Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
File:                     C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json)
Hash identifier:          IKGN/5N0OrrHbR6rEUtQH5movyKlGpF4BhFUbHE7epw=
Subject key identifier:   2A:09:D3:2C:A2:4D:FC:61:F1:E0:5E:A6:DD:D6:94:3C:E3:09:36:B1
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Certificate issuer:       /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial:       0159E6488ECEBE09EF8BD0A34E3E11CA717C6F93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
Manifest number:          0289
Signing time:             Mon 04 Aug 2025 07:56:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:51:36 +0000
Manifest next update:     Tue 05 Aug 2025 10:28:36 +0000
Files and hashes:         1: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: 1k00bMaA5+dsPTsaZo8EkP3hez6kVata/+EL1B7NLek=)
                          2: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: eejBLggiYj37kDclWKgj4SmkHwMNAd/J0lED8cH3EwA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
                          rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 10:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:59:e6:48:8e:ce:be:09:ef:8b:d0:a3:4e:3e:11:ca:71:7c:6f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
        Validity
            Not Before: Aug  4 07:51:36 2025 GMT
            Not After : Aug  5 10:28:36 2025 GMT
        Subject: CN=2A09D32CA24DFC61F1E05EA6DDD6943CE30936B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:c6:ef:84:1c:ae:ec:b4:ea:aa:eb:9d:ef:
                    97:f1:91:95:c9:aa:9e:f8:66:e4:f1:6c:f1:e3:72:
                    d1:20:fb:71:52:45:c8:75:3a:fa:5f:12:69:78:2a:
                    f3:a4:df:8b:47:89:35:61:ad:65:89:a9:45:b1:83:
                    9d:b8:3d:db:98:b8:da:59:f9:06:a7:90:86:e9:d1:
                    fd:b6:be:7c:8c:c8:7f:07:33:c0:b7:b7:6c:05:78:
                    0b:e5:ed:80:22:13:8b:0b:07:d2:61:d8:f8:6c:bf:
                    74:04:4a:c4:e9:16:38:b6:13:cb:7f:6c:4f:a5:8b:
                    a0:ab:9c:e7:2f:3c:60:51:c4:1d:f2:b3:c5:65:cb:
                    7b:75:16:4a:16:48:c3:85:f0:87:1f:19:7a:19:50:
                    80:8d:2d:d0:3a:53:86:bb:1b:b1:18:bb:0d:7e:c4:
                    e6:78:a4:b3:ae:a7:00:46:18:27:c9:5b:d7:f2:af:
                    ca:27:3b:5a:38:26:c5:ce:77:13:a6:31:f1:85:29:
                    96:68:b2:5a:71:44:2f:46:66:ef:8f:d5:2b:39:c7:
                    2d:42:32:90:d6:1e:31:94:19:aa:e4:9b:1c:6f:1e:
                    d7:82:bc:2b:50:8b:d4:34:4f:4c:5c:e5:70:e5:1c:
                    a2:24:c2:0e:91:2a:d6:99:51:6d:37:b2:4e:ac:45:
                    81:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:D3:2C:A2:4D:FC:61:F1:E0:5E:A6:DD:D6:94:3C:E3:09:36:B1
            X509v3 Authority Key Identifier:
                keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:9f:7a:49:93:e6:ff:7c:6b:b5:f1:5f:e4:79:72:ef:18:d5:
         c1:4b:fc:5f:42:00:f3:eb:5d:b0:cd:a8:fb:67:7a:da:59:45:
         4b:55:51:9d:6a:f4:f3:ff:44:bb:7c:0b:91:36:0b:ad:91:75:
         ef:58:25:19:1f:2b:07:ea:0a:5c:16:6a:b6:66:84:f1:3a:44:
         06:51:68:8d:1a:98:f5:06:e8:27:59:e6:37:6c:c8:3c:9b:f2:
         5f:ee:86:87:8a:46:60:22:1c:58:a4:a7:29:29:60:4e:8d:74:
         3d:b5:a1:f9:15:fc:44:8f:6a:ca:d6:3e:93:0b:3d:98:8c:56:
         fc:d9:04:f1:4b:2e:95:2c:65:fd:57:4b:ae:5a:70:72:95:ef:
         95:5c:37:d7:29:f9:f0:9d:0a:32:6c:2e:b0:20:49:84:55:04:
         20:9c:4b:a0:ed:18:61:20:4a:21:e1:19:00:19:52:d6:66:d9:
         e0:27:5d:17:f6:b8:04:8c:c3:b3:75:2c:09:7a:e2:6f:5c:f1:
         8a:35:48:a2:90:fd:6d:a7:99:3e:36:67:65:9c:24:2f:12:f3:
         dd:a0:a4:f9:5b:f1:81:07:ae:37:84:8c:6e:71:bf:b2:39:a4:
         c1:98:9f:32:0a:65:20:15:eb:00:1a:b9:f8:3f:ca:07:ac:55:
         a7:c2:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:56 2025 by rpki-client