Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
File:                     D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft (raw, json)
Hash identifier:          s2qKuTSzVnjMzKcwzIR51l7oMujY1DcSfG9bBZlxp+Q=
Subject key identifier:   11:4F:EA:69:58:ED:CE:80:90:6F:E8:41:6F:92:C2:6C:85:5D:7D:5B
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       75FE57323D3EEAD63BCEB394F63C53931A2302D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
Manifest number:          16
Signing time:             Sun 10 Aug 2025 02:49:43 +0000
Manifest this update:     Sun 10 Aug 2025 02:44:43 +0000
Manifest next update:     Mon 11 Aug 2025 06:16:43 +0000
Files and hashes:         1: D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl (hash: KC0x6cwjviAqntwdZNmxRjP0hfuY7qkMzRTIqwP8AhM=)
                          2: 34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (hash: mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=)
                          3: 34352e3138322e33342e302f32342d3234203d3e20323639323635.roa (hash: xOoERlEhSi9M48UCfsW4Jh3De+JMGZNiha1TchGUW94=)
                          4: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=)
                          5: 34352e3138322e33352e302f32342d3234203d3e20323639323635.roa (hash: mySaU6fwlINwOm8Fs2UnMlGXQ421idH9Xpz0cducaT4=)
                          6: 34352e3138322e33322e302f32342d3234203d3e20323639323635.roa (hash: gDKF4Wwnv8nYlZMHxKheOOJRwPHFzRP2IDSa3GY2Mi4=)
                          7: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: pCzDonosnG1M/FMYP6mGKnR9D//kOSapxlVj/nSW3nk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 06:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fe:57:32:3d:3e:ea:d6:3b:ce:b3:94:f6:3c:53:93:1a:23:02:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Aug 10 02:44:43 2025 GMT
            Not After : Aug 11 06:16:43 2025 GMT
        Subject: CN=114FEA6958EDCE80906FE8416F92C26C855D7D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:6f:a7:9c:b3:47:63:14:8b:78:8c:43:d9:
                    ca:9a:26:bf:a3:93:d9:5b:7e:e6:f1:6f:96:c7:1b:
                    76:f1:d0:ec:77:63:7c:c5:5c:57:2f:8e:35:e5:1a:
                    e7:7b:4b:92:6f:4a:3d:ef:41:4f:d2:02:b6:02:29:
                    9c:20:01:eb:d3:e4:ab:da:d9:b1:ba:76:87:8e:b3:
                    3d:b2:c8:5f:be:47:39:51:4b:bf:71:75:c4:bb:42:
                    f3:25:c8:45:b3:e2:0f:17:77:a5:d3:8f:68:8e:60:
                    b6:02:08:61:5d:2e:4f:23:e7:28:df:04:7d:eb:37:
                    a4:05:7a:70:e5:50:0a:3d:6c:de:41:76:14:6d:e9:
                    ef:60:fe:86:77:be:3e:4c:45:34:2a:d3:4f:b0:3f:
                    44:17:54:95:0c:e3:54:2b:4c:11:5f:ac:2b:75:63:
                    cb:6c:8a:a0:95:af:a4:e4:fd:44:f9:48:ba:95:b8:
                    63:74:6b:c5:50:94:c6:8c:bc:db:2f:b6:f2:a9:c7:
                    d9:ec:09:e3:57:62:2e:ab:32:ab:13:ac:81:f7:5c:
                    77:b7:91:34:67:31:58:a0:ab:39:e0:aa:1f:f7:ad:
                    44:dc:78:b6:ff:97:d8:78:6b:a3:23:c3:53:d2:2e:
                    20:98:7d:bc:a7:d5:3b:85:83:8e:89:6e:ac:b7:b9:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4F:EA:69:58:ED:CE:80:90:6F:E8:41:6F:92:C2:6C:85:5D:7D:5B
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:55:f5:2b:a7:22:96:78:82:7e:c2:22:d3:bc:b8:c7:a5:1a:
         5b:bd:9d:dc:fb:5a:b7:36:8a:0f:b0:64:84:35:79:b8:29:8d:
         69:83:f2:a6:ff:1b:14:cf:41:a1:6f:e4:8e:c1:ef:9b:cb:06:
         9e:1a:8c:70:03:13:18:9f:3a:cd:6d:80:1e:47:c5:33:74:52:
         4d:4e:ff:08:08:a7:cd:7a:fe:c3:2c:20:e6:b4:fc:b4:e4:40:
         ee:f9:92:64:98:24:58:36:88:df:0f:7e:e7:d4:84:86:2b:39:
         f5:6e:a3:79:52:70:e0:65:1f:aa:71:03:ca:0f:e1:12:16:2b:
         ca:72:f4:e6:1e:03:dc:1f:fb:b2:13:32:42:43:e1:0a:b7:dd:
         6e:25:8a:7b:24:0a:84:2d:70:01:4b:da:d3:7e:b0:c0:3b:61:
         06:34:a7:7a:a1:a4:7a:d3:fa:2c:06:61:03:48:99:ba:a9:e1:
         6a:bb:59:05:3f:be:a6:e4:3c:de:89:75:66:4f:19:51:be:ef:
         b3:0e:9e:93:02:01:20:37:f3:69:5a:a0:87:79:1a:69:a9:65:
         e4:46:b0:9b:aa:c3:34:80:36:06:49:ae:e3:d3:bb:27:e9:4e:
         78:cb:63:ed:20:a7:a3:dd:07:c4:f0:95:6b:d9:5a:8f:13:0d:
         b6:30:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:02:11 2025 by rpki-client