Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
File:                     D79C7E4BAE4953730FE72125E941901AFC590C0B.mft (raw, json)
Hash identifier:          tH1tvaBeYRwhSDIjb3XiVt31an6fCBG+uD88a6fv/1Y=
Subject key identifier:   CE:79:4C:78:0E:5C:66:95:D2:96:85:C1:04:FE:D3:96:5F:5C:66:98
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4B27979E901D9CADFE031995A23A71EB095EE15D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
Manifest number:          04D7
Signing time:             Sat 23 Aug 2025 02:54:20 +0000
Manifest this update:     Sat 23 Aug 2025 02:49:20 +0000
Manifest next update:     Sun 24 Aug 2025 04:14:20 +0000
Files and hashes:         1: 3230302e3139342e3130342e302f32312d3234203d3e203131393231.roa (hash: 9XSDgncglQlNlJ/ZdbS/C99lcLaqLFyOKrWY3lTzquM=)
                          2: D79C7E4BAE4953730FE72125E941901AFC590C0B.crl (hash: +pc6Oe1jh7cvlmMw69e7DWyoDSPQHnl5WTy6xIC5S4Q=)
                          3: 3230312e34392e302e302f31382d3234203d3e203131393231.roa (hash: AQPm4QPPk3g9bVRkimMQEtyxzxCARGOHEW2rqe64y/A=)
                          4: 323830343a313437303a3a2f33322d3332203d3e203131393231.roa (hash: E8Zl8dQUXRnU8bD0t4b63/KZiLD5UTS/WsBPixGZiCM=)
                          5: 3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa (hash: swO3KlFLEEKvWm+FUWMlf+j0mHBS1dPsBNfmzYcxBDU=)
                          6: 3230302e3139342e39362e302f32312d3234203d3e203131393231.roa (hash: 8N6LtZBXUCvUG0DcYrDLIcjLWOWO1oX8TKnMEdfymYM=)
                          7: 3230302e3233332e36342e302f32302d3234203d3e203131393231.roa (hash: qquKsYC9NwmQPROjAC1DFAD0SxS3Z6/TIYOwcKPKvDA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
                          rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:27:97:9e:90:1d:9c:ad:fe:03:19:95:a2:3a:71:eb:09:5e:e1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug 23 02:49:20 2025 GMT
            Not After : Aug 24 04:14:20 2025 GMT
        Subject: CN=CE794C780E5C6695D29685C104FED3965F5C6698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:68:8e:1f:bd:2a:0b:8e:49:3a:1c:53:9e:
                    02:54:2e:b4:b2:38:71:fa:b4:a0:e5:58:33:51:22:
                    fe:7f:e8:07:e2:af:df:79:53:2c:01:b3:52:05:4b:
                    c0:d2:91:87:ac:2f:57:59:63:c1:23:19:d0:4a:f3:
                    9d:9c:e9:82:53:4b:11:9c:29:07:b6:87:f0:1f:68:
                    9b:78:28:da:ce:81:70:44:05:e0:52:2b:c8:86:0b:
                    db:d0:62:6b:46:71:42:07:9d:ca:dc:86:8e:7a:9e:
                    4b:49:40:54:d6:62:89:9e:8f:07:c9:5a:8d:fb:7e:
                    75:4f:7e:47:3a:60:9b:18:dd:08:e6:d5:8b:25:57:
                    0f:a7:54:6b:66:02:71:e1:27:53:e9:71:8a:69:87:
                    f9:ba:eb:54:ed:d7:7a:f0:95:b3:dd:a5:37:84:49:
                    3e:ea:f8:6d:ab:15:a9:57:cc:0d:08:66:44:d5:36:
                    30:36:cd:20:24:b5:4b:81:eb:3d:7c:46:1d:91:12:
                    55:70:a4:ee:07:37:27:6a:0d:7e:eb:7f:f9:1c:e1:
                    cd:93:46:cb:6c:87:73:eb:e0:95:de:8a:1d:9a:64:
                    3a:3f:58:64:79:7c:e3:bc:60:c1:5d:87:06:bd:fe:
                    bb:5a:3d:fa:72:52:94:1a:32:fa:f5:e2:fc:37:9c:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:4C:78:0E:5C:66:95:D2:96:85:C1:04:FE:D3:96:5F:5C:66:98
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:d0:2b:c3:93:da:f6:18:c7:b1:4d:b0:01:6f:6f:b2:5c:
         9b:8c:e2:b7:16:2b:94:21:e2:8b:76:e4:79:76:02:bd:57:dc:
         ee:19:23:8e:bc:eb:fd:40:94:a1:4b:06:71:49:2c:00:29:4d:
         d2:e7:1d:5b:6e:32:b4:08:43:bf:74:7c:2b:d3:7c:c7:d3:9a:
         08:0b:42:1b:a1:2a:c5:e4:85:92:ce:79:fd:a9:2a:ad:7f:30:
         d6:6a:a2:b1:e9:f1:94:60:9f:e6:d7:fa:d6:3b:53:cc:8c:8f:
         be:54:c4:57:40:26:51:58:4a:72:53:76:93:5c:30:72:e0:27:
         20:ed:10:d3:43:ae:9d:2e:64:55:c0:26:6a:43:f1:ba:d3:3b:
         dd:c8:bc:3f:37:2d:75:c8:c4:67:5c:c3:33:41:73:c7:f8:3a:
         8a:99:cc:c5:b9:21:37:f4:0f:79:11:49:f4:02:6b:1f:01:18:
         ef:ba:f3:40:62:2c:79:68:fe:bb:d1:51:84:27:dc:15:cc:34:
         03:4c:1d:a4:d3:c3:96:4e:c0:17:b2:5a:11:b8:3f:04:a0:e6:
         5a:87:1c:f5:e3:ca:1a:da:5b:37:8a:34:20:e2:07:07:c4:85:
         2b:67:97:0b:8e:73:1d:b9:28:55:85:c2:bb:d3:b4:3b:ad:f1:
         9c:f4:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:18 2025 by rpki-client