Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
File:                     7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft (raw, json)
Hash identifier:          zWx4WzPzxghP+kGDBvlAL/in8ueP79E/IOmmFsLjTHk=
Subject key identifier:   6E:4C:94:BF:23:48:24:97:BF:71:3F:C0:B3:E0:16:55:52:23:50:CB
Authority key identifier: 78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7
Certificate issuer:       /CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
Certificate serial:       684B210BC0ACD2D6D798BD737A6150091FE9C98D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
Manifest number:          50
Signing time:             Sat 23 Aug 2025 04:49:38 +0000
Manifest this update:     Sat 23 Aug 2025 04:44:38 +0000
Manifest next update:     Sun 24 Aug 2025 04:57:38 +0000
Files and hashes:         1: 323830343a353635383a3a2f33322d3332203d3e20323637393932.roa (hash: UjLqPLh3sIodco2OZOdv6oxQ1f7DqERyP7MTiGmXrRs=)
                          2: 34352e3136372e36392e302f32342d3234203d3e20323637393932.roa (hash: 4fIw/t0WifAbr8TwjAyHaAMJ6sHkTrtPIyfphMNEKk8=)
                          3: 34352e3136372e36382e302f32322d3232203d3e20323637393932.roa (hash: se2nPIzk6VDeXQmoUSmZNOvM4bkS/I8UevXMTmIqMWU=)
                          4: 34352e3136372e36382e302f32342d3234203d3e20323637393932.roa (hash: DLDSM/FDd3lP38ym35N36xtum1+EmzYJAe+qg8z2z+A=)
                          5: 34352e3136372e37302e302f32342d3234203d3e20323637393932.roa (hash: megso2uVTj3Fvi2WCJTfvWEA8qO6YpEM+v5DNs2j1ko=)
                          6: 7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl (hash: 6QjsyGN8VY/iqztxZurtuD9V+0oS9nzg27THUNczqH8=)
                          7: 34352e3136372e37312e302f32342d3234203d3e20323637393932.roa (hash: t0jI/lpJTTHc7VQBupwX5avG5WMBOlXTvMCoYSu63DE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4b:21:0b:c0:ac:d2:d6:d7:98:bd:73:7a:61:50:09:1f:e9:c9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
        Validity
            Not Before: Aug 23 04:44:38 2025 GMT
            Not After : Aug 24 04:57:38 2025 GMT
        Subject: CN=6E4C94BF23482497BF713FC0B3E01655522350CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:3c:1b:86:91:f2:21:34:2f:79:88:bb:8e:
                    a7:6c:ba:ab:92:e8:bf:5a:e8:66:8c:66:03:9a:ff:
                    2b:cd:d4:7f:fd:66:d1:3c:10:5d:9e:b0:7e:9f:0d:
                    51:e0:49:bf:ae:22:51:72:4f:24:a5:04:db:aa:7e:
                    68:d8:2d:c2:83:9c:18:08:ad:2c:d1:8a:32:17:6d:
                    63:88:54:8d:a1:e2:50:08:26:5d:e1:89:7a:a6:e5:
                    f7:d9:87:f5:eb:63:7e:89:1e:05:69:b9:f3:2a:df:
                    ea:dc:17:fd:17:88:4f:2c:7c:58:e5:ac:e5:1c:b6:
                    06:f7:c5:24:57:80:1c:42:2a:11:ec:25:fd:3f:a5:
                    04:9e:87:70:e1:73:17:4b:8d:b7:00:52:53:b4:dc:
                    bf:80:4f:88:bb:f4:2e:11:18:92:fd:2d:51:23:9a:
                    9f:fc:a6:ee:43:5a:d6:8c:fa:70:95:a9:74:bb:e4:
                    91:90:e1:5b:48:88:24:f4:56:14:75:09:f1:90:14:
                    39:81:1c:70:75:cd:3a:b1:03:be:14:67:1c:a1:df:
                    88:14:69:19:bf:a7:6a:21:50:84:7c:3a:fe:08:e0:
                    90:e2:42:08:13:8b:f7:5e:fe:4b:c7:33:5a:ec:6c:
                    b6:32:fe:64:04:cd:3f:0f:23:02:3c:6b:83:9b:00:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4C:94:BF:23:48:24:97:BF:71:3F:C0:B3:E0:16:55:52:23:50:CB
            X509v3 Authority Key Identifier:
                keyid:78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:69:c8:57:7d:59:19:ca:1a:fd:ba:8f:e5:af:42:99:82:47:
         ce:ff:2e:d7:87:7c:44:63:b0:7d:24:52:54:c0:dc:c9:55:06:
         9b:2d:61:50:aa:14:ad:af:26:d2:9f:11:5f:f6:34:70:d4:a6:
         9e:8c:69:f9:23:76:fa:cb:08:51:b5:ff:c7:c8:61:f9:78:34:
         ff:41:4c:b2:4f:35:c5:48:18:b8:91:3d:24:fb:bd:42:39:0a:
         e7:6f:c4:56:ff:7c:37:ed:d7:65:2d:3b:35:6a:84:1a:69:3e:
         28:c9:a1:02:10:4c:eb:02:b0:11:cf:df:7c:65:b0:3a:bf:27:
         ec:44:0f:c0:3f:35:09:55:95:ac:c5:4c:c9:ef:55:6f:4f:46:
         da:c5:1f:f1:96:ad:ec:9c:00:68:d6:34:a2:9a:a0:1e:65:67:
         59:fa:86:7c:99:69:11:3a:5a:9d:3e:6c:f5:3b:99:99:70:b8:
         e0:bd:3e:27:5f:fb:25:9b:a1:13:94:b4:1b:b2:cd:1d:15:c7:
         95:83:73:a9:c4:32:4f:f5:bd:e8:92:d3:d6:51:85:5a:27:5d:
         6d:d9:70:fb:2e:8c:27:42:07:64:f2:d8:38:59:78:d9:a9:a1:
         ed:a6:43:43:6e:bf:1a:a4:a0:a9:b4:80:6b:7a:cd:63:41:28:
         d6:96:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:09 2025 by rpki-client