Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
File:                     E623553538E00E63657BFD8F27CC352EDDF522D9.mft (raw, json)
Hash identifier:          B4x42MfS/VzhptYZqIlzXJg3BL5uqoFEUkzICIEcFDw=
Subject key identifier:   2A:0A:5E:FD:3F:87:29:B5:65:AF:E9:AF:AB:27:DE:B4:1B:D3:DA:7C
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       719ADC226818206D3DA8F4B52BDDC7357F2E4BD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
Manifest number:          08
Signing time:             Tue 05 Aug 2025 12:11:23 +0000
Manifest this update:     Tue 05 Aug 2025 12:06:23 +0000
Manifest next update:     Wed 06 Aug 2025 13:31:23 +0000
Files and hashes:         1: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: QCbZMrUKJgBUWwCX4f2grxkhDaOONDhgbpeLvId+Sr8=)
                          2: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: qZKUtAG+JVR2dVS4JiNI+Kw6jfhzxGMb3WwVCawye94=)
                          3: E623553538E00E63657BFD8F27CC352EDDF522D9.crl (hash: YZCP3Ygiyt+/CdTbnJLI0a0/wbegEKE/msifVfvygMQ=)
                          4: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: jrLtuRDUfebp+da8gdNc/X5sTzU1URd3o0fTxtDn0u0=)
                          5: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: OLbc1TLVVA2OTpclfERRSJr3cNXPo1t5TO4AZY12WdM=)
                          6: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: YeQQQga2IPXcQPI4WZR6ySFBpq83/d3HIcA7pJ/zYnk=)
                          7: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: 9m7yPscc1aQcelxqXKrPeemhvynpRkgj0fMDx9qc3dU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 13:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9a:dc:22:68:18:20:6d:3d:a8:f4:b5:2b:dd:c7:35:7f:2e:4b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Aug  5 12:06:23 2025 GMT
            Not After : Aug  6 13:31:23 2025 GMT
        Subject: CN=2A0A5EFD3F8729B565AFE9AFAB27DEB41BD3DA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:49:c2:74:01:75:3f:3f:f2:80:ff:cc:6a:
                    43:c3:ab:b0:b1:7a:ec:22:03:46:b5:c9:45:cc:88:
                    5f:f3:ba:65:e6:b2:9d:7f:df:83:22:6b:01:8c:a4:
                    d4:1b:4e:1e:2d:4f:16:06:fd:81:cb:74:46:a4:49:
                    2e:40:66:66:d1:2f:84:36:8f:af:e5:74:a6:9c:ef:
                    9c:98:64:c2:5e:21:81:62:fc:cd:07:6b:64:34:a9:
                    e2:46:28:fa:0f:31:70:ec:19:20:9d:03:92:22:0e:
                    a9:b7:d0:15:7e:1f:f9:f7:1c:bc:a0:2e:12:2a:6c:
                    5d:83:d5:27:97:06:fa:92:60:61:c9:79:8f:6f:a9:
                    e3:ce:15:1a:d2:6f:cb:47:54:5d:30:49:6d:21:17:
                    36:d5:46:0c:22:a1:1f:a1:b7:a5:1a:3e:b8:c1:45:
                    fb:fd:25:97:73:49:d1:ad:a5:35:f1:cb:7b:d8:63:
                    03:a9:5c:60:3b:44:f5:bc:98:93:38:da:29:f5:29:
                    a2:df:58:db:bc:23:e9:d1:fd:ed:17:50:5c:28:db:
                    d6:71:7b:3c:d8:3e:52:b4:2d:a3:95:df:ae:26:73:
                    39:c4:40:9c:cd:e9:91:88:e9:72:38:b0:5d:6b:f6:
                    c5:f4:2b:e4:79:72:93:38:f4:b4:4a:7c:f4:5e:b8:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:5E:FD:3F:87:29:B5:65:AF:E9:AF:AB:27:DE:B4:1B:D3:DA:7C
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4a:74:99:e8:d5:e5:09:9c:e3:3c:c1:b9:f5:f9:98:41:cb:
         6d:b9:12:6b:75:50:18:f9:c2:5f:e5:71:90:fe:8e:75:d1:7b:
         31:f5:0e:66:a5:d2:23:db:33:fb:70:ba:15:d0:0f:c8:11:4e:
         6d:1e:88:a9:a9:0a:23:a0:f7:42:32:e9:ac:bd:dd:a5:c7:ec:
         c9:ab:ee:b8:2e:6d:7c:4f:17:8d:6b:55:f9:7b:15:45:27:0c:
         45:84:3f:f5:de:0b:92:a8:81:4d:41:c0:cc:cd:50:80:b8:de:
         8f:39:4d:5b:ed:cd:64:bf:48:26:11:1c:be:53:2c:76:ad:6e:
         f0:d5:80:aa:48:37:ca:cf:af:ad:1d:a7:31:3f:24:98:18:ab:
         b4:11:9e:75:cc:60:fc:35:4a:2b:4c:58:02:1d:fe:e9:92:87:
         65:be:86:51:2c:69:0b:1c:5f:7a:ae:71:cd:8e:b4:d8:40:1e:
         71:3d:42:63:98:0b:ec:1a:9d:ad:9f:62:1c:ea:98:33:c5:88:
         5e:0e:a1:44:1c:63:cd:ec:82:e2:10:87:8c:aa:fa:d9:ab:d1:
         c2:a7:37:a9:7c:1d:05:4d:2a:59:9e:98:90:59:d5:02:c4:a4:
         af:29:fd:93:9d:89:de:13:47:1c:b7:b7:c6:b7:cb:55:1a:4a:
         51:d7:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:30 2025 by rpki-client