Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
File:                     32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft (raw, json)
Hash identifier:          zqTh8U8oyYW0umO5ZgIVMyjajJ+q3HFPe5beCriZ4D0=
Subject key identifier:   E5:34:0B:90:B4:CD:17:DC:53:17:27:B3:07:20:D9:DF:86:3A:2F:6A
Authority key identifier: 32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0
Certificate issuer:       /CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
Certificate serial:       79C0BC511ED25BB0F17B867048B92C9E71D2A37E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
Manifest number:          0152
Signing time:             Wed 06 Aug 2025 04:34:16 +0000
Manifest this update:     Wed 06 Aug 2025 04:29:16 +0000
Manifest next update:     Thu 07 Aug 2025 07:33:16 +0000
Files and hashes:         1: 32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl (hash: 3Lerjcgn5r/ERo/WCjjOdElel+kxyhRZ/IVL6ufqJb8=)
                          2: 3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (hash: rop4d3c5H1BlFCl8sb/JrVZsMIWJYPAeE2mZAUHcq/Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 07:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c0:bc:51:1e:d2:5b:b0:f1:7b:86:70:48:b9:2c:9e:71:d2:a3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
        Validity
            Not Before: Aug  6 04:29:16 2025 GMT
            Not After : Aug  7 07:33:16 2025 GMT
        Subject: CN=E5340B90B4CD17DC531727B30720D9DF863A2F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:b3:9e:32:54:fe:0e:23:df:bc:ea:16:79:
                    83:42:c5:d0:80:fa:5c:06:60:99:42:29:ac:1f:d9:
                    42:ee:5f:12:8d:56:1c:2c:ec:3b:0e:c4:93:4b:ff:
                    64:53:67:48:dd:49:76:3c:59:a9:46:75:c5:07:57:
                    6a:e8:a0:72:46:97:e4:80:5f:0c:a5:8b:51:a9:39:
                    96:93:49:81:ae:05:1a:2b:c2:cd:cd:be:5f:f4:4c:
                    73:67:d4:42:f0:3a:41:68:61:88:b2:29:66:d8:0c:
                    d6:2c:96:ac:f3:4e:11:f8:01:1f:7a:b2:12:37:cc:
                    31:10:82:84:99:c9:37:fe:24:30:e8:ee:88:9e:83:
                    7f:eb:28:c9:32:19:7e:4b:87:1c:5b:b5:cf:86:7e:
                    08:3c:eb:2a:58:5c:bd:68:4b:f9:ae:0d:db:55:6b:
                    5d:c1:84:cc:d8:0e:fe:17:9e:ea:5e:6c:fd:0e:eb:
                    e5:30:43:b9:a7:00:83:d0:d4:44:08:13:9c:d4:00:
                    18:b5:a0:a5:43:d5:98:53:60:50:a2:1e:26:81:54:
                    4f:fe:e5:21:d2:d1:ba:f0:b7:cd:d8:cc:be:3d:c5:
                    44:53:db:e2:c9:68:db:6e:14:5c:b2:a3:b8:28:dc:
                    db:26:67:7c:91:65:02:bd:36:77:16:9f:59:8f:5e:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:34:0B:90:B4:CD:17:DC:53:17:27:B3:07:20:D9:DF:86:3A:2F:6A
            X509v3 Authority Key Identifier:
                keyid:32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:c5:ea:11:37:aa:bc:7a:86:35:d7:92:c8:6a:91:51:b6:
         ae:17:45:69:5c:6f:f1:75:74:1e:96:d5:c9:1b:32:81:96:8b:
         03:de:63:ee:2d:74:0e:9f:04:cf:ab:cf:48:ba:02:4f:a0:52:
         a0:c4:96:0a:ed:64:cd:17:ae:94:a2:28:84:24:e1:be:c0:fd:
         fc:23:bb:21:d6:95:c6:ac:3b:67:0b:15:f9:b2:d6:e0:05:e2:
         a9:e7:b6:48:c5:34:d6:f8:73:99:7f:a9:1c:20:e8:37:7c:e3:
         13:71:7c:39:5d:6c:6f:fd:b5:11:8b:2c:af:6d:a6:cf:45:14:
         02:cb:75:19:0b:93:74:45:90:d1:cd:74:5f:2e:6c:bf:e0:0a:
         e6:2d:a9:ea:50:c5:23:24:3e:da:1e:a7:1a:21:7c:f3:9a:96:
         3e:d2:b8:c7:d1:02:b9:21:eb:e9:3e:1b:2c:d4:73:4d:47:d4:
         85:68:d0:65:d2:d1:03:21:76:79:64:ac:a5:19:f3:ab:ed:fe:
         28:3f:53:c6:c4:08:6e:10:81:04:40:84:c5:5d:e8:24:6a:bb:
         81:43:7a:33:e3:d7:11:97:ad:30:e3:38:fa:0d:6f:79:60:a9:
         a5:27:24:32:08:da:d2:e5:ff:2f:9c:3c:e2:34:9b:56:93:ad:
         d3:f3:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:42 2025 by rpki-client