Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
File:                     D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft (raw, json)
Hash identifier:          l6ElpO8BzlLcXyejmPBYXDg62dtprNv1fBotYIYFjZY=
Subject key identifier:   A3:41:D5:B2:8F:BE:6D:20:C1:56:EB:37:5F:D3:92:44:75:38:9B:7F
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       479BAC6ECB6D7C975A08A47381B5E55CF8AA0E61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
Manifest number:          0296
Signing time:             Fri 25 Jul 2025 16:58:46 +0000
Manifest this update:     Fri 25 Jul 2025 16:53:46 +0000
Manifest next update:     Sat 26 Jul 2025 20:10:46 +0000
Files and hashes:         1: 3230312e37362e39362e302f32302d3234203d3e20323632373932.roa (hash: WPXMrcktaHfePjN+pQzBhiZervUICUYDKCfjCdTqmS8=)
                          2: 323830343a3232343a3a2f33322d3434203d3e20323632373932.roa (hash: +ZQg3sxpMe3JOHGzoUN+id9g13YLa1gMrVBHCj71gdc=)
                          3: D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl (hash: gLdjaX8+yXQlazcVDrFjFH6ZlOxKKoS2TNB9Jx8fnkM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:ac:6e:cb:6d:7c:97:5a:08:a4:73:81:b5:e5:5c:f8:aa:0e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Jul 25 16:53:46 2025 GMT
            Not After : Jul 26 20:10:46 2025 GMT
        Subject: CN=A341D5B28FBE6D20C156EB375FD3924475389B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:ba:b6:8e:5c:1a:08:c6:b1:40:97:02:6c:
                    48:8d:6c:3f:d7:3d:36:3f:b4:e9:dc:a0:6d:d5:6b:
                    05:07:91:f0:e6:09:3b:92:a8:01:ae:ce:2a:f6:4c:
                    22:ac:52:4b:39:bb:49:ac:f6:4a:17:f8:b8:33:e3:
                    75:1e:74:92:56:f5:21:11:20:00:14:24:8a:79:d5:
                    7b:ce:13:78:32:d5:7a:16:86:14:bd:79:43:18:3a:
                    4d:b3:d0:1a:f2:68:37:73:5b:18:87:b5:8e:ae:f7:
                    ba:73:70:f7:95:2f:db:36:83:3e:61:e0:85:74:22:
                    e5:d9:12:ce:aa:d2:60:3b:21:d1:46:e3:ab:4c:bc:
                    f8:1b:aa:fc:54:cd:29:59:b7:4a:9b:18:bd:be:81:
                    bc:f8:f6:2c:c6:1c:88:fd:59:0a:bf:bf:8f:30:cf:
                    da:68:07:d3:e6:33:78:e4:43:fd:0f:3c:d3:47:da:
                    63:df:74:d6:b3:76:b9:5f:3f:a1:d9:db:23:ee:64:
                    f3:a2:f2:a2:5f:25:bd:db:04:6d:2a:44:3e:3d:00:
                    25:f2:ec:3a:54:7d:98:c4:a4:cd:21:c4:81:da:f5:
                    e6:23:f7:e7:b1:6e:9a:df:40:6f:2d:e6:1f:17:20:
                    0c:d1:3b:b0:5b:ed:35:0d:da:f6:87:25:3d:18:69:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:D5:B2:8F:BE:6D:20:C1:56:EB:37:5F:D3:92:44:75:38:9B:7F
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:3f:8c:5c:c4:95:70:89:9d:c9:ec:5c:70:c5:0f:4d:1a:
         1c:33:83:a6:4e:c5:ce:45:1d:07:78:88:02:29:4b:21:05:9c:
         39:65:b3:a4:71:a8:f1:33:c1:7b:78:42:6d:4e:f4:47:61:39:
         9b:f6:54:9d:1a:c9:f2:0d:73:14:cf:aa:e1:98:b4:eb:bd:36:
         98:bc:7f:c3:0e:aa:21:17:d9:96:67:53:58:98:64:d8:96:14:
         f3:91:77:f0:b8:39:03:54:a0:c2:4c:16:b6:c8:30:2e:96:4c:
         41:91:df:15:70:1a:f5:05:51:c7:48:fa:64:0e:73:38:0b:99:
         27:0b:bc:50:c5:c1:bb:dc:21:a7:3f:cf:d7:c3:4b:2c:c1:55:
         2a:79:6d:c9:8c:fb:66:53:75:47:2a:20:18:d6:0d:69:16:b8:
         46:df:37:ea:27:60:ab:05:62:9b:c2:7b:0e:99:8b:b9:0d:1e:
         b1:ef:35:e1:e6:cb:8f:38:4e:03:53:b8:ea:64:0e:e1:a0:97:
         05:f4:b1:a4:70:81:98:1a:a8:c2:5a:49:06:b8:16:0f:cd:0e:
         85:90:62:3e:13:50:ef:e3:bd:e6:bb:d4:1c:fc:9b:c6:a7:10:
         3a:c1:70:b7:f6:8d:75:d5:c0:b1:c1:12:f1:10:6a:69:ac:3a:
         af:76:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:31 2025 by rpki-client