Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
File:                     A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft (raw, json)
Hash identifier:          MUMp614UlToHMTIsciXCCSLUfxzFH9j1Djqn3yfcoek=
Subject key identifier:   30:DC:54:29:EC:95:2A:32:BC:5F:6E:EF:64:98:F0:0A:24:88:E4:AF
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Certificate issuer:       /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial:       48766DC797301309E3CD3D3486940BAAE978FD10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
Manifest number:          8D
Signing time:             Tue 01 Jul 2025 13:28:38 +0000
Manifest this update:     Tue 01 Jul 2025 13:23:38 +0000
Manifest next update:     Wed 02 Jul 2025 14:04:38 +0000
Files and hashes:         1: 3136302e3233382e3139362e302f32332d3233203d3e20323636353436.roa (hash: jDQr7Vy/GC/i1bUzerF31aTsDjwOvpDaAzddq4GQG0I=)
                          2: 3136302e3233382e3139382e302f32342d3234203d3e20323636353436.roa (hash: k8Ke8tFoRZm5hHkiOLF0NnXIx+QxK2c67zHjocogpbU=)
                          3: 3136302e3233382e3139362e302f32342d3234203d3e20323636353436.roa (hash: 2DoOY9mYVywZ99aIk/oCE51nzYi51wxX5o7bh+7UF2w=)
                          4: A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl (hash: 9JSjdG4maSakZok+kzSyhESjkxoa9UXpR3jL4zEzFnE=)
                          5: 323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa (hash: gWndqDf/KjLw2qVw3t8sxy0AXuV/rGY0gtWagTvEZGg=)
                          6: 3136302e3233382e3139382e302f32332d3233203d3e20323636353436.roa (hash: qZViEkemsxhB5be8H5ZKDrRpUYgNuKP91UeZOvXYiGM=)
                          7: 3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa (hash: joM+u7PORJdGnFjZhmPBlsrsIlNkPKAPY/Z0Gbc8cy0=)
                          8: 3136302e3233382e3139392e302f32342d3234203d3e20323636353436.roa (hash: +lxjnFCXMSWF9vPAaK5dgdxtbhD3l/h6X61omhb5gFM=)
                          9: 323830343a336461633a3a2f33322d3332203d3e20323636353436.roa (hash: 54yPWVcEd/+IMGDk0DqDvTN0qM4YMhlF9zE08MS4RT4=)
                          10: 323830343a336461633a3a2f34302d3430203d3e20323636353436.roa (hash: WZ+a2zrF8pWa6gpGZk7pXVOqwA2xYwdeadzMPtmSiV8=)
                          11: 3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa (hash: 5pvfWBzN2ChCEaHMyEP6wKg93FsVgWUXZdBfuF0of0Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 14:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:76:6d:c7:97:30:13:09:e3:cd:3d:34:86:94:0b:aa:e9:78:fd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
        Validity
            Not Before: Jul  1 13:23:38 2025 GMT
            Not After : Jul  2 14:04:38 2025 GMT
        Subject: CN=30DC5429EC952A32BC5F6EEF6498F00A2488E4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:09:f3:27:4f:62:90:c9:07:ba:e8:84:65:
                    41:b1:69:bf:f4:dd:ef:cb:78:e9:a5:c0:2d:8c:93:
                    d3:fc:42:d3:d6:3d:1d:b0:93:1d:d7:e2:a8:b8:be:
                    b0:02:12:bb:21:0b:88:b0:ca:05:12:ae:1c:4b:da:
                    9f:b8:80:a4:e9:7d:0e:85:ce:2e:40:5b:ff:02:7d:
                    9f:bd:06:5b:d5:f9:c5:72:83:6f:81:fb:cb:df:eb:
                    d0:0f:fc:46:79:a9:0f:a7:80:f2:9a:0e:19:8e:b0:
                    c1:29:5c:48:36:93:9d:b8:5a:90:a8:2a:69:97:88:
                    6c:64:57:fc:79:e7:82:f0:04:ac:ef:b1:40:27:bc:
                    b9:cf:9c:9d:d1:25:48:df:c9:7a:2f:1e:72:fd:42:
                    e1:7c:1f:8d:d8:f6:62:70:52:ce:1a:a6:6e:d6:3a:
                    95:c1:94:87:4d:4f:f1:a3:54:e2:39:65:2b:0d:84:
                    ba:8a:7c:61:14:77:6c:01:ad:bd:a5:51:c2:48:82:
                    84:29:06:f6:65:04:4a:ec:41:90:15:3b:7c:93:21:
                    cb:06:21:a9:d5:67:ac:cf:aa:f5:d6:42:8f:5a:8e:
                    b6:de:89:6d:bb:f6:bd:8e:ac:62:7f:8e:65:62:5b:
                    c0:94:b6:9c:fe:0f:18:37:7e:0e:87:31:d4:b3:34:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DC:54:29:EC:95:2A:32:BC:5F:6E:EF:64:98:F0:0A:24:88:E4:AF
            X509v3 Authority Key Identifier:
                keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:93:31:c6:fb:24:a6:dd:39:d4:1d:74:a7:51:86:b8:16:15:
         60:36:2a:37:e4:b5:0c:8f:52:b3:9a:0a:ca:5c:12:da:0e:45:
         7a:98:0c:eb:6e:d6:dc:c0:37:fe:83:98:13:a9:41:b9:71:4f:
         bb:35:cb:42:a4:01:80:31:06:ca:c5:60:6a:fe:c8:46:d2:46:
         c6:3c:09:c9:7b:c3:5d:0d:ff:8e:13:d3:f6:24:e0:78:e2:1f:
         fc:7b:66:4e:0f:ba:3a:3f:e3:45:9a:36:24:4b:8b:b1:5b:64:
         b0:b1:ff:16:16:9e:55:77:9e:53:ba:2d:00:2a:fe:69:88:c7:
         fd:37:73:c1:28:b0:41:5f:d6:52:cd:52:95:51:8a:76:98:f8:
         db:e7:01:90:ff:8e:cd:fa:7e:bc:34:65:4d:4a:f4:4f:6d:cb:
         80:61:41:ba:b7:22:e0:b1:a3:73:45:62:cd:aa:98:c4:94:b0:
         45:33:25:88:9d:88:d2:a8:6c:0b:73:b3:06:3b:5e:72:b4:49:
         26:89:b4:e5:53:bb:58:a2:72:c5:63:6d:4c:07:4b:b4:7b:70:
         f3:a2:a5:98:42:f7:f2:37:ab:48:72:2c:5c:26:2a:3a:a3:ed:
         8a:fd:f0:a1:19:04:24:c8:13:f0:d0:c3:fc:95:82:22:41:96:
         1f:5a:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:08:48 2025 by rpki-client