Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
File:                     C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft (raw, json)
Hash identifier:          lxXY9O70a6qO2aN787sQuSNb1DSg1iDY7FTdfJb1xLw=
Subject key identifier:   C5:0D:49:DD:30:2F:76:57:CC:83:46:A2:24:63:3C:6E:B6:9C:6E:A8
Authority key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98
Certificate issuer:       /CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
Certificate serial:       07FDA67CCFCE34CB640527B8FF05A778E9CAC9AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
Manifest number:          0137
Signing time:             Thu 19 Jun 2025 16:28:06 +0000
Manifest this update:     Thu 19 Jun 2025 16:23:06 +0000
Manifest next update:     Fri 20 Jun 2025 16:51:06 +0000
Files and hashes:         1: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: ZOMpNQQFAOvKLXhCdW+85iyzxpwZ11NO+4/XyI4bgpw=)
                          2: 323830343a336561633a3a2f33322d3336203d3e20323636363134.roa (hash: A4ecR9vAgS5CiKSAYwfCotm8CVJBNgZvk5nFjxTh6Bs=)
                          3: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl (hash: KGKve4qmK51NdxU3KcaHi0eobWHzc3EJgIhSFDH4DMM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl
                          rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 16:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fd:a6:7c:cf:ce:34:cb:64:05:27:b8:ff:05:a7:78:e9:ca:c9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
        Validity
            Not Before: Jun 19 16:23:06 2025 GMT
            Not After : Jun 20 16:51:06 2025 GMT
        Subject: CN=C50D49DD302F7657CC8346A224633C6EB69C6EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:76:32:11:93:51:a0:3b:c7:36:c2:3d:df:
                    ab:30:13:05:b4:20:e3:29:c9:30:0a:4f:30:a8:80:
                    16:40:92:31:91:0e:2a:1e:64:99:58:75:2b:c3:ac:
                    c5:24:29:79:91:86:df:03:4e:a4:81:b9:04:50:e1:
                    93:8e:b8:7c:5c:03:6b:1f:35:06:cd:bc:c6:0d:2e:
                    ec:ee:fa:0f:d9:09:ee:83:33:50:be:23:56:72:8a:
                    4b:58:a5:2e:f4:4c:26:ee:6d:28:a2:a3:ce:b2:54:
                    0c:14:1d:3c:3a:21:f0:5d:01:79:fa:65:a7:bd:7a:
                    c2:67:00:6e:e1:9a:e6:6d:d1:2f:e6:bb:40:53:5d:
                    52:a2:0f:8e:bf:2d:6d:63:8a:92:4c:f5:25:4b:6b:
                    4a:d7:c5:51:ba:84:dd:39:5a:0e:73:2d:d1:a9:d1:
                    e5:d4:2f:fe:6e:c1:dd:e2:f9:90:e6:2c:20:ab:cc:
                    b9:43:45:d6:23:aa:da:62:ec:7d:5a:bd:35:5c:bc:
                    2a:59:7b:c6:ab:5e:35:3c:5b:bb:a2:71:23:15:a5:
                    56:bf:71:40:20:dd:cf:55:84:c4:ba:ab:5b:b0:c3:
                    b0:ee:16:42:b9:4f:fe:d0:e3:6c:ef:3c:68:a2:ec:
                    d1:6c:88:65:bf:0b:7e:13:a2:8a:ed:1e:51:b0:69:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0D:49:DD:30:2F:76:57:CC:83:46:A2:24:63:3C:6E:B6:9C:6E:A8
            X509v3 Authority Key Identifier:
                keyid:C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b2:9b:33:2b:99:c5:a9:f1:d8:b9:be:da:42:87:98:93:cd:
         53:15:4f:3c:a8:b6:8e:be:7f:87:3b:7b:aa:5e:00:de:ff:7e:
         b9:81:11:c1:b4:a2:de:17:89:31:2f:fc:3b:dd:82:c9:c9:8f:
         1f:61:1a:e8:6a:0d:e9:ad:6b:1c:b0:f2:71:9f:27:04:a9:a1:
         eb:d1:d8:7a:81:0f:dc:4a:55:a7:35:c8:9b:6d:51:1b:d6:9d:
         32:ea:61:e5:d3:d4:c9:da:3a:72:0e:d9:62:0a:f9:c9:40:93:
         91:d3:0f:16:b0:a2:79:29:ba:d9:d6:d2:9c:07:61:15:35:08:
         05:86:4e:cd:ed:e5:27:ba:d0:0e:42:47:6b:1f:c6:e1:55:06:
         3d:ab:10:6e:45:90:bd:e1:26:60:e3:dc:98:ba:f4:55:c1:24:
         68:3c:cd:e8:0e:14:0c:86:db:b8:65:68:56:9f:2c:1e:ac:29:
         4c:57:cb:d9:d4:ab:fe:30:3d:16:d0:01:33:74:09:2b:7b:b7:
         37:16:11:b9:27:9e:87:59:65:66:0e:6f:2b:35:89:a3:cd:27:
         29:0c:63:a8:9f:ea:24:72:f1:a0:c0:37:78:e7:6a:50:ed:3a:
         05:4b:3b:bb:d7:26:d6:11:28:47:b7:bd:bf:86:f7:48:a6:5f:
         5c:8f:ba:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:32:58 2025 by rpki-client