Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
File:                     25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft (raw, json)
Hash identifier:          qnfEuPChgHPJVQGmxGQMuOd/lGWJx+6BV0ElKlLQBO4=
Subject key identifier:   3F:CF:04:B5:48:3A:7B:4B:6E:4B:07:C4:77:93:65:7A:D9:DF:D8:87
Authority key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4
Certificate issuer:       /CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
Certificate serial:       18B84FF4AF9A2EAFD2DC754BF91AC2C9B8330C10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
Manifest number:          D0
Signing time:             Wed 26 Aug 2026 02:39:11 +0000
Manifest this update:     Wed 26 Aug 2026 02:34:11 +0000
Manifest next update:     Thu 27 Aug 2026 05:32:11 +0000
Files and hashes:         1: 25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl (hash: xnlG3bq3o1aqEpXba975g5Hrilmorvr8rY6uUb4KavM=)
                          2: 34352e3137372e35352e302f32342d3234203d3e20323732343336.roa (hash: dKOsmZa4z9qSIgo8yLYx4RqB1oom+RD/Jq0WtEUcQLs=)
                          3: 34352e3136322e38372e302f32342d3234203d3e20323732343336.roa (hash: zHMEVhb4HbCNFMWdGJ/1rB/njvFJL1tkTjCK1hCP9QM=)
                          4: 34352e3136392e39362e302f32342d3234203d3e20323732343336.roa (hash: R9X+snJairB7bVsyitDxDi6+enAiIXl1nUD8Has2P04=)
                          5: 323830343a383132383a383030303a3a2f33332d3333203d3e20323732343336.roa (hash: jsbdrkUIjnV9BjmAurKSVUYnCq+mndjZHWR9jwwkQeM=)
                          6: 323830343a383132383a3a2f33322d3332203d3e20323732343336.roa (hash: YTsa0XtsuhsYnA6zgq0FitJSomm7ZSqmWMOTnvcZOEU=)
                          7: 323830343a383132383a3a2f33332d3333203d3e20323732343336.roa (hash: DskG1jBPsG8Mbhj/qjZgPmLI/4847y+Q4chDi3sUTL0=)
                          8: 34352e3137342e382e302f32342d3234203d3e20323732343336.roa (hash: P+Aw4cSx/4jmUpiDAjw4ZEGgusRevru3/rnF12C/fu8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl
                          rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 05:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b8:4f:f4:af:9a:2e:af:d2:dc:75:4b:f9:1a:c2:c9:b8:33:0c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
        Validity
            Not Before: Aug 26 02:34:11 2026 GMT
            Not After : Aug 27 05:32:11 2026 GMT
        Subject: CN=3FCF04B5483A7B4B6E4B07C47793657AD9DFD887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:64:18:53:96:56:59:81:f6:4b:73:a1:9b:
                    47:7f:f0:3e:8b:fc:32:75:ec:62:29:e1:1a:80:f9:
                    a1:29:52:ed:70:ea:62:9c:28:f0:31:ca:4a:fe:68:
                    20:c7:f9:16:40:1f:80:c6:26:91:c9:c1:78:70:3b:
                    b3:fc:fc:23:42:94:c6:37:ea:c0:00:0a:2e:61:9d:
                    d5:16:f0:4c:9d:7e:20:07:04:35:c7:f2:36:2c:be:
                    a3:89:cc:da:8e:86:e6:5d:12:56:e8:02:8b:75:28:
                    24:f6:e9:57:3e:74:92:42:23:3e:ca:77:bc:ca:34:
                    fa:a7:08:de:f6:76:f4:7f:b2:71:44:48:13:e1:f6:
                    4c:b1:54:1d:2e:47:c4:32:9a:0c:b0:f1:5a:21:87:
                    f2:e9:33:f4:33:11:e7:52:a8:99:68:58:60:97:35:
                    1d:b8:23:51:ea:61:20:4b:00:eb:91:c2:f9:26:7c:
                    e0:ca:1c:f4:0e:2b:6c:3d:a9:c8:a0:80:fc:a0:e4:
                    83:e1:12:d1:12:c1:4d:92:bf:d9:56:64:a1:37:b4:
                    44:90:ea:2c:c4:84:fe:60:41:2e:91:1b:64:34:68:
                    49:91:bb:d4:64:ce:a9:10:67:2c:31:f7:40:b2:70:
                    34:d9:4b:e8:91:93:c1:b1:13:a8:e3:8a:0e:c0:dd:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CF:04:B5:48:3A:7B:4B:6E:4B:07:C4:77:93:65:7A:D9:DF:D8:87
            X509v3 Authority Key Identifier:
                keyid:25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:1a:e6:df:72:2b:ef:55:75:b1:c2:7d:d8:6e:c8:ef:25:
         ac:c6:5e:20:54:de:1d:79:b5:a0:40:b5:76:a9:12:e4:78:4a:
         70:8a:c4:cc:90:59:8d:64:6c:d5:05:0a:fa:22:52:ba:05:4c:
         36:0f:20:ab:e8:f1:d0:04:f9:f6:35:5a:eb:5c:57:e7:79:5c:
         db:07:e9:47:35:0a:9f:24:8f:59:fa:fe:c8:a3:cb:a0:9d:9f:
         73:da:d5:2a:e7:81:cf:eb:ea:58:d9:f1:1a:e5:0d:5d:be:a0:
         1d:a1:c9:76:4f:b4:e7:ec:0d:30:11:b3:55:a5:22:9c:c6:72:
         85:b3:fe:ff:b9:ae:5d:21:f2:78:7b:72:99:97:17:75:38:40:
         d6:b2:54:55:57:48:dc:29:5c:27:68:39:58:44:d1:88:fc:eb:
         07:86:6c:77:05:13:ea:e4:d1:1b:fb:99:c0:d2:78:e9:24:72:
         86:81:fd:84:a2:5d:c9:d7:22:bb:bd:f8:20:ba:92:44:29:71:
         f5:73:6f:16:d2:48:b9:81:ab:ca:8e:cb:6c:4d:97:e2:7a:80:
         09:0f:05:17:22:2b:1f:4b:98:8f:df:6e:f2:11:8c:fc:e6:10:
         ae:cb:a8:05:77:f7:09:be:cc:2e:84:ae:43:36:5d:72:55:9a:
         24:40:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:19:15 2026 by rpki-client