Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
File:                     7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json)
Hash identifier:          rK7xQttVuCymekkGWREKhJn75nLWAtLe0RTihyBhPrQ=
Subject key identifier:   AD:B0:AC:53:56:92:67:33:7C:1C:F3:E0:32:5E:0B:39:84:5B:38:D9
Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Certificate issuer:       /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Certificate serial:       0EB3C285672165A86988D3AB8D280F020560B786
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
Manifest number:          028E
Signing time:             Wed 06 Aug 2025 08:50:42 +0000
Manifest this update:     Wed 06 Aug 2025 08:45:42 +0000
Manifest next update:     Thu 07 Aug 2025 12:19:42 +0000
Files and hashes:         1: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=)
                          2: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: VEZcMtpoB+YY9ftqymVGrfprKQ2dsS+UsPXk7AwdYaw=)
                          3: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=)
                          4: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl
                          rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b3:c2:85:67:21:65:a8:69:88:d3:ab:8d:28:0f:02:05:60:b7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
        Validity
            Not Before: Aug  6 08:45:42 2025 GMT
            Not After : Aug  7 12:19:42 2025 GMT
        Subject: CN=ADB0AC53569267337C1CF3E0325E0B39845B38D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:9a:a3:b3:bb:36:46:04:79:de:47:2c:cd:
                    5d:7d:34:46:e3:20:2d:f6:7c:be:c4:18:1f:83:a5:
                    65:cc:06:6c:db:8a:52:81:3e:b4:91:cd:9d:a1:2c:
                    3a:8e:9a:95:05:a6:ac:4a:7a:6f:fb:d5:96:60:e6:
                    8c:0e:87:10:cf:89:49:de:cd:a6:93:a3:89:90:ee:
                    d5:d8:5d:22:37:97:04:be:00:80:fd:42:07:5f:cb:
                    d0:e6:a4:21:82:59:8d:62:22:ec:c8:bc:77:31:7e:
                    79:81:63:02:96:07:ed:9b:d2:de:05:9f:b7:77:5e:
                    f8:c2:af:c1:cc:90:d1:2f:9a:c3:fd:22:7a:f7:08:
                    21:d5:eb:32:d3:0c:f3:e0:c0:f2:cb:3b:15:c3:43:
                    14:9a:aa:16:1c:66:b3:21:83:38:40:2e:1c:da:0d:
                    ba:de:cf:1b:55:f2:38:74:f4:84:e1:76:33:9e:d2:
                    de:b8:ad:be:42:ba:54:fa:fb:ba:ae:f1:53:cb:29:
                    a4:05:fe:72:5d:b4:b2:3f:10:14:d1:fb:64:52:67:
                    5c:1a:29:8a:e1:00:31:ea:13:9b:80:b0:37:89:93:
                    fe:15:c1:6a:0a:62:3f:57:35:0c:89:58:6a:85:ef:
                    ca:6e:71:e3:0a:d3:60:92:0b:a1:13:a6:75:1a:21:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:AC:53:56:92:67:33:7C:1C:F3:E0:32:5E:0B:39:84:5B:38:D9
            X509v3 Authority Key Identifier:
                keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:5f:b1:d4:94:71:70:cf:9f:e3:91:df:06:96:83:00:26:
         ae:84:15:3e:92:dd:b8:a6:db:ee:8e:62:ad:1a:a8:63:d2:64:
         1b:5f:b4:36:27:ce:58:34:6f:93:84:1e:90:2a:1a:3f:7b:51:
         c2:16:a6:84:ae:70:d3:04:76:59:9f:e4:da:be:6a:d3:67:de:
         f5:21:f1:4c:94:34:38:b7:32:bc:1d:fe:e5:06:d1:31:66:ed:
         f2:cf:74:84:93:e6:32:38:b6:4f:6e:f2:02:4d:7a:4e:8b:1c:
         9e:cd:50:b3:eb:6c:47:1c:ed:53:c3:9b:07:c6:06:7f:23:a7:
         e4:3c:c8:b3:3f:dd:48:91:8a:ca:6b:87:f2:16:e0:d8:35:0d:
         31:b1:bc:7b:d4:34:51:19:f3:6c:3b:ee:5c:b5:31:85:8f:6a:
         e4:e9:1b:6a:61:73:21:b2:d3:df:18:e4:3f:c2:9b:93:11:f1:
         7d:c8:52:f4:ad:bf:3a:08:c8:90:85:b3:86:a4:02:ec:7e:5c:
         ac:e9:45:9e:b0:70:1c:54:c5:57:43:aa:7e:66:03:3c:72:bf:
         75:42:cc:a8:06:b1:b0:0c:f8:25:04:9a:88:2a:5e:08:dc:3b:
         2e:9b:62:2d:17:c5:e4:27:6b:7e:fe:dc:bb:eb:2d:cb:9b:de:
         9c:05:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:37 2025 by rpki-client