Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
File:                     2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json)
Hash identifier:          NA8cVdLaZOnYW43nbZ+A8N6QY1BqEm8P5KQYxFEEnn8=
Subject key identifier:   4C:AB:62:A1:99:13:13:41:6B:C8:D5:2D:F8:29:9C:00:66:2C:4D:6D
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Certificate issuer:       /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial:       0A6E7314B887A78C16972FAC0568C15F0B87BE61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
Manifest number:          025A
Signing time:             Wed 02 Jul 2025 06:29:58 +0000
Manifest this update:     Wed 02 Jul 2025 06:24:58 +0000
Manifest next update:     Thu 03 Jul 2025 09:15:58 +0000
Files and hashes:         1: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=)
                          2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=)
                          3: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: r6Y41hsbFuXG47l1e5t5XQ2bvBaVVQ0P3PhkzIRqIkk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
                          rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 09:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6e:73:14:b8:87:a7:8c:16:97:2f:ac:05:68:c1:5f:0b:87:be:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
        Validity
            Not Before: Jul  2 06:24:58 2025 GMT
            Not After : Jul  3 09:15:58 2025 GMT
        Subject: CN=4CAB62A1991313416BC8D52DF8299C00662C4D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:b8:fc:ec:6b:b7:cc:cf:e8:53:b1:06:3c:
                    e7:f9:02:af:5e:b8:86:a3:17:ed:d6:c2:9f:05:8f:
                    7f:21:23:e9:3f:be:11:f5:b8:11:bd:ae:0d:a9:7e:
                    b1:6a:ac:c2:69:dd:83:55:7b:44:a9:af:e8:ad:f2:
                    ff:c2:60:5c:2b:91:b9:a0:17:7b:53:94:84:62:16:
                    ee:71:c1:9e:fe:cc:e9:6b:0f:db:0d:8b:f4:2d:87:
                    1d:b7:ae:ba:ac:d1:1f:fb:93:70:2d:35:29:dd:17:
                    4d:90:7d:eb:c5:3e:15:ed:d9:f4:3c:a8:aa:d9:22:
                    97:10:8e:d7:42:0f:95:d3:a2:65:c6:dc:29:0f:69:
                    6c:41:5c:e3:87:b0:de:5d:1a:80:fa:33:b2:88:c1:
                    08:1c:e6:c3:d4:00:fe:45:0f:a5:40:83:79:33:47:
                    8b:d3:c0:c4:45:b4:95:10:37:77:be:49:3b:7e:58:
                    fc:a8:4e:29:3b:10:65:fe:5b:46:e4:51:fe:f4:ac:
                    00:1e:62:97:47:00:e9:e6:60:5b:e1:78:14:58:92:
                    21:07:07:79:76:0c:da:e0:cc:2a:86:45:25:40:bb:
                    1d:32:f3:56:6b:13:c5:87:16:be:20:2f:5f:0c:f8:
                    65:a8:0e:46:d6:c6:bf:81:46:f2:4a:20:43:8e:35:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AB:62:A1:99:13:13:41:6B:C8:D5:2D:F8:29:9C:00:66:2C:4D:6D
            X509v3 Authority Key Identifier:
                keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:25:a5:6c:9f:72:82:3d:48:b4:bd:0b:2a:37:22:6d:7f:bb:
         6b:f8:c3:24:35:1c:a3:70:b6:06:26:e7:a4:9a:11:8d:60:50:
         e8:01:23:54:7a:41:96:c5:db:ce:16:60:45:59:10:09:3c:f8:
         ab:1f:f8:41:1b:1f:df:0b:ca:c9:d9:d6:c6:9b:2a:43:df:bf:
         33:74:00:bf:72:7a:18:5e:69:de:b3:41:3f:81:6f:b8:75:29:
         4f:0b:b7:0e:04:fb:4c:e8:27:b3:51:e0:8b:8b:f7:78:2e:07:
         41:5b:25:b8:17:d4:37:a2:71:61:eb:02:6b:16:fa:d2:56:d0:
         3d:a7:5f:48:7a:fa:14:cb:80:8a:0a:67:cc:0c:5c:fc:68:9c:
         e8:cc:cb:bb:39:33:2a:77:c2:83:95:0a:e2:bb:df:68:1e:1c:
         ce:f9:7b:ef:43:d3:9f:f1:36:b4:a5:4f:a2:30:de:99:19:80:
         78:ff:ff:ed:ed:bb:08:06:ad:e8:02:a3:31:c4:e2:95:63:7f:
         86:1a:a1:d8:60:eb:4e:89:12:eb:6f:11:b1:e5:12:51:cf:d9:
         a6:71:c9:29:92:40:99:10:45:60:8b:d8:55:72:55:d8:5a:fb:
         3b:68:1b:85:f0:1f:81:2b:3b:ce:84:36:40:52:48:3a:bf:d7:
         13:bd:87:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCm5zFLiHp4wWly+sBWjBXwuHvmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE
NDYzODM5QTAeFw0yNTA3MDIwNjI0NThaFw0yNTA3MDMwOTE1NThaMDMxMTAvBgNV
BAMTKDRDQUI2MkExOTkxMzEzNDE2QkM4RDUyREY4Mjk5QzAwNjYyQzRENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkLbj87Gu3zM/oU7EGPOf5Aq9e
uIajF+3Wwp8Fj38hI+k/vhH1uBG9rg2pfrFqrMJp3YNVe0Spr+it8v/CYFwrkbmg
F3tTlIRiFu5xwZ7+zOlrD9sNi/Qthx23rrqs0R/7k3AtNSndF02QfevFPhXt2fQ8
qKrZIpcQjtdCD5XTomXG3CkPaWxBXOOHsN5dGoD6M7KIwQgc5sPUAP5FD6VAg3kz
R4vTwMRFtJUQN3e+STt+WPyoTik7EGX+W0bkUf70rAAeYpdHAOnmYFvheBRYkiEH
B3l2DNrgzCqGRSVAux0y81ZrE8WHFr4gL18M+GWoDkbWxr+BRvJKIEOONaZDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTKtioZkTE0FryNUt+CmcAGYsTW0wHwYDVR0j
BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru
eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw
OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y
QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVyWlbJ9ygj1ItL0LKjcibX+7a/jDJDUco3C2BibnpJoRjWBQ6AEjVHpBlsXb
zhZgRVkQCTz4qx/4QRsf3wvKydnWxpsqQ9+/M3QAv3J6GF5p3rNBP4FvuHUpTwu3
DgT7TOgns1Hgi4v3eC4HQVsluBfUN6JxYesCaxb60lbQPadfSHr6FMuAigpnzAxc
/Gic6MzLuzkzKnfCg5UK4rvfaB4czvl770PTn/E2tKVPojDemRmAeP//7e27CAat
6AKjMcTilWN/hhqh2GDrTokS628RseUSUc/ZpnHJKZJAmRBFYIvYVXJV2Fr7O2gb
hfAfgSs7zoQ2QFJIOr/XE72H7Q==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:33:29 2025 by rpki-client