Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
File:                     2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json)
Hash identifier:          e4PA/hzxQu6QkBK8KmdycqoYt0ZcMO+pgLYyZIySzNg=
Subject key identifier:   B7:8C:B5:90:F3:66:8F:5E:21:27:64:45:66:DC:83:F5:6C:6C:36:5C
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Certificate issuer:       /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial:       6FCE388896DC42F10765261C748D91C1ACD5BCD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
Manifest number:          029C
Signing time:             Sat 23 Aug 2025 15:15:54 +0000
Manifest this update:     Sat 23 Aug 2025 15:10:54 +0000
Manifest next update:     Sun 24 Aug 2025 17:30:54 +0000
Files and hashes:         1: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: mY5LCu5dI75iFaaZiJRJpcv09o577MfvQBqrlEGZFL8=)
                          2: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: SVa3n9CXuCMyjnUcZIuGz915kRDbHwqunvwZpWNFCqE=)
                          3: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: 1NxEPZFmMr8y2/dlgVX6k0u/Jfu4X7J3Z/0pEUeqw54=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
                          rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ce:38:88:96:dc:42:f1:07:65:26:1c:74:8d:91:c1:ac:d5:bc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Validity
            Not Before: Aug 23 15:10:54 2025 GMT
            Not After : Aug 24 17:30:54 2025 GMT
        Subject: CN=B78CB590F3668F5E2127644566DC83F56C6C365C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:90:0a:de:20:b1:40:ff:d6:24:af:7a:dc:
                    de:f7:08:d2:de:63:9a:62:13:97:ea:07:3c:b2:1c:
                    53:dc:04:9b:50:d3:ae:91:73:0c:22:94:4f:31:58:
                    be:5b:74:04:2e:59:ec:b9:f0:2f:06:b4:f6:a1:fa:
                    aa:83:5d:27:b0:4c:2a:89:fa:36:50:4c:3b:2f:19:
                    11:7e:ad:58:91:16:b1:53:2a:5e:37:6e:6b:0e:60:
                    78:4a:bb:ac:d6:f0:4c:43:4c:f5:f6:89:1c:73:66:
                    12:d1:9e:15:ee:9b:fe:f2:c2:4a:e6:3d:c9:7f:60:
                    02:1a:d2:88:96:62:a8:f0:f3:82:fc:98:3d:0e:88:
                    48:9b:61:ca:09:75:30:79:e6:77:10:f1:27:cd:7d:
                    b6:46:a9:7c:2f:d5:11:88:07:a9:76:61:bd:81:a1:
                    71:5a:66:d4:7b:69:dd:44:31:65:c9:e1:9e:43:6b:
                    88:b8:53:28:7f:82:cc:23:06:72:c5:f4:30:9c:de:
                    42:f5:2b:d4:cc:f2:25:08:96:5b:79:a6:c9:4f:94:
                    66:e9:ec:8b:00:6e:ee:3e:1a:fe:0f:e3:5c:d2:4b:
                    7a:b1:30:67:88:35:72:21:2b:04:eb:3e:88:b8:72:
                    95:b0:78:f0:4c:13:30:eb:af:48:a1:a1:9a:5e:14:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8C:B5:90:F3:66:8F:5E:21:27:64:45:66:DC:83:F5:6C:6C:36:5C
            X509v3 Authority Key Identifier:
                keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:21:ab:71:12:31:89:91:2c:d6:fa:20:03:b6:1e:55:b9:
         bd:09:05:ac:bd:7d:48:14:c3:2b:0b:f3:ff:9e:8f:72:a5:74:
         aa:9b:72:5b:7c:a0:68:54:ef:4c:36:b5:5d:37:68:5b:af:54:
         79:3f:28:1c:ee:82:be:02:c1:93:38:23:2f:64:a4:62:0a:46:
         83:e7:fb:84:5e:d2:d0:7b:7e:38:17:3f:ce:34:d0:ed:a9:80:
         66:dd:1e:15:4c:52:04:44:19:11:4b:17:5a:25:56:0b:0c:05:
         f2:e3:55:10:0f:de:89:40:3a:ba:4d:c5:68:85:52:8e:da:a4:
         22:1a:1a:15:03:f8:c1:07:10:65:68:94:cb:13:11:c4:27:aa:
         4a:33:55:bc:93:6e:9c:1d:ef:dd:50:02:5f:ec:2e:a4:05:60:
         04:88:b9:00:dc:de:bb:df:53:f1:24:38:21:2f:ed:2c:59:e0:
         58:d7:e2:a1:f0:9c:c4:1b:cb:01:6e:9a:ea:fb:b7:e2:32:8c:
         63:86:35:ca:1f:20:12:0f:6c:76:d2:c3:1d:e1:98:53:53:71:
         8d:2b:2a:ca:28:15:76:27:4c:f6:f7:83:31:6a:ef:ac:bf:d8:
         05:d4:99:19:22:d2:d8:11:30:6c:da:f4:46:af:67:5f:b6:41:
         4f:04:a8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:13 2025 by rpki-client