Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          9wJrt1dHxAck+oYYzPNIbBG6pHKd7sttAXU4BEf/j1w=
Subject key identifier:   1B:DE:D9:1B:02:18:DB:54:17:2D:81:BD:FD:F9:53:80:A5:9A:98:34
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       2417B82A32A57B11C623B450E6D50A34AC4AEAEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          02FA
Signing time:             Sat 23 Aug 2025 02:10:00 +0000
Manifest this update:     Sat 23 Aug 2025 02:05:00 +0000
Manifest next update:     Sun 24 Aug 2025 02:10:00 +0000
Files and hashes:         1: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: w5Aup+NkUiSPGJOkgm0D2pt62dq35BDv6u3R+EXF5Y4=)
                          2: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: 7z7st9VExUOxO1HPQ6IHGyHiaeWv0sgAdWNGW8vEHnI=)
                          3: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: jNre954ylBKqBfqOR7sW+4P/02andW5wroDJrSD+LJw=)
                          4: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: YkiMOKlXUfp39jAbnOanM0KLPuwUcDBAVWsGF1xqc/E=)
                          5: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: wBg7OLAC+U5rb0dz2JZauuXhMzmWVbds76u/zhua/YE=)
                          6: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: PsG/KbNUa3nKz87y+qnxaBmbAh/4v58jK3L06h+VOiI=)
                          7: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: AENm28hKOe+JUx8M3BB6ThARRBZmTLr4tWw7bFUMjGM=)
                          8: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: WZr+/Q54cg2mZtFayzv8bTTykV+0uhwUu5vv3XCe91s=)
                          9: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: MuLCu/ebtGTRQdFTtxwflEFsRUPY8b2YKd2KzoWHrGI=)
                          10: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: YHcOeZAppI0yBQHU5VaAv9v49jpZW7BbBaBFcagKeAo=)
                          11: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: K6MwIK+3msfBTjd+nDj6vx1bhEf6yAKnBKiZuf/G4hg=)
                          12: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 8tcPtbeFADqn7j5wPgEV/xkungZIxf0p1KKa9Fv9kro=)
                          13: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: ccCrOPO+fniR7wGL9nAJb4TbiYc08AJ9vqTsfD1PrJw=)
                          14: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: +MxwWMlz9S9ev8gjiYaaRI7n12W9bpBHWTXxklmRXcg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:17:b8:2a:32:a5:7b:11:c6:23:b4:50:e6:d5:0a:34:ac:4a:ea:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 23 02:05:00 2025 GMT
            Not After : Aug 30 02:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:2d:60:9f:dd:3f:2c:d4:89:46:65:11:ea:
                    03:80:57:68:35:31:da:76:48:3f:d2:b0:e4:bd:e7:
                    16:ab:41:48:cb:a0:02:72:b1:d4:28:33:56:8d:b5:
                    80:ea:54:32:2d:8e:9b:d6:12:98:7d:6a:1e:41:1b:
                    1d:5a:bb:9f:a9:d8:dc:c4:9a:71:6b:e3:da:ef:d4:
                    53:57:ad:a1:93:6f:13:57:ea:98:67:7e:60:96:d1:
                    f9:d4:90:89:37:0b:98:40:e8:5e:ca:e4:0e:9c:cc:
                    d2:ef:53:12:47:ed:d0:fb:40:6c:a6:bd:1e:68:e1:
                    d2:1a:73:d6:46:d8:fa:93:f3:7d:3f:14:c7:34:19:
                    ea:54:0a:25:78:b1:68:57:0b:d7:a3:1f:5a:4c:af:
                    51:7b:76:cd:d5:b4:8d:2c:68:5d:7b:a4:0b:87:4f:
                    44:e8:24:e6:1b:b7:07:95:7b:68:76:18:ed:9e:e9:
                    ba:f2:e4:71:4b:57:db:6d:cf:b5:ae:f1:52:69:b9:
                    5b:47:da:02:f7:4f:e9:39:cb:6c:47:c2:83:e1:20:
                    83:0f:cd:a4:22:85:2c:ec:20:39:b4:0b:fd:4d:c9:
                    a2:ce:8c:29:0d:b4:43:6e:5e:0a:c1:37:44:09:0b:
                    07:93:94:c1:ac:5b:f0:44:f5:ac:d7:65:ed:85:89:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:D9:1B:02:18:DB:54:17:2D:81:BD:FD:F9:53:80:A5:9A:98:34
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:3d:47:e0:5e:d8:6f:e6:17:7e:6c:77:91:22:fb:7e:bd:
         17:6f:6e:d8:9d:0c:9c:02:78:ca:5e:49:59:51:2c:f9:8a:95:
         d9:49:a5:36:e4:c0:65:99:1e:db:5d:e1:b3:f3:c6:27:75:cd:
         02:0b:d1:71:1f:da:75:44:f8:1f:35:44:dc:98:04:14:82:9d:
         35:f7:0b:84:28:40:dd:1e:14:f2:7d:6e:0f:04:d8:44:18:7d:
         a2:55:14:58:1c:a2:2b:bb:dc:1c:d1:61:f7:0c:e1:f8:72:13:
         95:79:4d:e9:16:16:fd:cb:0e:aa:6d:c7:f1:eb:27:7f:8d:e9:
         23:46:4c:38:c7:15:7a:6b:89:d1:34:8c:ee:f5:12:cc:42:33:
         2f:a7:0d:52:11:10:3f:9c:da:d2:b9:3f:7a:13:84:49:31:ed:
         22:05:00:78:25:57:24:16:02:3d:49:29:61:5f:cf:c7:f0:0e:
         f2:1c:12:1b:ca:ad:d3:50:3a:fa:73:8c:b7:1a:1e:1c:88:0b:
         e2:9c:c2:b7:5c:1b:64:63:f6:58:bf:d2:da:a3:5d:33:17:ed:
         4a:05:ac:63:fd:03:24:27:89:e6:7e:d5:33:b7:56:2d:74:ec:
         9b:a2:d3:9d:51:90:17:56:ea:8c:ac:20:39:ae:09:45:b6:ed:
         88:99:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:26 2025 by rpki-client