Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          2ern0fHuWniGnp6Uq7chfAehXJSG45ylUMkJ9hE8eg0=
Subject key identifier:   85:90:82:A1:C8:8F:A4:4E:25:CF:1A:25:26:52:31:DE:60:1D:E3:75
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       019C3B5AC873C783FCBB82D0EBFEC634A7346CB1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          028B
Signing time:             Tue 05 Aug 2025 21:15:12 +0000
Manifest this update:     Tue 05 Aug 2025 21:10:12 +0000
Manifest next update:     Wed 06 Aug 2025 23:19:12 +0000
Files and hashes:         1: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=)
                          2: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: jFOKmZdUzrqB7DuIgqBanfryUkoDH0GXcs2RL/VGiII=)
                          3: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: C2Urw1CANF3BYR4oYboPvzubkyeHTC4GKOwLeRX1lQY=)
                          4: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: exO7PurB2RIPsB+ekGVqbL5h2TXyxw2LV66rWQOjPyw=)
                          5: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 1GNUZSNPHTUgvUkppz4F7t0eGoRsad2SmjP7A9wBQ4U=)
                          6: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=)
                          7: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: sqv4PJRsVf1fbuPiqi5aE4THOHXbUo9nkuAmPfa1rXE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3b:5a:c8:73:c7:83:fc:bb:82:d0:eb:fe:c6:34:a7:34:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Aug  5 21:10:12 2025 GMT
            Not After : Aug  6 23:19:12 2025 GMT
        Subject: CN=859082A1C88FA44E25CF1A25265231DE601DE375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:ca:01:a1:0e:4c:48:1c:1c:b9:0c:c6:1d:
                    13:90:ce:6d:86:8d:8b:7b:97:0d:08:e0:c0:cf:05:
                    3e:9e:b7:5a:03:43:c9:9e:46:b5:a6:d5:dc:87:a3:
                    a1:54:36:eb:b5:f1:65:95:3e:99:a7:b4:9b:c5:2e:
                    9e:44:ff:96:bd:aa:25:92:1e:46:c3:e3:be:7c:25:
                    c1:4a:6c:35:b2:dd:0a:66:2d:34:5c:66:9b:ae:f9:
                    21:b5:27:f5:6b:2c:c3:43:12:3d:91:e9:22:1a:35:
                    6c:c4:ba:0d:cb:b0:a1:3c:32:fe:c7:83:5f:04:e8:
                    44:dd:e5:8a:87:8e:6e:21:20:12:3f:82:f4:29:bc:
                    9d:e8:52:68:e6:02:de:fa:0b:58:d6:97:e3:f4:bb:
                    e3:e3:2c:0c:c9:6c:7c:5f:42:71:66:e8:b2:38:81:
                    50:55:60:fc:13:8e:bb:21:5c:1a:7c:94:e4:b7:6d:
                    48:69:f2:c1:f5:ad:f5:f0:09:10:e9:c9:8e:82:5b:
                    88:da:33:59:dc:9b:af:73:58:34:23:77:be:3e:d8:
                    9a:28:aa:61:ab:59:2b:27:2c:76:bd:9e:e9:69:3d:
                    0a:07:bc:8e:a2:30:c9:f8:87:66:bc:60:4b:4e:11:
                    3e:a0:0e:63:27:e4:4b:14:9f:65:dd:34:4f:fa:e3:
                    4c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:82:A1:C8:8F:A4:4E:25:CF:1A:25:26:52:31:DE:60:1D:E3:75
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:07:fd:32:e0:46:da:35:f9:e7:28:cf:97:9b:bb:d0:85:bb:
         e8:9c:5d:ac:b5:f6:20:eb:ce:cf:db:82:10:25:6c:75:71:67:
         5a:4f:50:5a:27:bf:d0:56:74:a0:2c:e7:96:7f:32:f3:20:83:
         ab:37:38:67:e8:2e:97:29:00:db:b6:78:55:0e:56:43:95:73:
         ed:12:d2:ae:1c:89:0c:fd:8c:ac:2e:c0:5e:57:6b:d5:23:2d:
         59:6e:9c:a0:ef:a9:23:a5:a1:5c:09:69:7f:f0:a6:7c:be:aa:
         7e:ab:e2:b6:02:24:0a:42:9b:e6:91:b4:9b:23:80:00:6e:59:
         01:b9:38:0f:51:9f:f3:b1:76:c4:9b:f0:28:de:9c:9e:dd:88:
         11:67:22:f7:14:19:79:13:d2:d6:87:cf:9b:f3:96:19:2a:43:
         2a:a1:6b:4a:c3:fc:49:3d:58:6b:4e:4c:7e:65:b8:aa:64:bc:
         1e:e5:b2:d1:e9:49:f4:90:de:d9:c0:63:db:21:09:43:c7:1c:
         e5:cc:ec:58:b8:d6:ad:83:e1:b4:97:b6:0e:5b:b3:ba:84:c4:
         64:dd:73:a6:da:89:d1:6d:05:e4:7e:5c:b9:40:cf:70:71:41:
         b6:f7:f5:ff:4c:83:6b:67:e3:6d:9d:a4:75:4b:17:23:25:d6:
         68:1d:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:44 2025 by rpki-client