Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier:          QCxUYbrjGQc3QAnMc0zt+QOY5+lgUQTmJfF/uHnhC3I=
Subject key identifier:   18:81:3F:9B:C5:AE:3E:C8:F7:9A:3D:FB:7E:FE:87:4A:5C:16:CD:8B
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       27F41CEFED65EBCBEAF4C076AA85FB21709A428E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number:          0135
Signing time:             Tue 05 Aug 2025 20:06:33 +0000
Manifest this update:     Tue 05 Aug 2025 20:01:33 +0000
Manifest next update:     Wed 06 Aug 2025 22:07:33 +0000
Files and hashes:         1: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=)
                          2: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: jBqdkhXdCcgMkLDUXW++xNVcifLuMH/i4UpJ+qRdVt0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 22:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f4:1c:ef:ed:65:eb:cb:ea:f4:c0:76:aa:85:fb:21:70:9a:42:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Aug  5 20:01:33 2025 GMT
            Not After : Aug  6 22:07:33 2025 GMT
        Subject: CN=18813F9BC5AE3EC8F79A3DFB7EFE874A5C16CD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cc:cb:b9:b2:ae:bd:6b:0c:37:db:c4:2b:f8:
                    ab:19:4f:bc:9c:c9:a5:e1:95:03:75:64:65:35:58:
                    a8:04:dc:e5:5b:b8:94:18:6e:d0:7d:31:1b:92:1f:
                    12:c7:59:68:8d:77:b9:89:2f:1e:ce:1c:48:12:85:
                    13:12:ba:da:35:fc:da:57:f1:c5:43:7a:74:04:06:
                    cf:e1:c9:8b:32:48:07:48:74:e8:29:19:f5:fc:93:
                    31:87:56:49:ce:5e:77:17:8f:98:0b:c3:c8:43:eb:
                    65:96:f4:32:de:56:6e:41:25:85:0e:1d:f2:48:b5:
                    a1:96:19:80:59:c9:b0:9e:71:e3:1c:8e:b9:b8:56:
                    c6:f7:40:d6:b8:a4:67:b7:f2:b0:8b:07:51:ac:11:
                    ed:a4:d9:4e:36:19:59:e6:05:db:bb:60:f6:b3:3f:
                    e4:6a:5e:37:5e:de:ab:e3:ba:02:3b:b6:3e:4c:e8:
                    12:00:77:9a:b4:f8:b2:c5:3c:ce:38:98:73:a6:7b:
                    ff:f9:78:07:3e:b2:31:a1:77:01:0e:58:e6:18:56:
                    7c:95:76:95:d3:c5:04:0f:59:14:2d:02:44:59:a1:
                    45:ea:4f:34:ce:0c:d7:57:f8:1f:4a:95:4d:c1:01:
                    3a:9d:e2:3a:47:07:3e:49:2e:fe:d3:78:96:42:ce:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:3F:9B:C5:AE:3E:C8:F7:9A:3D:FB:7E:FE:87:4A:5C:16:CD:8B
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:0d:6b:eb:a9:f4:d2:98:cd:6b:f6:1a:a2:e6:06:73:ef:
         eb:c4:8f:b8:20:39:f0:1d:20:ed:6d:c9:aa:89:43:75:87:c8:
         9e:aa:14:0d:ec:e1:60:77:49:58:3c:a2:f5:b8:c8:e0:83:ae:
         2b:e5:9e:59:19:82:71:43:a0:d8:91:91:cd:d6:1e:3b:e5:b9:
         37:d1:2f:be:97:d1:e1:e8:23:c7:b8:b7:33:e5:83:20:78:67:
         99:9d:cc:b7:46:09:d8:c1:8c:8e:d2:d0:22:a6:66:7a:44:e4:
         17:97:6a:f0:e4:e9:81:51:b8:15:fc:cb:82:3a:3e:20:59:06:
         df:7b:e4:38:b9:67:52:b4:36:83:0e:0c:58:32:2f:de:a2:84:
         c5:a2:58:d6:9a:10:5c:39:46:04:7b:96:30:e9:fa:ab:9c:7f:
         97:38:d1:b7:c3:74:8c:08:ae:ea:55:17:f7:2f:c2:ac:05:2e:
         17:cd:29:a9:6a:cd:e8:fa:b6:e1:bc:9b:ae:c2:d2:1a:c5:75:
         45:e9:e7:55:be:95:36:4b:03:db:d5:b4:4d:9b:06:f5:81:b1:
         a1:81:b6:78:7e:eb:5b:e2:2f:d4:73:15:48:71:0e:c9:39:d4:
         ff:ea:3c:b4:13:be:29:af:a1:50:72:fc:a5:bd:6a:71:37:6d:
         83:7e:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:09 2025 by rpki-client