Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
File:                     1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft (raw, json)
Hash identifier:          hYG7vaHLH2LPBNxO4m/UDnE0S4RsboS3VDwXsQyi6SM=
Subject key identifier:   D3:01:CF:13:D9:18:9E:8B:21:4D:0E:68:09:3D:25:00:3F:18:3A:ED
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       34BDEFFC76494E5AD2715D2BDA011A9474AE14A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
Manifest number:          028D
Signing time:             Tue 05 Aug 2025 05:26:47 +0000
Manifest this update:     Tue 05 Aug 2025 05:21:47 +0000
Manifest next update:     Wed 06 Aug 2025 08:44:47 +0000
Files and hashes:         1: 323830343a373462633a383030303a3a2f33332d3333203d3e20323731303030.roa (hash: UT1Qo9jWpNXCeoK8TpsmwpaEEr7IdRF0GXFiz6yQBAw=)
                          2: 323830343a373462633a3a2f33342d3334203d3e20323731303030.roa (hash: LBzseJQFBYOzX2kFlFzDSspdH9msy9WYfzkZqH5RVC4=)
                          3: 323830343a373462633a343030303a3a2f33342d3334203d3e20323731303030.roa (hash: HyVszwwiBUG77VRN2aPkwHz1Ib4slK0nCT3FwTW9tuk=)
                          4: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl (hash: d32Rxn/2Z8c1251cx/u5JNjdheXG9n6DNKrCmAsWw44=)
                          5: 323830343a373462633a383030303a3a2f33342d3334203d3e20323731303030.roa (hash: c7B2oBNU+NSQ80AJaKEXqc/7UE0T9xREF7Z8vDxvfEk=)
                          6: 323830343a373462633a633030303a3a2f33342d3334203d3e20323731303030.roa (hash: fgZeLnfZ9mI0Vy+2GBCtlM/Lar0qCuq0vaXpAO/IUIE=)
                          7: 3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa (hash: 2s9hs+kwMjjO6qbwwoZtnUG31mVPWkLhTujJzlJMdcw=)
                          8: 323830343a373462633a3a2f33322d3332203d3e20323731303030.roa (hash: i3X2PnejB28nRZIfGxqt9RFnTyfUqqOfONIh4nxooKA=)
                          9: 323830343a373462633a3a2f33332d3333203d3e20323731303030.roa (hash: q1NLMI7cM2e/T4XNMr+qGcbIp52bsbZ6mXNgwR+wi5M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 08:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bd:ef:fc:76:49:4e:5a:d2:71:5d:2b:da:01:1a:94:74:ae:14:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: Aug  5 05:21:47 2025 GMT
            Not After : Aug  6 08:44:47 2025 GMT
        Subject: CN=D301CF13D9189E8B214D0E68093D25003F183AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:23:df:cd:b2:d7:dd:fa:7d:10:19:5c:1e:
                    3a:13:ab:57:2a:e9:c4:c4:7c:b3:0b:94:fa:f5:43:
                    5a:51:6b:be:5b:ef:1e:d7:4e:11:99:df:f8:82:c8:
                    95:06:e7:55:ab:82:4e:2e:17:f8:bb:c9:2d:ba:84:
                    57:ac:fb:17:e7:f2:ad:15:a3:06:27:ce:fe:cf:8f:
                    5e:e6:ee:31:09:6d:4b:58:4f:69:3d:35:d9:ed:e7:
                    24:0f:a5:df:64:39:25:79:2f:65:8d:17:89:48:6f:
                    97:ca:20:b4:39:d4:52:97:4a:46:4f:c5:1f:a1:e9:
                    43:8b:92:aa:3a:7f:ba:52:70:47:4d:87:d1:82:1e:
                    af:0a:76:6e:d9:24:ef:a4:e8:0d:03:68:b8:4f:8b:
                    80:26:6e:57:f9:c5:5b:89:f9:60:20:a0:a8:a9:4e:
                    0d:aa:63:db:6f:e8:f8:ca:92:e8:3e:01:32:73:94:
                    7f:f5:9f:77:ec:46:37:8b:03:fa:ea:5f:35:e8:f3:
                    a8:e3:bf:42:9c:ae:49:7c:41:87:a2:58:16:bf:10:
                    a9:0d:39:4a:3b:4d:24:e4:2a:99:33:7a:1b:c4:17:
                    d5:b0:b8:fd:d1:e7:64:d7:d0:eb:57:e3:ef:85:f1:
                    21:71:da:a7:53:47:62:65:7e:21:e1:8b:d3:9c:44:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:CF:13:D9:18:9E:8B:21:4D:0E:68:09:3D:25:00:3F:18:3A:ED
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:ad:be:6c:58:2d:bb:f8:11:b9:b7:d0:41:28:a0:fb:bc:
         eb:a8:a2:31:a4:1e:f4:b2:7c:f3:b8:7f:ad:d6:4a:ec:9f:5e:
         10:6b:14:fb:23:97:40:79:d4:bd:92:fc:2a:14:60:da:d1:8b:
         62:43:38:bd:37:37:5e:66:a2:6a:02:a8:d0:12:29:6b:cf:93:
         97:d6:8e:af:01:0a:78:7e:27:e9:ce:65:9e:43:13:ab:2f:e3:
         49:ef:bd:18:a5:fb:a7:19:4e:13:a8:05:42:ab:6f:63:cc:4c:
         4b:10:81:8e:fb:bf:33:4a:9c:be:b8:69:aa:cb:f1:79:0b:ad:
         36:85:31:fa:82:c5:ce:4b:8f:71:b2:93:7b:d8:2d:b4:05:a3:
         5f:14:38:6f:3d:3e:bc:81:f1:e5:ea:c7:a8:df:2e:5a:03:76:
         05:cb:64:8c:2f:27:37:16:a2:5d:4a:58:30:38:4b:07:c2:4b:
         71:f5:c5:d5:eb:5f:8a:2b:ac:75:69:90:4b:32:f2:85:1f:73:
         c3:2b:74:71:25:f3:1f:6c:55:73:55:3d:a1:41:75:60:90:b2:
         65:85:d5:0a:f3:c4:22:8a:ce:80:ad:71:29:21:29:71:ad:f1:
         e9:30:36:44:ea:4b:cb:9e:63:77:2e:df:94:2a:be:b0:b6:8d:
         5d:27:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:52:21 2025 by rpki-client