Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
File:                     B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft (raw, json)
Hash identifier:          DQ6I3MxgzJbhvhokYNhTiEPvP4SOKzUi+SRutUsrvvg=
Subject key identifier:   98:CE:8D:AC:6A:A9:7E:DE:C7:FF:62:C8:12:D6:1D:0B:14:29:CA:9B
Authority key identifier: B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D
Certificate issuer:       /CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
Certificate serial:       7749C6C165BFEF3BF73758A1118CBFDD2F2C1E0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
Manifest number:          027D
Signing time:             Thu 24 Jul 2025 09:49:52 +0000
Manifest this update:     Thu 24 Jul 2025 09:44:52 +0000
Manifest next update:     Fri 25 Jul 2025 10:30:52 +0000
Files and hashes:         1: B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl (hash: uQ757Ft9GUllcPQv5aA7I0ne+z+ddpZM4S9DPjPVBsM=)
                          2: 323830343a383661383a3a2f33322d3332203d3e20323732363538.roa (hash: 4Wve8rrQyvXRaWHDbm6YxZLkom3e2sKuQg46NJyqVZw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl
                          rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 10:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:49:c6:c1:65:bf:ef:3b:f7:37:58:a1:11:8c:bf:dd:2f:2c:1e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
        Validity
            Not Before: Jul 24 09:44:52 2025 GMT
            Not After : Jul 25 10:30:52 2025 GMT
        Subject: CN=98CE8DAC6AA97EDEC7FF62C812D61D0B1429CA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:9e:02:ac:39:47:d1:c6:66:65:21:5e:0c:
                    4e:9e:f7:38:4b:c1:ee:16:92:e8:67:1c:f0:05:1d:
                    52:12:be:5b:13:3e:99:5b:1a:84:a9:ee:4d:5e:db:
                    13:4a:93:7e:71:43:ed:f7:33:e8:c3:18:61:c2:ee:
                    5f:34:7c:0f:11:14:26:8a:38:0d:90:de:71:da:e7:
                    1e:7e:58:10:3a:28:52:43:07:3b:7b:0a:b4:2e:e8:
                    07:2e:95:f2:ea:86:84:c8:0b:c5:18:0c:ec:86:32:
                    3c:04:fe:19:21:ef:9d:6c:c4:46:6f:bb:90:88:42:
                    af:e8:0c:32:7c:42:1d:c5:88:0e:e3:09:4d:66:3b:
                    af:aa:6b:31:3b:0b:24:75:6f:6e:fc:96:3f:55:b8:
                    b1:8b:c7:80:98:2a:9b:76:6a:6d:ba:01:c0:f7:c1:
                    5b:55:73:0e:df:20:b8:70:52:24:ce:cb:4f:f0:a3:
                    19:4b:42:cc:c0:53:01:b0:d5:3e:1f:d3:66:ce:46:
                    64:9d:e5:d9:90:fa:25:a6:a7:c9:54:62:00:c6:2c:
                    72:4d:8d:34:55:e7:80:d8:33:1c:c7:80:b8:fb:54:
                    f8:7b:a2:67:8f:1a:df:01:36:ce:ac:fb:9e:c4:b6:
                    28:3a:1a:2e:e8:37:60:88:e0:11:f1:f2:c9:3d:93:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CE:8D:AC:6A:A9:7E:DE:C7:FF:62:C8:12:D6:1D:0B:14:29:CA:9B
            X509v3 Authority Key Identifier:
                keyid:B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ce:86:8c:db:6f:c0:62:47:2d:0d:f2:f6:8f:7a:27:0b:ad:
         81:0f:d4:37:e1:b6:83:86:86:30:97:7d:d0:bf:de:3a:07:2b:
         5d:79:7b:9a:a5:47:20:6a:1f:22:e7:69:c2:17:a6:9d:33:1c:
         bc:b4:2b:06:02:6d:9a:27:c7:ad:80:8b:16:4d:1d:a6:9d:49:
         84:b0:e9:a6:83:b4:5b:ba:f9:33:e5:20:f4:69:95:81:bd:9a:
         4a:3f:60:9a:96:65:02:c0:aa:7d:25:24:93:6b:09:5c:d3:75:
         da:ed:ca:14:83:54:dc:c5:14:5c:bf:29:66:a1:e1:04:27:7d:
         ef:97:4e:88:70:40:2d:29:90:d0:35:28:b9:da:57:6c:e6:2e:
         71:d7:8d:c6:e2:8b:5c:e6:4a:c3:4c:7a:47:f2:2d:4a:0f:fb:
         28:f4:08:bd:7b:ed:b9:6b:ae:ee:33:9f:61:97:a3:b0:42:65:
         dc:b5:fa:e6:03:ce:a6:4c:6e:07:fe:55:5c:32:c6:8e:9f:06:
         ed:45:05:fe:fd:8a:95:39:2a:b9:f9:4a:b6:e6:c5:14:37:a8:
         6e:ca:9c:e5:e7:6a:c0:dd:6d:62:7a:17:4e:9e:82:84:3e:ec:
         6f:e1:54:1b:26:3f:56:de:09:7e:37:a4:82:5e:ca:b6:81:c3:
         d6:af:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:39 2025 by rpki-client