Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
File:                     23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft (raw, json)
Hash identifier:          5jVZP+HwuLWTmbrsX3mEBINf2VNoT8Z0DhD2+MO+3nM=
Subject key identifier:   E6:5D:07:4B:86:A8:FE:B5:D2:3B:23:32:C3:B4:E2:AB:EC:BB:49:E4
Authority key identifier: 23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD
Certificate issuer:       /CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
Certificate serial:       2DEDF5C938F4F2CF48FCB7B123136CCA0246ECF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
Manifest number:          C5
Signing time:             Mon 04 Aug 2025 01:18:32 +0000
Manifest this update:     Mon 04 Aug 2025 01:13:32 +0000
Manifest next update:     Tue 05 Aug 2025 04:50:32 +0000
Files and hashes:         1: 23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl (hash: Cd2pdpFvNVUZtXMHEng+3plon4PXSrZNLTfWzcGKEMc=)
                          2: 323830343a373330633a383030303a3a2f33332d3333203d3e20323730383932.roa (hash: 5zPpzxVCue9TWwdXtBqAZu17jW1VpPLDw1zg5S0loAc=)
                          3: 3230302e3131352e36342e302f32332d3233203d3e20323730383932.roa (hash: TSHKvAX6iKMXPfCJ52PBvaqGnGui1xT/xArg9HsiOT4=)
                          4: 323830343a373330633a3a2f33332d3333203d3e20323730383932.roa (hash: bZowq/rhPiHimCF5k874pBsH6uezn6+q9HE3ZhLBhxU=)
                          5: 323830343a373330633a3a2f33322d3332203d3e20323730383932.roa (hash: SEDWYSxoEjG5LyIWphtGCBwbxzJ+rIAB+gpVEx+rBro=)
                          6: 3230302e3131352e36362e302f32332d3233203d3e20323730383932.roa (hash: Umdb+KAs359pFboxUh6CsHAYjGTllGS22gQ9xoOSSdw=)
                          7: 3230302e3131352e36342e302f32322d3232203d3e20323730383932.roa (hash: KHCvpOqEBh0zaA89hOOCHX1qItF2kA+N8+QBQ27RH7A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl
                          rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 04:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ed:f5:c9:38:f4:f2:cf:48:fc:b7:b1:23:13:6c:ca:02:46:ec:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
        Validity
            Not Before: Aug  4 01:13:32 2025 GMT
            Not After : Aug  5 04:50:32 2025 GMT
        Subject: CN=E65D074B86A8FEB5D23B2332C3B4E2ABECBB49E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:68:d6:ef:0c:92:da:c1:e9:03:de:60:5c:
                    09:00:4e:e5:a9:76:53:54:0b:7b:b3:e3:c2:dc:f3:
                    fa:e5:e2:31:12:18:35:7b:71:37:03:80:ec:25:fc:
                    bc:be:1d:df:92:53:f0:30:55:4f:51:b9:9d:58:b5:
                    32:f3:05:18:de:ed:72:ab:2f:36:58:39:b3:76:59:
                    57:c9:e5:13:b2:6a:d2:f4:29:b0:24:68:81:ba:c8:
                    ac:e9:70:cf:14:20:e0:66:26:f3:92:7c:da:f2:e1:
                    8b:3e:67:da:61:53:b9:eb:66:37:44:4c:bf:28:9b:
                    1a:f0:f1:43:99:bd:1e:6f:44:21:05:93:17:aa:97:
                    e4:49:2d:ad:bc:eb:a3:f3:d4:05:84:ad:eb:c7:f4:
                    17:2a:4b:43:ff:82:bf:4f:4c:1e:72:b1:34:b8:57:
                    08:20:40:50:3b:7c:d5:e9:bd:c9:14:cd:fe:a9:5f:
                    74:44:11:1b:0a:7b:9e:81:b1:e7:a1:06:d6:8b:e4:
                    6b:2b:b7:7b:2c:37:52:5a:b9:25:1f:1b:24:f2:b8:
                    8e:46:53:25:20:10:2c:5f:38:9b:8a:51:c8:8a:9c:
                    69:c6:87:5a:c7:f3:01:8e:65:a5:94:24:7b:78:03:
                    43:5b:7e:e9:9f:a0:ec:8f:d2:cf:2a:bf:e7:a3:5e:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5D:07:4B:86:A8:FE:B5:D2:3B:23:32:C3:B4:E2:AB:EC:BB:49:E4
            X509v3 Authority Key Identifier:
                keyid:23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:4a:93:9a:95:13:29:6b:8c:20:a8:e3:15:24:cc:80:fd:
         48:a0:ca:af:9a:d8:d3:f1:c9:2f:e4:7f:c6:1c:46:0a:76:6f:
         7b:1b:90:3e:0b:dd:f2:d7:7e:f0:a1:a1:b6:fd:d9:29:d8:dc:
         00:55:ea:32:d9:62:1e:71:b6:69:f1:37:4c:60:88:b1:05:20:
         5a:54:97:d1:ae:d2:3b:2b:d3:3e:3c:0e:0c:e6:0b:93:67:d9:
         8c:45:4e:fd:0d:68:0a:ce:1d:8a:17:e7:8d:43:98:d4:30:34:
         6c:24:88:7e:84:94:b3:81:54:a7:1f:09:67:91:4c:24:49:91:
         3b:76:fc:fe:64:c7:f6:d2:34:44:85:4d:bb:b2:2e:43:b3:1e:
         ea:e9:af:de:b9:a5:57:37:c2:49:53:d5:24:b3:4a:cf:d2:ad:
         6e:10:0e:dd:c6:b5:39:c2:90:ee:d2:31:d3:3d:9c:79:52:a9:
         d9:38:4d:28:1b:ba:af:75:4a:61:66:20:f1:75:af:32:d3:15:
         9f:3a:8c:54:34:85:31:6d:98:0f:50:c3:49:f5:9d:0f:d6:8d:
         dc:10:11:6b:e3:ec:4d:82:49:1b:0c:b1:e3:40:e6:3a:8b:fa:
         18:5e:8b:56:28:5d:a0:91:be:af:d6:77:b7:85:2f:90:33:a1:
         9a:48:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:38:42 2025 by rpki-client