Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
File:                     598DA71AEBD137B402470BB062F68BE6315A8ABF.mft (raw, json)
Hash identifier:          vHbYy1Cusvh88z9q3nlvVvxGT9j8InysJc+F02JHV7Y=
Subject key identifier:   58:E0:70:C4:A1:AB:9D:68:43:5A:4B:6C:11:18:0B:3B:46:6C:71:C3
Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF
Certificate issuer:       /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
Certificate serial:       3BB759DE5FEE26258D41C6B2CE4D31E66F78284D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
Manifest number:          0195
Signing time:             Sat 23 Aug 2025 12:57:55 +0000
Manifest this update:     Sat 23 Aug 2025 12:52:55 +0000
Manifest next update:     Mon 25 Aug 2025 03:02:55 +0000
Files and hashes:         1: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (hash: baNFhgbFTdOx+2Bsp14GMKfBsYT5picsrzlhIPnrFF0=)
                          2: 323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (hash: 6a4hW4PLh2F8bHNJZDD/PfOVLrWZfxA4WKw3HFkFXTk=)
                          3: 598DA71AEBD137B402470BB062F68BE6315A8ABF.crl (hash: 78ztqBHJbn5jXuTVZl3bqj9g/Ifbw7Y/Im7l/SCwc8I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:59:de:5f:ee:26:25:8d:41:c6:b2:ce:4d:31:e6:6f:78:28:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
        Validity
            Not Before: Aug 23 12:52:55 2025 GMT
            Not After : Aug 25 03:02:55 2025 GMT
        Subject: CN=58E070C4A1AB9D68435A4B6C11180B3B466C71C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:2e:cb:a1:7d:b7:c4:3c:e6:81:e3:a1:ef:
                    a9:a4:44:85:a5:18:3d:a3:d5:90:32:43:95:c4:d4:
                    12:da:fd:5e:c7:2d:35:3a:74:f6:ad:30:bb:ae:c5:
                    7d:f6:b2:6a:51:14:ec:7c:84:87:38:24:1f:bb:29:
                    cc:9e:2b:08:9a:39:1c:d8:0d:b4:de:f9:18:56:ac:
                    53:4a:3d:f9:9b:a0:da:84:55:c2:52:a1:9f:23:a5:
                    aa:a5:ac:8b:d6:e8:da:e8:d5:82:1f:d8:61:60:2b:
                    bd:ec:f7:be:15:e1:21:16:de:8e:00:b8:86:11:cf:
                    b1:d1:4a:43:c3:df:9d:28:f0:52:45:a3:c0:c1:56:
                    99:44:87:f9:e8:90:30:51:61:6c:c1:df:e0:90:54:
                    a2:f3:66:fe:fc:a2:54:09:5a:a1:a9:87:4b:ef:cb:
                    4c:82:f8:1e:53:44:55:b7:55:e0:8a:d2:92:1f:d1:
                    04:5c:67:b3:14:66:fa:a8:e9:15:01:c5:c2:8a:24:
                    3f:38:9f:ed:d2:c6:55:1b:3e:c7:b1:ae:f7:5e:78:
                    77:f4:34:11:93:01:12:34:a2:d2:f0:80:5f:60:ba:
                    e0:65:ff:54:c2:b9:ff:d0:db:3c:4b:ef:17:95:33:
                    e0:c3:cf:31:66:2a:fc:fa:bc:91:7f:a7:e8:91:85:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:70:C4:A1:AB:9D:68:43:5A:4B:6C:11:18:0B:3B:46:6C:71:C3
            X509v3 Authority Key Identifier:
                keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:37:ea:79:c8:a9:7a:75:bb:62:23:a1:6a:d9:4a:a9:eb:
         1c:8e:c5:f6:1e:d9:91:a1:10:37:28:ce:13:cc:3f:1f:3d:3b:
         96:de:5c:a6:19:a3:0b:2e:70:71:dc:36:41:96:45:4c:fa:9d:
         b9:0d:b2:15:c5:8d:c4:8f:b7:1a:ab:bf:ec:c0:01:c1:17:86:
         16:2b:f1:f6:60:c6:9d:53:11:ab:d4:6b:7a:8e:62:7b:b8:7e:
         f3:27:61:72:36:e1:25:aa:c8:f9:a9:9e:b1:9e:1a:2f:30:b8:
         19:7f:60:c6:3f:3c:00:4d:4e:bd:1f:7c:77:2b:1e:f2:69:af:
         e0:20:d6:c7:c0:f8:ea:92:6a:ca:98:9a:83:47:96:5a:a9:97:
         39:3c:eb:ca:fd:0f:6c:0d:e8:eb:00:c4:9d:47:45:d0:1c:a4:
         3b:14:76:5a:59:19:77:d2:fd:af:a0:9d:9b:46:6e:9a:00:61:
         6e:79:11:68:77:3a:08:ba:44:33:27:c3:33:fe:68:fe:73:6a:
         35:65:fc:1c:b9:80:7e:09:01:e7:23:7f:a0:af:04:b5:af:ef:
         b4:f0:4b:32:fb:ad:92:b6:d6:74:2c:60:3e:d3:d6:ef:b6:36:
         a7:a1:bd:07:20:15:53:60:fa:90:d6:04:e4:32:84:8c:62:94:
         89:27:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:26 2025 by rpki-client