5:ec:02:14:28:1d:65:63:de:80:d3:b8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Jul  2 13:45:00 2025 GMT
            Not After : Jul  3 15:10:00 2025 GMT
        Subject: CN=EF9FA154D8D49FD8183A9DF3E8B3DA8DC8F41175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:06:0f:79:ed:01:87:e9:65:d6:9d:1a:14:
                    cb:28:a8:75:b2:74:b4:35:03:f4:bb:45:8b:86:fa:
                    20:03:d4:68:e5:e1:83:0d:40:91:22:ea:23:5e:23:
                    f8:72:7f:4a:b9:c3:c3:97:dc:20:32:8e:ae:94:32:
                    01:ee:13:62:ac:ec:7b:a8:d9:3e:31:45:6c:93:5e:
                    8d:5a:72:7b:97:77:57:14:a3:08:10:56:63:ea:0b:
                    af:65:e5:04:57:6a:37:e1:98:c4:cd:98:9f:b3:6f:
                    ac:81:40:3d:14:9f:4e:fa:61:74:71:91:0e:6a:ed:
                    7c:bc:51:0e:0d:bb:22:ce:da:eb:a4:76:65:d5:9e:
                    3f:a6:a7:da:30:29:ad:d0:d7:9c:63:1e:3e:05:30:
                    00:03:15:88:63:b8:cf:d5:2c:c9:a1:57:fc:73:55:
                    b0:e6:28:76:95:a2:7d:fe:d0:5b:8b:95:3c:ad:a9:
                    43:6a:63:1d:4c:df:aa:12:3c:90:c5:a6:46:53:4d:
                    94:fd:6c:2f:c1:e5:da:59:50:a4:38:bd:25:21:e5:
                    a9:9d:4d:14:ee:df:31:1f:ee:e5:e5:34:8c:c0:98:
                    18:02:9f:33:fa:17:c1:0c:5e:55:dc:07:ee:e4:a8:
                    bb:37:15:c1:ba:96:9e:dc:98:0d:fd:d6:e3:ff:cd:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:A1:54:D8:D4:9F:D8:18:3A:9D:F3:E8:B3:DA:8D:C8:F4:11:75
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:42:5f:37:ec:7d:0a:b3:24:7c:ba:05:9f:32:a2:eb:04:35:
         b4:4a:71:92:ed:3a:1f:d0:c1:8b:b0:95:fc:d3:de:93:9a:7d:
         30:dc:4a:8c:24:f9:5c:28:93:a6:2a:d8:01:9d:96:74:df:cf:
         a2:ff:d1:40:42:83:01:fa:8b:53:61:14:e7:23:36:41:49:75:
         55:da:91:74:e1:7f:40:3f:1d:4d:19:af:0d:01:48:63:b5:74:
         23:6b:8e:e1:06:42:ef:32:68:30:c1:c3:10:eb:6f:f4:50:a6:
         82:da:1c:44:59:1d:71:84:0b:97:c5:d7:a8:f2:0d:ce:2d:0d:
         5e:3e:26:75:e9:46:23:f0:68:51:40:8f:20:1f:65:3c:b6:80:
         16:8b:29:00:92:50:ce:3a:48:66:a1:d4:d5:52:6e:7e:83:ca:
         fb:6c:73:a5:5e:db:3e:b2:6c:a2:9d:e3:e4:d4:3c:45:8b:85:
         87:db:bf:68:26:56:06:cc:1a:1d:40:12:14:91:e1:9c:13:23:
         35:fc:3e:85:af:6a:0e:ee:18:28:0f:f7:6c:c7:d7:a7:53:fd:
         86:b8:6a:36:8a:72:47:67:46:36:37:b9:dd:48:5e:ae:54:25:
         18:ed:1d:c4:f1:02:1f:9b:17:32:98:83:93:9a:50:74:8c:8e:
         90:75:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:04:26 2025 by rpki-client