Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
File:                     8204A8F62764E655E183BB09417B0875F11B3A7D.mft (raw, json)
Hash identifier:          Zri3G8t0IP7GcLsSU+pqoHCqoPhGOZzj7t19zSc/gbI=
Subject key identifier:   48:C9:05:39:6C:8B:F7:CA:6D:96:1C:44:25:3C:58:48:24:6C:D1:E9
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       16089CEA606A026B319E2B58DB6A572A90EAA9B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
Manifest number:          028C
Signing time:             Sat 26 Jul 2025 12:36:12 +0000
Manifest this update:     Sat 26 Jul 2025 12:31:12 +0000
Manifest next update:     Sun 27 Jul 2025 15:06:12 +0000
Files and hashes:         1: 3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (hash: 0arN7mTxC+femsr+qJoXzx7w67KLc6hvBkwe3aPa7es=)
                          2: 8204A8F62764E655E183BB09417B0875F11B3A7D.crl (hash: 8uQTHzqOe7mRD/neqXind0SOaTYobZNuBFhcFnX2Q6g=)
                          3: 3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (hash: R0L4zMoCzJms1YK3JxIET0vc/j1jFMjQqVfs6zcYcmk=)
                          4: 3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (hash: vmcXxKuONvDttff4UVitpw8WaYSJUZMmP7VKmelSv2A=)
                          5: 323830343a313038383a3a2f33322d3438203d3e203532393133.roa (hash: GwPm2g2MNZjdOqx6Lcw+CEjGDtw0uvGi9kDqotISbMA=)
                          6: 3136372e3234392e342e302f32322d3234203d3e203532393133.roa (hash: zP9yhC3Qt7EQWFv+OYnhs4gTVLpF8pr3SnXMGPpjQZ8=)
                          7: 3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (hash: cnXFFjteLwxFJzW5tJDRUpxoZcspHKMllIxuDdVkNFI=)
                          8: 3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (hash: T/SpWSzWq/EKwVb72W4louC31Dw+ByGimjZONGUb+w4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 15:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:08:9c:ea:60:6a:02:6b:31:9e:2b:58:db:6a:57:2a:90:ea:a9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Jul 26 12:31:12 2025 GMT
            Not After : Jul 27 15:06:12 2025 GMT
        Subject: CN=48C905396C8BF7CA6D961C44253C5848246CD1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:b4:77:6a:77:9a:08:5f:da:c2:96:4b:2f:
                    f6:15:a7:1c:46:36:64:ae:6a:1c:4e:de:e9:ce:8c:
                    47:ad:a3:30:c5:dc:9a:52:73:65:8a:82:1d:d9:20:
                    4d:3a:28:7b:fe:f2:6f:90:49:7e:cf:0e:3f:87:12:
                    1e:ed:b0:39:84:85:20:8d:5e:e3:85:72:53:07:33:
                    77:06:94:6c:7d:3d:ce:64:ac:54:b8:0a:17:43:bc:
                    c0:1e:ee:5d:8e:ae:7d:41:86:a3:8c:07:47:c9:32:
                    e3:19:86:fa:f1:7c:5c:c7:85:32:65:8a:44:42:d1:
                    6d:ab:82:a6:8a:db:af:f5:b3:66:a8:47:33:f2:1d:
                    d7:26:b6:f8:d4:36:94:4c:d2:40:fb:60:a9:44:62:
                    52:69:7d:2e:df:eb:00:74:ac:27:78:a4:e9:64:20:
                    d5:24:82:5b:dc:71:0a:05:18:c9:a9:4e:0f:40:ba:
                    d2:21:a6:a5:b4:de:ba:46:dd:5d:ed:8f:f6:78:77:
                    38:e0:9f:05:b3:db:8f:70:57:ec:4f:fb:4b:45:02:
                    75:30:3d:51:7b:4a:33:7c:d0:44:71:b3:9e:31:ed:
                    fd:07:ff:d9:a3:53:49:3a:d2:26:91:9a:79:79:37:
                    ed:0b:2e:98:4a:f6:fe:9b:d0:24:40:6d:c6:7c:da:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:05:39:6C:8B:F7:CA:6D:96:1C:44:25:3C:58:48:24:6C:D1:E9
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:34:0c:1d:e3:42:45:c8:d5:ea:27:ab:36:37:eb:9b:09:
         16:ea:83:94:92:5c:03:0e:ab:0a:41:da:ae:8f:a8:32:4b:98:
         b3:47:16:1a:1c:88:ca:82:8d:ac:09:b3:35:62:7a:f5:22:c0:
         2f:f6:47:50:86:f4:f3:be:81:66:0c:57:36:d2:36:a5:6b:20:
         45:f2:9f:0d:a6:95:41:11:fc:ef:e4:55:e2:d4:54:a3:d4:1d:
         39:35:9d:d5:48:8a:fc:d7:d6:b8:f2:8e:6e:75:82:51:e4:3a:
         0a:8b:c9:74:10:80:13:b1:55:ab:6d:fe:70:61:74:1b:07:0d:
         62:27:7f:13:7d:88:f0:f7:12:f3:b1:5f:0f:3c:53:e5:2b:a8:
         16:c3:fc:d0:24:17:57:fe:24:46:2d:bb:d6:c7:57:1d:54:af:
         67:f1:bf:9f:74:5c:39:81:52:91:88:7c:50:25:2a:c1:67:44:
         15:54:10:f5:4d:dd:0e:e2:dc:71:5e:88:c6:a1:9d:c5:0a:1d:
         8d:c3:08:36:a9:b3:67:8a:cd:09:85:94:4d:ac:37:0b:e9:af:
         5d:5b:7d:34:59:8c:92:bb:69:5b:c4:f6:d6:65:85:cb:0c:ad:
         6d:e2:48:fe:61:e0:63:79:b4:d0:83:8f:2a:b4:9e:ea:c9:60:
         f8:cc:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:17:51 2025 by rpki-client