Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
File:                     A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft (raw, json)
Hash identifier:          e2RnoyReXtaRO/Am5m7Z64C6CNlqMoyo5cMLzhbCbuc=
Subject key identifier:   BC:99:91:33:9F:18:A7:84:34:BD:1E:E2:A5:B7:D8:6B:81:4C:BD:EA
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       09FD6367720E8BF245A78CE34E83E39F1EE0CFD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
Manifest number:          027B
Signing time:             Fri 25 Jul 2025 11:44:52 +0000
Manifest this update:     Fri 25 Jul 2025 11:39:52 +0000
Manifest next update:     Sat 26 Jul 2025 15:05:52 +0000
Files and hashes:         1: 323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (hash: 6nL36QcETJJFvkiVVyWMLCclaTBJ1x3KCbT9g3ETV2Q=)
                          2: 323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (hash: Bu/IlHVqfrerUZ8q53bzUTf7AYEB+3z4EdZLXZZdicM=)
                          3: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (hash: VZn9LAow7O6W9g199BFgEbVbSmNr6lwGD8lpJ00wUck=)
                          4: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: IS0tA9ntjO/6YSwSpKoc+6y0GOXtntg0W8Yvm4DBaSU=)
                          5: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl (hash: ANdw0VSsKzpqTlepdhmkfqJip8k3h8J/3di71zyL3Xw=)
                          6: 323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (hash: v6vtcVtojKMb7fm54RcvwQ5OYxhclZknjvsFw4uvV8Y=)
                          7: 323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (hash: qIQpkQj0ZHEuXLTDN6BOH5c02tE1erFqyB0POd6mnGo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fd:63:67:72:0e:8b:f2:45:a7:8c:e3:4e:83:e3:9f:1e:e0:cf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Jul 25 11:39:52 2025 GMT
            Not After : Jul 26 15:05:52 2025 GMT
        Subject: CN=BC9991339F18A78434BD1EE2A5B7D86B814CBDEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:c1:7a:cd:c3:90:50:f5:54:43:a0:ea:fc:
                    64:af:80:ad:f3:ff:6e:eb:ac:25:7b:15:e3:2f:c6:
                    12:20:4d:42:5a:c3:e7:f6:7f:b2:b7:5d:91:c7:8c:
                    84:8e:ae:c3:ab:29:7f:e6:18:e0:c4:76:ac:6f:78:
                    d8:96:39:d0:35:e7:57:b9:8b:71:2f:ee:7c:6c:c8:
                    0c:f1:b6:8d:6d:69:9a:c1:9f:1b:fb:df:da:25:9b:
                    0e:c1:59:05:fd:98:28:53:3b:c8:c0:26:f7:c1:18:
                    50:74:42:80:d7:4b:87:ba:eb:16:36:11:92:4f:18:
                    f4:65:9b:5d:36:ae:40:a0:7c:59:0e:6c:3e:64:37:
                    c9:f0:ad:eb:e2:15:69:5f:18:19:e3:dd:fd:56:e1:
                    4d:94:85:38:c6:2e:d3:5e:63:3c:6e:7c:9a:23:28:
                    ce:8b:b5:28:73:e4:61:19:ae:6c:c9:1e:9b:7d:a3:
                    da:b9:f4:2d:20:c2:1c:44:c7:22:60:56:b5:ab:f7:
                    2c:ea:e5:c1:8f:cf:9e:41:23:57:9e:0c:a9:c7:6f:
                    7e:94:5d:14:98:b8:78:ef:b5:dc:c0:ac:ba:42:6b:
                    1d:0f:29:1e:25:ff:ef:3d:c7:16:ee:c2:6c:c0:b9:
                    5a:6f:bd:8d:10:d7:aa:98:9b:b3:52:92:4c:04:29:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:91:33:9F:18:A7:84:34:BD:1E:E2:A5:B7:D8:6B:81:4C:BD:EA
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:25:c7:3a:25:9c:5a:05:a5:1b:ef:5e:37:09:ba:74:64:
         d1:e5:b2:69:1c:c8:ce:68:d0:f5:c6:88:f6:ef:db:7f:3f:38:
         3c:54:09:55:3e:a3:bb:35:5b:24:ea:64:6e:e2:a2:32:a6:c1:
         33:93:c8:7b:74:a6:18:41:91:c3:bd:8b:38:24:12:7c:93:e4:
         de:99:63:10:f6:d8:cc:43:d9:ba:cf:b7:1f:d8:37:1c:e1:16:
         19:69:ed:d4:0e:e4:33:cb:73:38:f4:46:3b:3f:91:fd:3a:4e:
         69:88:3b:a8:55:8c:38:df:7f:5f:2f:4d:02:9d:99:58:ed:db:
         b7:6a:bd:91:ed:79:4f:13:95:94:c5:84:12:cb:d2:fb:ff:94:
         4a:db:2b:e3:1a:a4:d1:46:60:ce:ec:a4:6a:b8:27:a2:85:80:
         0b:cb:70:41:74:c8:7c:f4:dc:b5:c3:18:9a:7c:8e:6a:19:81:
         8a:c0:51:4a:a2:c7:78:9d:73:94:11:ff:28:e6:78:95:61:5e:
         2a:82:c7:4c:2a:84:28:b1:40:f5:40:82:30:9b:43:ad:9b:cd:
         08:7a:8d:45:81:dd:ca:77:47:fc:b8:89:f9:b8:f2:c8:d3:e4:
         08:d6:b0:63:63:45:e6:f3:f5:20:2c:b5:23:ba:cd:c2:d1:74:
         cf:de:66:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:23:48 2025 by rpki-client