Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
File:                     8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft (raw, json)
Hash identifier:          Ex+JE8SID/tr3OOIafhba1kT3AHYA8WoEibeALeYwg8=
Subject key identifier:   79:2F:04:BF:66:FB:5C:2C:62:64:4A:74:09:83:88:35:67:FB:94:84
Authority key identifier: 8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE
Certificate issuer:       /CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
Certificate serial:       07352B6106C55FE0B8B99C2691A52B97BD3961D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
Manifest number:          72
Signing time:             Wed 02 Jul 2025 03:14:05 +0000
Manifest this update:     Wed 02 Jul 2025 03:09:05 +0000
Manifest next update:     Thu 03 Jul 2025 05:21:05 +0000
Files and hashes:         1: 3137302e38302e3131322e302f32332d3233203d3e20323636333736.roa (hash: veo+8WryD8I4uIK4Azgwl9ZCNurhhRHJrPyherRlo5Q=)
                          2: 8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl (hash: pFRmGOmNnVhfMNlcXyfn0iF5XzHhaSPMQdYvmwCPDio=)
                          3: 3137302e38302e3131342e302f32342d3234203d3e20323636333736.roa (hash: CrzlhgmW2FpR3yb7JWJ7VfW91Uj+Lyhs5XCyEWYiUIY=)
                          4: 323830343a333664383a3a2f33322d3332203d3e20323636333736.roa (hash: 1dHLraw04NFJxymzqkFkO+vYJ3VgTas762b7elmsJEQ=)
                          5: 323830343a333664383a3a2f33332d3333203d3e20323636333736.roa (hash: imLmjWhpkf30wGzPX/N45CUVRfunQ7KprlutiBc0u3U=)
                          6: 323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa (hash: kuOigvHk9xrkKy8rgef0si8YwKYGpZnUjEE9PLDNCZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl
                          rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 05:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:2b:61:06:c5:5f:e0:b8:b9:9c:26:91:a5:2b:97:bd:39:61:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
        Validity
            Not Before: Jul  2 03:09:05 2025 GMT
            Not After : Jul  3 05:21:05 2025 GMT
        Subject: CN=792F04BF66FB5C2C62644A740983883567FB9484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:50:e4:3d:38:10:62:14:fe:d6:85:98:bf:
                    a0:c7:8b:91:74:42:3b:c1:f0:66:1b:8d:43:57:e0:
                    e3:ae:1d:24:a5:ec:19:ce:3a:e7:94:f3:e8:dc:4d:
                    9f:19:c3:04:cd:bb:19:4a:cb:07:82:8e:b9:b5:81:
                    39:5d:97:42:5d:23:3a:58:6f:fd:4b:ec:a1:3d:d6:
                    a1:ec:5f:9a:4f:98:f7:58:ba:9d:99:93:aa:4d:a3:
                    c5:44:ea:c6:11:f5:0c:ab:93:2d:1b:b0:84:c9:e9:
                    72:12:e5:c3:4a:94:a6:70:e5:e6:e2:85:0e:cc:81:
                    2f:da:63:b2:d6:61:fc:b8:c1:52:c2:33:dd:95:91:
                    b0:dc:f4:c8:1f:01:a1:c8:42:ec:07:54:fe:ec:b9:
                    35:10:90:ea:c1:ba:d3:52:40:6c:81:73:87:83:69:
                    ab:a4:ea:09:0d:2f:62:2a:13:9b:94:16:4e:f4:bb:
                    9a:bf:74:aa:47:b0:4a:10:02:91:bc:0d:2a:e2:4a:
                    8f:4a:98:e2:18:fd:b9:8d:3e:2e:b5:ed:96:b3:26:
                    6e:2d:17:d8:54:6f:14:df:d8:3d:e1:1b:39:f4:56:
                    d2:55:a4:de:a5:37:c3:e5:83:c2:65:cb:b7:c2:82:
                    9c:c3:42:ae:9d:64:57:66:55:ac:e4:3d:c8:5c:b2:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2F:04:BF:66:FB:5C:2C:62:64:4A:74:09:83:88:35:67:FB:94:84
            X509v3 Authority Key Identifier:
                keyid:8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:20:77:28:f0:56:e7:51:da:e5:f0:a7:ce:a6:dc:8e:94:
         21:53:d4:38:8b:89:1e:fb:c0:bf:99:e3:8b:b7:92:04:02:be:
         21:af:86:4a:c4:41:28:7c:3f:08:de:df:57:9f:10:89:ac:4a:
         2a:71:32:e3:20:c0:ec:3e:fb:37:0a:91:7c:e1:cf:89:32:f8:
         ee:b1:78:8c:a3:17:65:9c:1f:95:a7:94:a2:76:43:1b:1c:1e:
         dd:35:ba:ac:2b:c6:4e:1d:4c:29:a5:22:40:4f:08:1e:24:8d:
         9d:2c:0a:fc:d1:b8:16:cb:06:77:24:47:79:a9:9f:eb:eb:a5:
         ed:2b:90:70:04:c2:08:e2:4f:a1:0b:09:6e:3f:1f:b7:2e:42:
         a7:f5:d6:89:d5:e7:19:3c:92:9f:1c:c8:ec:41:77:16:46:27:
         c6:8b:f3:f9:3e:7a:e5:ce:a4:0d:81:d0:9d:58:db:1d:e3:60:
         1e:c3:c9:ab:cc:bb:42:1a:af:46:9d:9d:77:b6:bf:0d:4f:92:
         7a:4f:3d:df:de:7a:db:f3:9a:90:ef:76:c9:c1:4d:89:77:a7:
         61:ed:ac:52:49:4b:83:19:df:47:fe:3f:43:5b:42:1e:f6:58:
         22:c1:4d:1e:b6:ab:94:ca:f3:d6:97:3a:79:9a:ec:55:94:92:
         8c:29:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:29:46 2025 by rpki-client