Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
File:                     9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft (raw, json)
Hash identifier:          BFEvniF/7bhhzJMyX8zkkTrIdPl2Ws9KmX8RWtzPouA=
Subject key identifier:   F2:B8:31:E9:A8:94:32:BF:B0:8F:E9:23:9E:BC:3D:EF:8F:C2:D6:68
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       4489B9387281113474C5C1D6A906225D362299B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
Manifest number:          020E
Signing time:             Sat 26 Jul 2025 00:33:30 +0000
Manifest this update:     Sat 26 Jul 2025 00:28:30 +0000
Manifest next update:     Sun 27 Jul 2025 03:12:30 +0000
Files and hashes:         1: 323830343a6637343a3a2f33322d3332203d3e20313938393439.roa (hash: tDo6StoBdhhZGDterYlKws173jnJih2e0Fr5a3GykrY=)
                          2: 3133382e3131372e36342e302f32322d3232203d3e20313938393439.roa (hash: LmGWyMO+3XZhMui31SJKmhtEFb943k+2pywheF8/mmg=)
                          3: 3133322e3235352e31362e302f32322d3234203d3e20323633353836.roa (hash: sTeZiCPYeUDs6CjQlF6oSnGzG0jAMwAmHwVN9MYVKrk=)
                          4: 3136382e3232382e3130342e302f32322d3232203d3e20313938393439.roa (hash: 8nWkn3Sqf0AfYJvaYyNOiHbYJdg3M6r7Var0f4+1yXg=)
                          5: 3133322e3235352e31362e302f32322d3232203d3e20313938393439.roa (hash: nnDvhWK0LXRtGbYTKQP4TrycepyGAr59vAkt2tuh7mE=)
                          6: 3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (hash: 7dK9IjQo7l30GXdriklsLv1LlGLMCS0TSARyyYDtDWM=)
                          7: 9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl (hash: mOJVv0eNRvxCvpydEcFcI3Xu+h0T5nfpfyAsySJnYME=)
                          8: 3137372e3135352e38382e302f32312d3231203d3e20313938393439.roa (hash: PXFq4MyZ9l520M2BPNIlomttZn9u6RK0qeVMJMr6ZJs=)
                          9: 3133382e3131372e36342e302f32322d3234203d3e20323633353836.roa (hash: fXfboTPcVmcsKoPSJSHRy8UwiwNEyGoQv+7iPwATm0A=)
                          10: 3136382e3232382e3130342e302f32322d3234203d3e20323633353836.roa (hash: rgpcqEBw/6xlqS8WEKJnjQSuNRzcCbcMWUc188ZsBrY=)
                          11: 323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (hash: 52lsjaJNpUCe2AcAV81o+4/grCzfEtC6pQ/EefJtw3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:89:b9:38:72:81:11:34:74:c5:c1:d6:a9:06:22:5d:36:22:99:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Jul 26 00:28:30 2025 GMT
            Not After : Jul 27 03:12:30 2025 GMT
        Subject: CN=F2B831E9A89432BFB08FE9239EBC3DEF8FC2D668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:c0:c3:83:ea:37:c1:af:6a:19:41:ca:53:
                    d3:d3:54:e5:fc:6b:85:73:b9:8b:1a:79:29:66:fd:
                    bf:f0:72:ec:28:4a:18:34:8e:f5:21:b2:27:92:bb:
                    65:56:2f:40:ce:d3:d3:4b:02:36:85:66:1e:92:34:
                    da:7c:dd:eb:6b:20:44:07:5b:1f:ee:59:9e:49:c5:
                    ac:a4:ca:ee:02:32:12:b7:2a:a0:ce:df:b9:85:4c:
                    02:06:3d:67:dd:48:72:24:f8:0c:2f:65:46:8f:15:
                    6c:0f:10:15:7f:73:d2:52:b2:e9:fc:ae:2f:7a:51:
                    e3:9b:6f:16:29:26:6c:2d:df:37:aa:5e:26:80:fb:
                    cf:bd:55:97:dc:f6:85:eb:db:a3:21:07:f5:9f:38:
                    da:95:15:83:4e:2b:4a:00:18:d0:31:36:f4:c6:1c:
                    6b:1b:45:18:0e:4c:65:64:48:53:70:31:88:2f:69:
                    d3:81:0a:78:f6:d7:76:45:f3:87:e7:28:63:68:a0:
                    35:f5:3e:54:3a:8e:9c:16:e2:c0:4e:5a:28:25:9d:
                    30:e6:58:db:08:1e:06:8f:60:bc:1b:ed:d3:e6:23:
                    25:e9:2d:51:bc:e6:bc:ad:7f:01:83:a7:d7:3b:e9:
                    7a:4f:fc:03:32:75:2b:bc:55:26:68:3c:42:f6:17:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B8:31:E9:A8:94:32:BF:B0:8F:E9:23:9E:BC:3D:EF:8F:C2:D6:68
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:c2:6d:b0:4f:e3:3d:ba:b4:ba:1d:5f:dd:fb:b8:f4:a6:
         5f:02:6f:0e:ec:70:41:b2:c5:f0:84:6a:40:8f:67:14:33:15:
         4f:6e:f8:18:7c:12:44:71:1e:6a:ac:ee:47:67:23:72:57:b0:
         59:f2:6b:72:02:2c:f4:18:55:d1:ab:51:a0:ef:d2:5e:d5:ea:
         ed:74:fc:58:c8:1a:9d:67:d0:fb:e7:cf:54:85:5e:b5:3b:cb:
         29:e3:01:6e:bf:6b:70:10:9c:a2:11:92:cf:f8:e2:95:69:28:
         19:d2:b1:cb:f0:11:e8:44:18:f9:ed:6a:04:48:59:9c:b8:e8:
         1d:24:11:81:f6:61:d4:13:12:ce:55:bf:5e:58:b2:71:ae:27:
         18:6b:b9:60:7f:9d:3e:f0:06:5d:3d:35:cc:1a:bb:09:4c:7e:
         f8:3c:01:ff:36:ae:a8:3e:b8:0e:77:6d:2a:6c:ea:8d:91:98:
         46:25:24:d7:79:55:e7:9f:d0:d3:65:e7:c4:93:0f:76:bf:76:
         1f:75:66:7d:f9:52:f1:54:c5:87:f3:7c:40:a1:d9:ff:ca:63:
         34:f1:0f:3b:5f:5d:cd:04:a4:71:a4:51:79:4a:cf:02:cf:05:
         77:0f:ec:52:c6:d8:ff:59:b6:8b:15:f6:47:f5:b0:98:3a:49:
         ce:b7:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:46:32 2025 by rpki-client