Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
File:                     4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft (raw, json)
Hash identifier:          MqwDyRjrlDDUikvWWWozJusgsqiHPe4YHfjp4D2rd+0=
Subject key identifier:   21:DF:C4:98:82:B9:D8:A3:A2:6B:FF:6B:04:38:DB:85:77:46:20:8C
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       02CCD2A5FDE189C576537F0E75D52E3410171FB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
Manifest number:          025A
Signing time:             Wed 02 Jul 2025 04:13:23 +0000
Manifest this update:     Wed 02 Jul 2025 04:08:23 +0000
Manifest next update:     Thu 03 Jul 2025 08:05:23 +0000
Files and hashes:         1: 3138312e3138392e382e302f32322d3232203d3e20323731333830.roa (hash: Idum2gpPed+kFR5AMlXDlzSoB4LAP/q7kXktpzuAsLg=)
                          2: 323830343a376139343a3a2f33322d3332203d3e20323731333830.roa (hash: p8gpCyP3CfAnrCHe29NjGEWs50bYRoVwXF0E70Gc7Ts=)
                          3: 3138312e3138392e382e302f32332d3234203d3e20323731333830.roa (hash: L9UsOKAnboomciDRL+oM/4s15Vu0hssWS9BFH8WagWk=)
                          4: 323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa (hash: RwQ5kD3oLhfnDGwHB4jyzy5/sarDtbliPpFY6KW3LHM=)
                          5: 323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa (hash: eLBvbkz3pDBbqruGhJbFQmqCLVDTHKDpygBXPqR2XGg=)
                          6: 323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa (hash: rBqWL9GDoAH7uJzQePNCNA5HpILL2zXFE8eVpkzswxk=)
                          7: 4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl (hash: 8acY2Ghve0CNvjAl+/huG+MDsJ6LDiPBD1OuPSmnVRw=)
                          8: 3138312e3138392e31302e302f32332d3233203d3e20323731333830.roa (hash: uLRO58elpqJkZa1AosT1J9wnqv8IzcjxXQGoRiUYmdk=)
                          9: 323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa (hash: gsMS7Da5Tt1AjLas/xR2ZWzP4/1WELE24ZUdUodzM4U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 08:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cc:d2:a5:fd:e1:89:c5:76:53:7f:0e:75:d5:2e:34:10:17:1f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Jul  2 04:08:23 2025 GMT
            Not After : Jul  3 08:05:23 2025 GMT
        Subject: CN=21DFC49882B9D8A3A26BFF6B0438DB857746208C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:05:ea:77:b0:9a:41:5d:c1:f4:ee:fd:24:
                    89:6e:c6:98:2e:ad:00:28:bc:72:75:5f:f3:3d:ba:
                    cd:58:c0:b7:87:e7:f4:63:06:8b:1b:94:77:57:92:
                    d8:1d:38:6f:d4:41:5f:96:72:75:73:b3:58:70:ed:
                    bf:25:cf:44:33:9f:96:82:3a:95:be:01:17:1a:f5:
                    db:3c:56:45:b4:05:2b:c2:7a:b9:4b:37:98:26:df:
                    d8:08:7f:3b:3a:8f:cd:16:9f:d0:05:e1:f5:11:29:
                    d3:3f:a9:d5:3c:d4:e5:02:30:c9:df:38:1a:c2:fa:
                    29:05:3b:ff:a2:b4:9b:a1:5f:87:e4:70:e7:c0:a4:
                    44:89:22:20:87:0e:81:c4:2d:84:29:7c:a6:57:e9:
                    f0:11:46:9c:10:11:81:f9:19:3d:d6:05:c7:c2:b4:
                    91:43:21:01:94:9e:f8:ff:85:22:7e:07:76:64:6c:
                    ba:6b:30:e2:a0:33:30:08:ff:18:8f:21:8d:3e:f9:
                    42:5c:11:fb:02:59:a1:fa:b5:e9:2d:88:e0:e4:f5:
                    b4:13:7a:ba:dc:a7:58:fe:58:32:3d:d7:29:98:eb:
                    a3:e1:86:12:45:8a:a2:d6:b2:0d:c1:84:16:1d:e3:
                    24:98:ef:35:bb:f9:a5:7f:21:f9:78:ee:52:74:66:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DF:C4:98:82:B9:D8:A3:A2:6B:FF:6B:04:38:DB:85:77:46:20:8C
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:3c:19:e7:69:aa:9c:7c:47:50:b8:98:1a:1e:39:c5:5f:
         c2:2f:c5:e7:72:db:b1:d0:8f:52:91:f7:96:9a:bb:39:61:b5:
         75:11:95:f5:7f:b4:04:e8:7f:5c:b7:f6:26:18:12:7a:bf:7f:
         72:83:ea:09:64:91:aa:5a:0a:35:0c:6c:9c:98:b5:1c:ec:e9:
         3e:90:3b:ec:27:55:98:ff:5d:b8:3e:39:d6:cc:96:5e:31:3d:
         5b:4d:f5:29:39:60:ee:06:e0:ed:07:1e:29:c2:bf:d8:d6:6b:
         fb:94:ee:4a:ca:81:fa:0f:b6:05:a5:7a:61:2c:77:0b:55:cb:
         90:0c:9a:37:21:ef:ef:3a:c5:4e:53:9e:fe:4e:61:e6:5a:63:
         c4:81:4a:03:74:df:59:4e:83:d5:5d:6e:fa:66:0b:59:b8:3d:
         19:da:09:ab:f5:35:41:a6:e2:08:9f:ec:15:fe:49:9e:25:cd:
         f6:a1:60:32:a4:c0:de:8b:a2:b5:25:e1:51:88:c8:61:83:76:
         7f:11:e8:3d:d9:94:0a:8e:c9:35:33:24:22:93:a9:a8:01:a9:
         4a:fe:dc:e8:6f:43:3f:3b:42:3b:d4:ec:4e:79:ed:ba:3b:03:
         63:70:86:7a:16:26:71:c5:a1:aa:62:c7:54:49:fd:f7:3c:c9:
         1f:5c:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:56:53 2025 by rpki-client