Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
File:                     9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft (raw, json)
Hash identifier:          GNefZVoXAEbH3o/+0WjkCvZ4ZcwG8QzqUYTkPuRDFIg=
Subject key identifier:   DF:47:23:FA:99:B0:02:DF:70:AD:44:4A:1B:9C:3F:B9:07:BF:38:6E
Authority key identifier: 9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7
Certificate issuer:       /CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
Certificate serial:       4C8BB94E23FFCB0C7E5B4E73FC882E63A7A8F3A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
Manifest number:          73
Signing time:             Fri 22 Aug 2025 18:26:56 +0000
Manifest this update:     Fri 22 Aug 2025 18:21:56 +0000
Manifest next update:     Sat 23 Aug 2025 21:02:56 +0000
Files and hashes:         1: 34352e3233322e38362e302f32332d3233203d3e20323731323534.roa (hash: BCpTeNeXQT1EfTeFL+azl+e6UrL6wbW9CppwvvbgnPc=)
                          2: 9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl (hash: idpvhXV7FM2Ip1o9vfqbN4DPsK5E7BNe53bXKA0xyI0=)
                          3: 323830343a373839633a3a2f33322d3332203d3e20323731323534.roa (hash: mbiljivRQx8iMNNvSKPbVGsfe/yI75cxkBJOMpgTbsk=)
                          4: 34352e3233322e38342e302f32322d3232203d3e20323731323534.roa (hash: 4llxrZQMqb9Kf3CZxYAurGfSgLAZxRbGkZ3i34Y0i8c=)
                          5: 34352e3233322e38342e302f32342d3234203d3e20323731323534.roa (hash: Ox3gkWdk5DFjWVNeLugWW5jte/MOdiHqIifU9RFpraE=)
                          6: 34352e3233322e38342e302f32332d3233203d3e20323731323534.roa (hash: UKx35fmxi9JfkNyS1Z7JJ73s8up2qsRMi86ZPKe0r8o=)
                          7: 34352e3233322e38352e302f32342d3234203d3e20323731323534.roa (hash: KWtyN99uRkdP5QmZxLBrmQICjrve0tAd8gA6/GzFIzg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl
                          rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 21:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8b:b9:4e:23:ff:cb:0c:7e:5b:4e:73:fc:88:2e:63:a7:a8:f3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
        Validity
            Not Before: Aug 22 18:21:56 2025 GMT
            Not After : Aug 23 21:02:56 2025 GMT
        Subject: CN=DF4723FA99B002DF70AD444A1B9C3FB907BF386E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:0a:b8:d5:19:21:8a:c8:e9:4c:d0:d5:74:
                    a2:91:d2:31:a1:3a:46:83:d5:45:ea:df:e1:9b:4c:
                    ce:5c:22:dc:d6:9e:33:d1:d2:57:f3:43:86:e2:8c:
                    ca:d8:1d:a4:ce:cb:f1:36:f3:ef:3f:50:69:11:dd:
                    94:7c:e3:7b:cc:6d:a2:d0:c8:16:61:8e:01:77:4b:
                    45:0e:e0:57:02:26:24:41:eb:ad:4f:ef:04:15:52:
                    ae:48:84:cf:91:6e:98:bf:42:83:5d:09:bc:4d:6c:
                    ee:98:7e:a0:7b:99:d8:52:65:7f:f8:85:71:e1:f4:
                    82:ce:97:40:51:a7:39:f7:0d:ae:f5:9b:93:22:36:
                    9e:43:27:bd:9e:71:c3:75:8f:36:74:f5:2e:9a:22:
                    ef:78:59:01:55:18:e7:e3:74:91:69:ca:bd:8c:36:
                    71:bd:b9:9a:df:88:b7:72:c2:04:91:4c:c4:d7:5c:
                    ca:92:80:e0:db:33:c6:28:65:78:41:7b:dc:91:da:
                    a2:57:99:93:13:a7:47:f8:45:ad:a1:e4:e2:ac:62:
                    b5:f2:f0:aa:4b:cc:9e:da:8f:e2:cc:4b:6a:b2:44:
                    85:0a:3b:e4:c5:ca:d3:1e:cb:35:a8:b6:e7:2c:80:
                    aa:8e:97:39:3c:7e:c3:01:61:7c:ae:f9:86:b6:4c:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:47:23:FA:99:B0:02:DF:70:AD:44:4A:1B:9C:3F:B9:07:BF:38:6E
            X509v3 Authority Key Identifier:
                keyid:9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:b0:14:5e:0f:e6:cc:c8:d5:78:23:a3:43:5c:14:b5:d8:
         cb:ed:d7:b9:6e:32:94:1d:95:c5:7c:46:5b:f8:f7:4f:ea:23:
         c4:86:86:ec:31:ad:43:e4:0e:d2:21:d7:19:fa:ed:ff:5e:37:
         d9:36:0e:31:69:f9:c2:5e:af:06:18:4c:a5:8e:56:4e:7c:4a:
         12:b9:e9:0a:fe:d2:ac:b0:3f:9a:b0:77:de:ba:1e:ab:6a:87:
         68:85:79:1a:ea:c9:0a:a5:31:0a:e1:58:6c:9f:df:44:49:8d:
         ed:ce:1d:65:5c:24:4d:33:b4:ad:d8:1a:de:87:7f:fe:82:e3:
         f7:e4:98:0d:4b:b5:a4:8f:20:09:0a:67:82:33:20:44:4c:15:
         ec:76:05:7c:d3:f9:56:b3:bc:6e:82:60:16:80:30:e9:89:b4:
         a5:82:25:62:a2:4e:0f:5f:5e:e7:83:42:33:79:6a:3f:fe:d4:
         94:ed:55:82:d9:c7:38:a0:18:4e:5b:02:da:79:ee:01:98:23:
         8e:bb:94:fd:ca:37:0c:d6:8e:42:51:33:f4:17:69:df:b8:b7:
         a1:66:da:f4:42:f4:f5:e3:ea:36:1e:0e:c5:6b:be:e3:63:6a:
         83:72:27:9d:b8:4a:fa:05:c5:be:c8:e4:e7:9d:40:95:fc:1b:
         c8:5f:c8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:50 2025 by rpki-client