Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
File:                     00A0649BEB784D778983813CFFD9D01F42F24C95.mft (raw, json)
Hash identifier:          V2+Dt9ffxomEYpJf9lR30fDpmsgu7j0rB4DcxjBWPdY=
Subject key identifier:   95:27:AB:4E:28:D7:4B:B6:9B:82:A8:4C:6D:EA:A8:3A:A5:8D:D4:44
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       4C5FDC0E124B6288AFBE1219CFCABE4606E69BC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
Manifest number:          025F
Signing time:             Thu 19 Jun 2025 10:39:06 +0000
Manifest this update:     Thu 19 Jun 2025 10:34:06 +0000
Manifest next update:     Fri 20 Jun 2025 13:48:06 +0000
Files and hashes:         1: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (hash: My6aFJY2U5nmSSRx8QPY9d83jRB9vex2vHwdp+V2wsw=)
                          2: 3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (hash: f4Qa2FNEfhkFAwUVdSuYgjlLS4ftW2/rWnrs8JYLslw=)
                          3: 3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (hash: tf9RcDWy+bjBTghyqkDsVVFKF4rglFNBOOVRHIp9Cv8=)
                          4: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (hash: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=)
                          5: 00A0649BEB784D778983813CFFD9D01F42F24C95.crl (hash: Z5JTThGINCYnjdI9n08sxYnXcCU9UWv+bPqsd+YuMCY=)
                          6: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: gzgB+hN3/XwnZ217gd/lKm+/0v3haf0w4F8jpPy/ba4=)
                          7: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: CyL2LPK4hF2bzz3l7O+OWYZwNgR4Vg3MWpKXD5+9ydc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 13:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5f:dc:0e:12:4b:62:88:af:be:12:19:cf:ca:be:46:06:e6:9b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Jun 19 10:34:06 2025 GMT
            Not After : Jun 20 13:48:06 2025 GMT
        Subject: CN=9527AB4E28D74BB69B82A84C6DEAA83AA58DD444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:d9:c7:2c:e1:6b:bc:2e:a1:33:16:46:0b:
                    00:78:e4:f9:dd:43:d8:9d:36:0b:8a:d9:5d:2c:f8:
                    b3:b0:8c:be:30:e0:83:ae:39:36:71:5e:5d:80:c9:
                    2a:1e:ce:20:8d:4e:d9:6f:9a:81:6e:11:96:22:5c:
                    05:e2:98:2e:a0:cf:53:aa:f6:3d:72:00:f4:e0:0a:
                    a6:64:eb:7e:59:99:2c:eb:74:92:2d:dd:fe:f4:07:
                    a9:f1:22:44:fc:14:aa:fa:2c:56:ff:86:4b:7a:ad:
                    2e:d4:5b:0c:d9:5f:c9:48:e0:b3:a9:97:6a:26:7b:
                    bb:39:b9:26:4f:a0:18:50:f8:19:98:af:4d:63:91:
                    67:1e:d9:33:26:d5:57:9f:b2:0d:fe:94:40:f7:a0:
                    a9:b2:23:34:0a:58:d6:47:71:93:7f:6b:e7:2d:73:
                    ea:98:a6:c7:9e:89:c9:7d:3f:ba:62:72:da:b7:04:
                    3a:ff:ec:8b:75:22:92:a0:b2:93:b1:ca:86:2e:79:
                    65:68:df:93:81:40:25:4f:ed:7d:46:fe:15:10:93:
                    65:01:4f:83:56:9e:ed:f3:73:f7:9c:a5:8f:c9:b3:
                    7f:b5:7b:6b:c3:87:16:57:c8:5c:0e:47:97:bd:02:
                    36:a2:fd:ad:c8:2b:d2:fb:ab:b8:9d:b5:73:cf:42:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:27:AB:4E:28:D7:4B:B6:9B:82:A8:4C:6D:EA:A8:3A:A5:8D:D4:44
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:6a:c8:a1:f4:1d:e0:81:75:9c:37:7e:3a:9a:8a:e0:5a:
         64:61:a9:e5:09:52:cc:a3:84:eb:71:a7:d9:39:d1:d2:d4:a1:
         72:9a:ab:a4:fc:31:16:f3:59:f1:1e:b9:f2:ba:84:04:91:29:
         2f:64:8c:0c:8c:b4:12:0b:df:f9:f5:29:6a:e5:8a:f9:95:4d:
         1f:3b:2f:84:07:c5:93:cd:bc:34:bc:58:f3:1a:77:b1:9d:85:
         d6:ff:7d:a5:0d:8e:01:d2:58:e7:70:6f:0d:6a:5d:44:d4:9c:
         d8:a5:c9:99:a3:14:fa:21:88:e8:1b:d0:01:ab:6c:1e:22:9f:
         92:23:c0:0e:41:f1:7d:b2:37:17:75:e1:a4:79:bf:d5:18:a1:
         3b:8d:e0:c6:e2:70:52:15:61:c2:fa:ab:ea:3b:68:82:ff:e1:
         22:1c:7c:ee:31:df:74:00:25:2a:92:f5:20:6d:81:9a:81:5f:
         91:f3:ca:5c:02:80:7a:a4:d9:3c:1e:25:21:e4:34:4f:b7:f4:
         7c:5d:27:26:6a:83:b9:89:6b:2a:fa:a0:24:7f:e8:7b:c5:1f:
         da:4b:59:d9:0d:9c:09:42:bc:f7:62:87:d2:74:ba:be:49:52:
         05:26:1e:97:a4:2e:d6:60:6f:f7:94:59:68:68:4f:3a:bd:98:
         25:eb:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:52:57 2025 by rpki-client