Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
File:                     ACDD408319E526575F0E327DBFC28EC9CECDF412.mft (raw, json)
Hash identifier:          MqT5dJHdXsZfsV3lMxSRiaC0YqYk7PVGamYyzfnFL0U=
Subject key identifier:   7B:43:D2:DC:A8:74:A3:14:A9:C5:41:67:B7:BE:03:D0:14:FF:71:8A
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       3E33A6EC405BFB1E1C9A8E315CE38B758DA9B05C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
Manifest number:          0285
Signing time:             Sat 26 Jul 2025 17:09:12 +0000
Manifest this update:     Sat 26 Jul 2025 17:04:12 +0000
Manifest next update:     Sun 27 Jul 2025 18:19:12 +0000
Files and hashes:         1: ACDD408319E526575F0E327DBFC28EC9CECDF412.crl (hash: tDSq9gl92cvuDwanz6xrH+VZfBibs2REpF8KGb+uBUY=)
                          2: 323830343a353337343a633030303a3a2f33342d3334203d3e20323638353835.roa (hash: 5mnv+ElXZFe46KDOyPnL+awiHtW19Kq5EZeW5IG3sPw=)
                          3: 323830343a353337343a383030303a3a2f33342d3334203d3e20323638353835.roa (hash: kFgwh+klCTAG9h9ykECRO0XVf5M41Wt8afgD5rPDau4=)
                          4: 34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (hash: xmDdgR04TqBxu7MEmpmuIz19DIQ8rxAWQ5waHyGRjiM=)
                          5: 323830343a353337343a3a2f33332d3333203d3e20323638353835.roa (hash: EL46Y9sagnkSEY+rwBZlOspv52g5meHe59XNHqFusMI=)
                          6: 34352e3136342e31312e302f32342d3234203d3e20323638353835.roa (hash: T2K2agyEH6EHk1tSCNvQb4sBYhelDEcHcJqQ60VwW9c=)
                          7: 34352e3136342e382e302f32332d3233203d3e20323638353835.roa (hash: +8aLdTFB0p/SdDEf9cg0sDcXJHnTs+7kAJoY2D7lGu0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 18:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:33:a6:ec:40:5b:fb:1e:1c:9a:8e:31:5c:e3:8b:75:8d:a9:b0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Jul 26 17:04:12 2025 GMT
            Not After : Jul 27 18:19:12 2025 GMT
        Subject: CN=7B43D2DCA874A314A9C54167B7BE03D014FF718A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:4a:a4:c4:59:fb:a6:69:5a:e4:86:f7:87:
                    d6:a5:48:21:32:d4:ff:3f:4f:eb:67:bb:4e:d7:8f:
                    06:70:8e:36:9b:76:d3:24:3d:5b:23:fb:cf:32:5d:
                    e7:5b:21:10:1b:b3:c2:4a:e5:4a:7d:d3:f2:b5:29:
                    4e:f9:a6:d7:73:b2:41:5c:85:d5:dc:2e:1d:c8:fd:
                    42:ce:84:d3:0e:70:f4:c1:ff:79:50:7a:32:85:65:
                    d4:f7:d2:26:17:c8:45:e9:f5:4b:8c:18:62:98:8d:
                    66:47:ae:65:de:8c:ef:18:af:24:a4:c3:d7:38:0e:
                    c6:e2:3d:10:fb:50:fe:ec:a9:ef:21:57:3a:4a:1c:
                    09:e4:6f:ab:ce:67:69:49:aa:02:b7:97:5a:66:e9:
                    b9:0c:35:c1:cd:06:68:93:4b:b0:a7:1b:cf:43:bc:
                    6d:1b:2e:31:6e:98:5c:71:ec:61:06:79:f8:6f:d0:
                    fc:56:df:e0:d5:6a:de:32:a7:36:8a:50:4b:94:15:
                    a3:8c:16:76:39:30:07:7f:41:81:ec:6f:8b:22:b0:
                    2b:5f:c5:f1:36:9f:48:5b:f3:5e:48:f8:d3:fe:a8:
                    38:ee:95:20:fc:d5:37:bc:33:63:cd:06:87:4f:6b:
                    0f:99:9e:97:1c:45:02:0e:39:31:7a:31:1b:b4:c7:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:43:D2:DC:A8:74:A3:14:A9:C5:41:67:B7:BE:03:D0:14:FF:71:8A
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a0:d6:86:ed:ce:7a:33:a6:52:94:42:4d:97:69:da:25:b8:
         81:51:4e:bd:ed:5f:10:84:fa:b4:8a:39:62:7c:f6:e4:57:b7:
         ca:cb:a9:16:fa:fb:d9:a8:3f:d3:9f:2c:56:0e:54:01:3f:2f:
         56:03:ec:e4:3f:40:5f:b7:7e:04:5c:e0:2b:d4:a0:16:05:97:
         7b:a2:16:eb:3b:41:47:7d:d4:cb:da:ab:cf:69:51:74:9b:a9:
         dd:d2:7b:d8:b9:b3:40:ff:5e:bc:c7:5c:64:1d:56:f3:11:a6:
         e8:2a:d3:90:aa:cf:3e:6a:6e:99:1e:be:6e:a0:19:68:f5:68:
         4f:bb:72:f0:da:e1:10:7b:2b:ee:0b:2c:d7:7c:0f:3d:2a:0b:
         a6:4d:fe:e3:78:5b:d1:2c:42:ca:1a:f9:d5:f1:1d:25:28:25:
         83:30:f9:04:c1:4b:75:ec:64:e2:d3:d2:46:3b:02:9f:44:9e:
         9b:af:e7:79:e3:84:5f:28:70:a2:84:68:e1:12:7d:4b:ba:35:
         f0:b6:ac:30:82:41:bb:c1:9e:57:8d:a1:eb:a7:cc:cf:42:fe:
         62:1d:0e:02:e6:af:b2:a9:da:0c:b8:bc:5d:67:9a:d3:5c:4f:
         c0:bb:8c:6e:0c:1f:a0:45:65:e0:62:3a:40:22:d8:5d:f7:86:
         99:75:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:34 2025 by rpki-client