Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft
File:                     BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft (raw, json)
Hash identifier:          CL3LUuAumVn8oGErTYF0PGDSTt0LRBZ7P4FjVO5146c=
Subject key identifier:   8B:33:45:72:BF:57:88:2A:B2:BC:5F:DD:A9:4D:15:7A:0B:D2:51:BC
Authority key identifier: BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2
Certificate issuer:       /CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
Certificate serial:       5E8F07E79E987B56B3983028E036A6A292174410
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft
Manifest number:          11
Signing time:             Tue 05 Aug 2025 04:20:58 +0000
Manifest this update:     Tue 05 Aug 2025 04:15:58 +0000
Manifest next update:     Wed 06 Aug 2025 06:03:58 +0000
Files and hashes:         1: 34352e3232372e37322e302f32332d3233203d3e20323637303331.roa (hash: xL4eCN9ul1sOkaNr10dTrr89dxuxnHuAvZaBgv3zO7U=)
                          2: 34352e3232372e37352e302f32342d3234203d3e20323637303331.roa (hash: IfaquqaoivL26d1OjY6PpZSDsvxzskeTVPDpGvc3jqk=)
                          3: 34352e3232372e37342e302f32342d3234203d3e20323637303331.roa (hash: 6aH6ZQJqtarmshIsgAlnFmKLNNZSP/YKOnRfScyY8os=)
                          4: 323830343a343731383a3a2f33322d3332203d3e20323637303331.roa (hash: 9qwL2su4wrJRHsH0+w0NkndiAM2MA1mn01NB9ublabA=)
                          5: 34352e3232372e37322e302f32342d3234203d3e20323637303331.roa (hash: w5ovtBzu7Z0KlHqpNI4u+ZsEKHIpNXKgP4ziFqPQmZQ=)
                          6: 34352e3232372e37332e302f32342d3234203d3e20323637303331.roa (hash: Vp2I9nHMSr7Yl1jHc5rcIzpxT+3dwPPrpUNGJ/bdvTA=)
                          7: BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl (hash: xNa/H6+9jNAC+MmjRda0kmcbz7ZkjeHbvX/qs4nGTPU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl
                          rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 06:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8f:07:e7:9e:98:7b:56:b3:98:30:28:e0:36:a6:a2:92:17:44:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
        Validity
            Not Before: Aug  5 04:15:58 2025 GMT
            Not After : Aug  6 06:03:58 2025 GMT
        Subject: CN=8B334572BF57882AB2BC5FDDA94D157A0BD251BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:d4:e5:25:9b:f0:cd:63:7e:e3:6c:78:c9:
                    0d:02:0d:ff:22:5e:34:1d:33:ee:f6:64:f3:df:92:
                    74:08:44:1d:e5:b8:ae:a3:86:70:bc:d7:55:86:eb:
                    69:9c:06:6c:fc:49:bc:bb:f3:3a:86:e7:08:36:90:
                    e9:88:4e:b9:d8:fc:05:d0:a1:56:a1:05:d9:96:18:
                    1d:ba:b9:e7:a8:3f:b4:49:09:88:5d:20:7e:6e:7a:
                    17:0b:26:25:a5:16:d7:b3:7a:1a:00:0f:20:b9:46:
                    05:93:03:84:fd:b9:66:ed:c9:64:e4:26:44:36:27:
                    90:c5:1b:76:1c:37:da:3e:58:0b:2b:df:75:35:44:
                    ab:a5:d6:d1:8c:83:42:40:db:3e:35:9c:d1:ff:0a:
                    9f:f0:af:0c:38:fd:0c:0e:49:f2:ca:f7:8e:d0:6f:
                    e3:bf:bf:56:80:27:7f:1e:dc:40:84:da:17:c8:68:
                    64:31:b4:d5:66:6d:a5:7b:33:48:b2:02:8f:0c:21:
                    c9:d8:4b:56:a4:8f:26:11:ec:f1:f3:8b:d5:4d:32:
                    2e:31:97:d6:36:20:a0:5f:4d:26:04:78:ac:1a:f4:
                    82:1c:a5:1f:bc:5c:e9:c2:3b:4f:99:6d:e8:26:12:
                    a5:fb:c4:49:44:b4:86:c2:46:aa:c1:8a:06:5d:d4:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:33:45:72:BF:57:88:2A:B2:BC:5F:DD:A9:4D:15:7A:0B:D2:51:BC
            X509v3 Authority Key Identifier:
                keyid:BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:06:2b:b3:81:fc:69:c4:fc:65:32:7b:41:bb:ab:0e:49:56:
         0c:d8:93:cd:3a:7a:96:de:c4:8c:86:15:c3:89:d1:7d:97:5e:
         e9:b8:48:92:16:2f:ab:55:c3:dc:9a:be:6f:bd:10:03:46:9b:
         86:1b:a7:17:03:b5:58:71:8d:fd:80:40:f9:85:61:d8:a2:3f:
         2f:a7:76:71:e4:02:dd:d1:87:f9:c8:d7:0f:2d:9f:cf:6b:a0:
         35:c5:ee:91:00:fb:bd:18:a8:02:fd:07:1b:ef:eb:1c:6e:17:
         ba:ff:58:58:09:06:a2:f7:7a:3f:9c:94:c4:0d:5a:31:b2:33:
         29:40:fb:53:a8:ba:03:8b:3c:b7:3b:40:94:32:96:8a:62:67:
         bd:f4:41:98:cd:1f:ff:23:6f:92:e5:47:b3:1e:96:e9:38:7a:
         9b:63:b9:64:c6:ff:85:98:38:3f:d9:1e:9d:1d:a9:a7:2a:66:
         bc:7e:e7:07:32:1c:0c:15:01:01:d2:be:a5:3e:e9:84:30:b8:
         7b:6e:03:7b:16:82:f5:14:20:c2:47:6a:83:e9:5d:b4:45:cd:
         e7:d1:38:78:c3:01:53:f8:16:f5:02:84:c9:0a:3a:c2:69:59:
         7a:63:c7:1b:48:31:c6:35:1d:0c:e8:11:6e:f0:ab:2a:70:6e:
         4f:1b:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:49:05 2025 by rpki-client