Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
File:                     461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft (raw, json)
Hash identifier:          lwqhUttM52DWmG8VETQwTpRhCFs9iHcLHjha2RAxpus=
Subject key identifier:   10:57:03:07:B2:14:63:FB:34:25:C6:7B:C4:EB:54:DE:3B:7F:96:F4
Authority key identifier: 46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F
Certificate issuer:       /CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
Certificate serial:       37DFF2BC8BE0C180D1285D11D7F13B374D98556D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
Manifest number:          01A8
Signing time:             Fri 25 Jul 2025 23:28:30 +0000
Manifest this update:     Fri 25 Jul 2025 23:23:30 +0000
Manifest next update:     Sun 27 Jul 2025 02:24:30 +0000
Files and hashes:         1: 461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl (hash: DmhLBSMUA2kqiBKDuoQ34LB65LkVrgVmGzAOvnn35pw=)
                          2: 3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa (hash: 3f6R65emXmNLpbVJ3Z9SCoS11OJn1LQkXvDc6zwjags=)
                          3: 34352e3137302e38302e302f32322d3234203d3e20323632373835.roa (hash: egQG2Ws+KVIt6xL4WG2fNvHPxoeVuDpQkoTkKoCRr84=)
                          4: 3230312e36322e34382e302f32302d3234203d3e20323632373835.roa (hash: Pnlpij1uQkqZmg8me+fqmgQUayFDJW99HIY2OXjDzn0=)
                          5: 3136372e3235302e382e302f32322d3234203d3e20323632373835.roa (hash: Hub6BElxZ+3EMhYWSuYca5FxPDPou6MfAAUzn7XcCCM=)
                          6: 3230312e37312e33322e302f32302d3234203d3e20323632373835.roa (hash: 4IjsvHGIp7PPRAPzr3eRR6+PU6/hHwUxj7O4SaNtQX4=)
                          7: 323830343a326266343a3a2f33322d3438203d3e20323632373835.roa (hash: Qnyw9yXwWTXSKg+8h1ZmtesR3jXDAGcpP2d8JwmkKkg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl
                          rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:df:f2:bc:8b:e0:c1:80:d1:28:5d:11:d7:f1:3b:37:4d:98:55:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
        Validity
            Not Before: Jul 25 23:23:30 2025 GMT
            Not After : Jul 27 02:24:30 2025 GMT
        Subject: CN=10570307B21463FB3425C67BC4EB54DE3B7F96F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:c3:f9:73:1d:00:1b:4b:8f:68:4d:d9:5d:
                    05:41:e2:ad:3d:d9:26:ca:19:33:8a:dc:41:d7:91:
                    c0:0e:52:30:af:9d:a6:e2:28:82:a2:fc:10:04:64:
                    f1:86:9b:10:a2:1d:85:34:e9:a0:ad:51:67:a7:5a:
                    36:0a:95:72:21:26:68:6d:9f:3c:87:be:ac:9f:64:
                    b4:bc:5c:3e:96:83:c6:9e:6e:74:7c:d5:53:53:8a:
                    df:2c:6e:17:8b:dd:5f:9a:e0:59:75:66:bf:e4:ee:
                    42:e6:1a:5b:c7:58:27:d3:43:0b:59:3c:c9:fa:0c:
                    2a:44:94:bf:f9:11:6e:16:2b:99:66:26:36:3b:4f:
                    3c:fe:f6:51:16:76:e0:d6:ce:39:d8:25:30:b4:db:
                    c3:59:2b:24:e4:07:29:61:97:a0:02:94:18:75:15:
                    c0:02:f6:43:42:cc:a6:6b:ff:31:75:85:0d:c0:b2:
                    1c:55:1f:16:51:28:56:66:54:b7:9f:ae:f3:a8:6c:
                    6d:f5:95:c9:7e:eb:bd:37:ea:80:29:fe:d8:87:20:
                    6c:17:ae:ac:22:a7:ab:41:2f:6b:dd:a1:95:47:9a:
                    93:37:39:a1:6d:d1:ef:d4:a3:26:56:1b:46:8e:b1:
                    e9:61:80:03:12:cc:25:6f:87:11:9a:93:db:9c:08:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:57:03:07:B2:14:63:FB:34:25:C6:7B:C4:EB:54:DE:3B:7F:96:F4
            X509v3 Authority Key Identifier:
                keyid:46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:76:1e:d8:b9:9d:43:d5:b6:b2:6f:f4:9d:cb:f9:6f:0d:7c:
         30:01:db:2c:a4:c1:73:69:9e:50:a8:58:24:65:bf:0c:a0:2a:
         4e:49:89:13:39:d3:7d:66:bd:b7:5d:0a:b6:6a:7e:7a:4a:1a:
         ae:ee:d7:95:2d:4b:8b:3a:4c:e6:a5:33:36:2c:da:af:fb:dd:
         bf:9a:3c:7f:1b:81:9e:66:a2:fa:af:b3:3d:2a:c3:66:68:b7:
         8b:c0:5a:0b:1c:42:26:e5:60:13:1a:83:26:a1:8e:ac:3d:21:
         2c:cd:11:fb:42:a7:b5:14:8b:18:18:1c:d3:dc:5c:dd:3b:f6:
         68:07:96:89:29:f1:f6:9c:8f:ba:5f:48:e4:64:f4:0c:40:cb:
         ad:4b:bc:37:b5:17:2a:ef:b1:ae:7a:47:55:b9:4a:da:57:f2:
         ab:a5:29:68:a1:21:6b:d8:f1:8c:be:7f:bd:6b:f6:91:04:62:
         5d:ca:4d:29:0d:d8:74:56:ab:87:e4:b0:a6:16:f1:bc:2e:13:
         1e:47:70:d0:f2:db:b8:8c:12:5f:64:2b:39:18:3b:18:30:07:
         35:2b:b5:32:fe:ec:10:00:84:d2:57:ae:28:ce:b9:07:de:e8:
         66:08:c4:94:7a:da:56:4c:23:99:38:22:13:68:be:9a:56:5f:
         81:88:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:15:10 2025 by rpki-client