Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
File:                     118E5C07438A61E8178F2D60B6311E817D88D0ED.mft (raw, json)
Hash identifier:          VJZZ0gbmZN31U5NVeKcMAwcGwtEZ0rjYYb1TjQ2aBFE=
Subject key identifier:   74:97:C6:5A:FA:1C:01:4F:44:81:CC:01:F4:EF:73:4F:3F:A8:AD:EE
Authority key identifier: 11:8E:5C:07:43:8A:61:E8:17:8F:2D:60:B6:31:1E:81:7D:88:D0:ED
Certificate issuer:       /CN=118E5C07438A61E8178F2D60B6311E817D88D0ED
Certificate serial:       331D6921815E5A9D4DF146D7A6800690C02D9F99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/118E5C07438A61E8178F2D60B6311E817D88D0ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
Manifest number:          D2
Signing time:             Tue 05 Aug 2025 14:34:29 +0000
Manifest this update:     Tue 05 Aug 2025 14:29:29 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:29 +0000
Files and hashes:         1: 34352e3137342e3138382e302f32322d3235203d3e20323634353632.roa (hash: XmQStU645GhpszXRckQYuCw3A+YCCh6P3688khXQx8o=)
                          2: 3136382e3233322e38342e302f32322d3235203d3e20323634353632.roa (hash: +hUDCSO+1+GRP+GclJ3kjHimBOjsSHv6CHF7XpeCU8Y=)
                          3: 118E5C07438A61E8178F2D60B6311E817D88D0ED.crl (hash: ZBMH7JjTSzRchscxcCgGGkM4/ysRyzvZ7PZ4CcSJga8=)
                          4: 3133382e33362e302e302f32322d3235203d3e20323634353632.roa (hash: SqXLvkvzeKuEXT0AxzGiLO4gKHa0PSqAM6TJH+MVfHc=)
                          5: 34352e3233392e382e302f32322d3235203d3e20323634353632.roa (hash: L2ZgVPwLpkN6rm5n10NEFM9BrNnN4g7TjfnehHx1rZc=)
                          6: 323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (hash: gDg8gnEx5/aUykHzwCDiWVxYiYS+49AKLXolSRnuG2c=)
                          7: 3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa (hash: keBsc921ylJxWPNKR3T8VNr6QGHVrmxn7iAA5871dgU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.crl
                          rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/118E5C07438A61E8178F2D60B6311E817D88D0ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1d:69:21:81:5e:5a:9d:4d:f1:46:d7:a6:80:06:90:c0:2d:9f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118E5C07438A61E8178F2D60B6311E817D88D0ED
        Validity
            Not Before: Aug  5 14:29:29 2025 GMT
            Not After : Aug  6 16:00:29 2025 GMT
        Subject: CN=7497C65AFA1C014F4481CC01F4EF734F3FA8ADEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:86:31:5b:ef:2d:cc:47:a6:71:6a:2e:be:
                    2c:bf:7f:1e:1f:3b:c3:2a:65:41:db:0e:1d:78:dd:
                    ee:ab:c2:fd:04:52:f3:b5:c1:1e:64:3f:90:ee:3d:
                    2d:2a:aa:b1:4f:83:a2:fb:e4:ce:0f:ba:b9:00:69:
                    52:72:84:7b:11:52:11:50:10:63:45:06:b6:e7:c7:
                    17:ec:55:70:3c:57:81:1f:ee:1f:d8:a7:8b:67:42:
                    c8:5c:00:72:2f:ad:dd:fe:ad:95:42:17:04:fc:d8:
                    a1:4c:98:ab:d2:74:57:e6:84:a3:39:e5:fc:4d:5e:
                    3c:07:0b:28:bf:36:af:c6:f8:9d:f7:3a:47:35:2c:
                    47:a8:b4:1f:e0:27:ea:9f:f4:4c:20:ab:85:37:fa:
                    b0:d6:a5:e6:8e:89:f2:6f:18:d5:90:42:81:03:ae:
                    c8:9a:f2:b0:b8:1f:bf:58:59:3a:61:0e:88:38:67:
                    75:10:d3:15:33:0d:c7:ab:4a:e3:ee:33:06:4c:d5:
                    f2:af:b2:49:cd:91:20:1b:58:14:c3:10:44:a6:18:
                    1a:1e:ed:83:8b:9e:78:ae:33:80:ac:5a:7e:c9:11:
                    36:7a:fb:19:f2:76:ec:f1:d6:a2:69:de:b0:2b:98:
                    16:6f:72:5f:6a:31:a2:03:b6:a1:a6:22:b3:b1:99:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:97:C6:5A:FA:1C:01:4F:44:81:CC:01:F4:EF:73:4F:3F:A8:AD:EE
            X509v3 Authority Key Identifier:
                keyid:11:8E:5C:07:43:8A:61:E8:17:8F:2D:60:B6:31:1E:81:7D:88:D0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/118E5C07438A61E8178F2D60B6311E817D88D0ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:80:38:33:85:4a:ce:bb:c0:2b:0e:e0:6b:ad:d0:14:ec:ad:
         76:ba:70:cf:b1:2d:da:44:aa:b9:90:ce:4e:b3:ec:f1:25:41:
         29:ac:ed:23:db:4a:65:87:e1:2b:74:7f:e7:77:73:c0:3e:12:
         27:a7:a7:26:5f:fa:1e:6d:4c:97:0c:f0:92:2f:84:92:b5:9d:
         45:96:a4:fa:d4:86:21:f4:e8:3b:33:e8:09:ca:48:d9:8d:50:
         2e:e2:1c:e2:fb:72:a6:ce:35:e0:d0:5e:f2:1d:cf:40:ae:3c:
         73:0c:12:e0:39:cf:6a:01:44:f3:b0:a4:58:25:24:84:df:1d:
         41:f4:32:b6:92:bc:5c:7c:03:6d:bc:53:ec:93:4a:2e:e5:fa:
         b8:ad:19:c5:c7:4f:1c:91:c6:47:e9:b6:85:23:ae:09:85:5e:
         22:0e:76:18:aa:a2:34:12:e5:7a:35:fe:24:72:56:5b:ef:4a:
         ed:7a:33:39:df:bd:fd:fd:91:7b:7b:75:1e:c5:2c:17:15:86:
         1c:90:bc:fc:03:9f:db:21:fe:78:12:35:d7:9d:21:0a:59:a8:
         7b:ad:89:25:de:49:94:be:e7:cf:2c:72:ec:bc:2c:02:06:bd:
         67:b5:f1:31:52:41:73:90:81:b6:1d:83:fc:d0:2a:47:cc:77:
         d8:1e:5f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:49 2025 by rpki-client