Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File:                     89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier:          XQ7NQDT4LiRl9qv/nAl8oOhGScvHdzojxe0qhBQoSCE=
Subject key identifier:   94:88:7E:E1:A2:34:DB:F4:B5:FB:8A:21:13:6E:01:2E:5F:36:59:C4
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       69AFC9020B048B80899AED60A93786C56231BF8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number:          028A
Signing time:             Tue 05 Aug 2025 08:43:01 +0000
Manifest this update:     Tue 05 Aug 2025 08:38:01 +0000
Manifest next update:     Wed 06 Aug 2025 11:00:01 +0000
Files and hashes:         1: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: SWrzwXwolnoutKIMKyZMaHX5KhR6lUHbVz8RZjt55TY=)
                          2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 11:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:af:c9:02:0b:04:8b:80:89:9a:ed:60:a9:37:86:c5:62:31:bf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Aug  5 08:38:01 2025 GMT
            Not After : Aug  6 11:00:01 2025 GMT
        Subject: CN=94887EE1A234DBF4B5FB8A21136E012E5F3659C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:82:3c:aa:e7:b9:69:d6:69:bf:92:e0:98:
                    29:41:8a:ac:d6:ca:93:14:66:a2:fc:2e:57:58:94:
                    53:b5:dc:be:80:66:3e:df:3e:14:4e:38:6b:b8:4f:
                    02:d1:6d:96:98:49:35:0a:39:7f:d2:b0:82:be:ee:
                    31:b6:e3:7e:06:74:34:b6:22:a9:a5:40:36:0a:db:
                    69:fd:f7:3e:b0:1f:bf:80:81:c9:7f:ff:3b:28:21:
                    d7:21:02:6d:ff:1b:43:1c:33:21:60:85:ff:1b:71:
                    ad:3c:e8:02:c7:3e:be:5f:2f:9f:b5:de:c3:e5:dd:
                    ca:8a:0d:c4:b2:fc:8c:9a:88:d2:b1:09:a1:57:d7:
                    44:cb:dd:b4:84:7b:b6:a1:c2:8b:f3:e0:d0:49:44:
                    99:28:06:0c:4a:bd:e4:23:43:40:25:3f:d2:9a:48:
                    36:fc:a7:e9:e3:68:99:25:21:05:31:c1:85:4b:53:
                    9b:ea:59:25:91:1b:8f:fe:7f:df:18:95:c8:fb:da:
                    6d:c6:dc:bd:9f:d8:fd:24:78:4e:90:ee:c1:8f:7b:
                    cd:0e:60:b5:96:96:0a:0d:ff:19:77:f7:9e:d6:d9:
                    20:23:e4:bf:06:57:ce:3f:a1:15:b6:b5:30:a0:cd:
                    a3:1d:f0:cf:d6:ff:c1:40:e6:12:52:ff:2a:be:9d:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:88:7E:E1:A2:34:DB:F4:B5:FB:8A:21:13:6E:01:2E:5F:36:59:C4
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:66:0d:e0:a1:43:ee:f2:4c:92:9b:d5:c9:9b:25:fb:c2:
         f3:a9:ae:53:74:36:3c:9b:6c:9a:c8:fe:8b:ad:45:89:19:31:
         17:d0:8b:ac:41:63:a2:cc:05:a1:df:9c:4f:b8:ec:72:f1:17:
         49:42:37:c1:18:2c:82:5b:8e:d1:6f:b9:f1:e0:d4:7a:88:81:
         42:f4:17:87:8f:e2:65:97:47:1e:67:b1:a6:75:b2:a8:14:3d:
         10:75:ee:7b:20:69:ad:e3:bd:d5:23:e3:34:74:dd:fb:9e:2a:
         6d:ae:e9:be:15:bc:05:22:5f:75:dd:2f:fe:82:74:c6:f3:e9:
         a3:7a:b0:04:69:57:11:c2:2a:15:48:af:56:cf:cf:57:20:f7:
         5a:6e:bb:61:34:be:69:22:8f:66:ba:2b:de:a7:f1:6a:65:b5:
         cf:8c:4f:ec:8c:00:87:5a:29:1f:75:1b:cb:bf:1a:da:f2:39:
         1d:6b:f9:55:c3:5d:6c:e7:33:2a:bb:9b:30:1d:ff:8f:47:e2:
         68:85:43:4f:1c:16:03:9f:af:54:a4:f8:ef:c5:18:4e:2a:55:
         98:db:a8:ea:2e:64:85:44:b8:86:60:bf:17:50:e0:ff:2a:b9:
         e9:24:fb:20:c6:e6:0d:d4:ba:39:4e:fa:5a:c9:70:4f:c9:8c:
         18:1e:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:55 2025 by rpki-client