Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
File:                     4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft (raw, json)
Hash identifier:          8VNyZmSQkbV8Tkz6hTBYE8wYu9ir7Jihd8CT1WJvOr4=
Subject key identifier:   03:6E:EF:0F:78:FC:CF:EC:20:28:04:3A:9E:91:DC:72:E2:35:81:2D
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       64E9E6108298CB42F4829EAE57023F4334EA964A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
Manifest number:          028A
Signing time:             Mon 30 Jun 2025 07:00:00 +0000
Manifest this update:     Mon 30 Jun 2025 06:55:00 +0000
Manifest next update:     Tue 01 Jul 2025 07:00:00 +0000
Files and hashes:         1: 323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa (hash: jj/DFtVSWkmoEDR9MMoDSC5fGS5/8QPrbd2PVIl6KtU=)
                          2: 323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (hash: e5+lboSeP7wRX2S+7kV/NMg3fIZ77X3rsllnhtzm6x0=)
                          3: 323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (hash: PEqddxWP0UwQjFUWTOEctj/kWBjXgV+ouzSyGaK99kI=)
                          4: 323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa (hash: wWar2zLFazdvxtcXttabAzwTbUhLghXXyWV35gTV4AU=)
                          5: 323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa (hash: Mo/X9tzCDrmFki02A1WCTk9a4T2l+eDUGX1jPqDh11o=)
                          6: 4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl (hash: j43O+K+q24acOWkHqXDmVKqroELlOFq5v0mK1/7W8BU=)
                          7: 3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa (hash: WYv4Ld2DCVe6YHJc3QqWlwjyBfRe+8s44NvzSgBrKDs=)
                          8: 3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa (hash: M4n3WBZ85cIDAi2DlwuCjajPGJplflgk5JxusQKYXVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e9:e6:10:82:98:cb:42:f4:82:9e:ae:57:02:3f:43:34:ea:96:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Jun 30 06:55:00 2025 GMT
            Not After : Jul  7 07:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:6d:31:7e:2f:78:24:d9:2b:f8:52:ac:3d:
                    77:7b:6a:57:a7:0f:d1:50:f1:f8:ab:17:f3:b8:e3:
                    d0:57:2b:0a:84:aa:6b:82:4b:33:d1:50:a8:dd:b2:
                    da:e1:0c:8a:71:22:c1:aa:39:bc:ee:2d:a2:3c:27:
                    b4:92:fa:26:82:42:ce:55:dd:e7:a5:32:7d:50:9a:
                    17:4a:33:f1:27:90:b1:9f:4d:e2:a3:a5:a8:06:13:
                    3a:f8:93:99:9b:8e:65:d4:b6:ca:b4:94:93:d2:ed:
                    f1:ea:3e:dc:2c:c4:13:fb:08:66:e0:f8:37:44:93:
                    5e:a4:23:e8:50:9e:15:cf:4f:cd:bb:70:8a:00:7a:
                    9c:5d:c1:a8:11:6a:b0:9a:ab:4d:f3:10:c0:14:1a:
                    2b:5c:71:a7:9a:a5:9e:e1:78:d4:83:da:c9:5c:7b:
                    b6:f7:5c:7b:c9:a6:e4:a7:6c:93:95:a9:5b:1d:2d:
                    cd:dc:de:99:74:14:af:25:72:04:b1:c4:31:f4:ca:
                    93:53:36:2a:b0:b1:b5:68:09:3a:18:c6:ed:54:76:
                    c2:82:5b:6e:56:75:d9:29:ea:55:86:95:c3:1c:20:
                    46:40:d2:7a:df:ee:68:0e:7b:12:48:34:ae:98:a3:
                    99:de:c1:d1:01:8e:50:6c:a0:5e:72:a3:ae:77:0a:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6E:EF:0F:78:FC:CF:EC:20:28:04:3A:9E:91:DC:72:E2:35:81:2D
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4c:dd:18:d5:f5:70:b0:55:77:1c:21:75:94:20:bf:40:10:
         15:8b:09:c7:d7:33:0b:8a:30:b3:c1:5e:68:fe:f7:c4:96:cc:
         ce:54:01:0e:b9:d4:9e:25:f8:6a:37:38:75:f6:64:6c:32:dd:
         cc:27:a6:74:2e:c4:33:20:6e:95:c8:f3:1c:91:dd:c6:7f:15:
         cc:ce:9f:d6:3a:59:25:ac:c9:e9:71:bc:f6:6d:a0:b3:c1:66:
         b8:ab:55:7f:f2:58:0a:98:48:32:1a:1a:dd:38:af:57:45:9c:
         ba:05:d0:b0:d1:d5:1a:61:1d:9b:10:2f:a7:db:e6:95:bd:92:
         75:b1:85:c4:ad:2f:9f:50:5b:9b:f4:fc:b1:06:19:14:75:64:
         44:07:df:b6:fd:12:db:49:db:56:84:b8:09:8d:da:b7:dc:a6:
         18:08:28:dd:cd:39:fd:9c:7a:c6:40:63:8d:af:4d:87:36:3e:
         cd:ec:bd:01:13:53:70:96:2b:7f:0e:8a:f7:03:5a:ae:64:05:
         74:30:03:fd:83:06:64:16:2c:5d:36:26:87:2a:39:0c:47:bc:
         a7:f1:49:0e:a6:b1:49:2b:64:41:c8:ca:d0:b8:5f:b8:80:d4:
         fd:06:56:90:1c:64:4b:a0:a3:b3:a9:c7:67:88:a2:a8:dd:0d:
         2b:45:39:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:44:33 2025 by rpki-client