Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
File:                     9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json)
Hash identifier:          GpjGbkzPWH1enBHumFXD83SuJf/W9Y6q1EBZP4nMrM8=
Subject key identifier:   29:BF:DF:F9:61:C0:D2:F3:4B:20:C3:F1:B4:B8:BD:38:7B:1D:2A:A5
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       7413C6110801B97783BB02E3F80618F892D77232
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
Manifest number:          02A2
Signing time:             Mon 28 Jul 2025 23:35:27 +0000
Manifest this update:     Mon 28 Jul 2025 23:30:27 +0000
Manifest next update:     Wed 30 Jul 2025 02:29:27 +0000
Files and hashes:         1: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: gLs1P9X81n1VFfuY9I9DWXvqDOQ8Y2hZzFOcfoQ0ohc=)
                          2: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: 8her+PoAT9avPWWQK9qhm9DUMHGf0Ur31Z2fvvlEG+w=)
                          3: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: VizvqRIuYKfkI4s8BEKfvxZE9y5806w4B0z2gcdiGkE=)
                          4: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: snLroiS505YeWkuZ6A+da/bWOBk0WehfCLjPxZbkLPw=)
                          5: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: qeJpzQeOLKkwOi3JlBWrssz8TP7xi7dkX2rBNdr0I2c=)
                          6: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: fjUq+2OEZ2tApMzj288/NKrvwEiH+6RX3sAnPykGFRs=)
                          7: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: Op1QUlbs1kMgDUhfRTkD0khQVu8yE34ODvSUQUBmo3Q=)
                          8: 3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa (hash: afiDgNmjYoTHl9tBgKdwse060m18ExwL0lIq/AJdzls=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 02:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:13:c6:11:08:01:b9:77:83:bb:02:e3:f8:06:18:f8:92:d7:72:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Jul 28 23:30:27 2025 GMT
            Not After : Jul 30 02:29:27 2025 GMT
        Subject: CN=29BFDFF961C0D2F34B20C3F1B4B8BD387B1D2AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:66:83:e7:65:e6:0c:af:dc:1d:a4:ba:29:
                    00:98:03:15:48:91:6c:26:27:ae:3a:57:7c:49:dd:
                    9f:a3:fc:b9:19:ec:f0:38:81:4f:b6:fd:a1:95:39:
                    cd:b8:d9:22:14:3a:f5:fa:33:ab:59:44:7c:ab:5b:
                    d4:76:fe:fd:59:1c:d0:be:a1:8d:87:97:ac:23:97:
                    69:9c:d6:d0:3e:eb:28:2b:3e:ae:8b:7c:cf:64:d9:
                    8e:0e:36:2f:5a:6f:00:c4:aa:78:3c:97:35:81:b4:
                    d0:33:ae:d5:d3:2b:42:cc:56:e9:c1:cb:0b:d5:99:
                    a8:9e:a0:2d:0c:79:97:86:db:5d:44:2e:eb:d6:15:
                    ec:81:c9:4d:17:56:89:22:cf:88:c0:f7:78:26:1c:
                    52:3f:44:ac:c0:a1:c5:d6:00:bb:02:e8:cd:45:03:
                    6e:59:51:12:11:9a:2d:43:5c:c7:e7:92:0c:b7:af:
                    a9:2e:05:87:96:16:0f:fe:da:fa:b6:f8:4a:f3:3b:
                    3c:87:c6:f4:b7:f7:9b:62:47:a7:e6:e1:eb:5f:29:
                    dd:b1:f0:25:b0:8f:13:52:5f:9d:c1:de:d8:30:f6:
                    6c:ba:4e:2f:ab:54:2d:ad:2e:15:83:cd:40:1f:27:
                    32:28:f7:2c:7e:e2:28:01:c0:5b:41:7c:6b:37:dd:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BF:DF:F9:61:C0:D2:F3:4B:20:C3:F1:B4:B8:BD:38:7B:1D:2A:A5
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:a2:f2:e7:01:5a:a6:94:4b:5a:98:7d:23:7e:5b:d6:85:
         8c:0c:62:32:d8:dd:5e:08:db:b4:11:ee:68:5e:9f:20:88:5a:
         28:0b:8c:55:28:fe:a5:0a:d3:bc:79:66:23:e2:ac:a3:5a:7a:
         15:01:df:36:4d:1a:f5:31:73:3c:43:40:c2:62:ad:40:cf:a1:
         35:8e:ca:6e:47:93:77:fb:f9:f9:b2:d0:36:ec:72:d1:1b:93:
         1d:92:ae:da:e4:14:53:04:fc:86:9f:34:e6:37:1c:0f:bd:6d:
         2c:63:47:11:2e:14:86:c8:6f:1a:6b:b9:cd:e5:69:95:d3:9c:
         3e:0a:10:80:2b:19:0c:ba:03:00:65:3c:1f:fa:08:54:24:74:
         55:64:96:21:f9:11:7b:6f:fc:93:b6:b2:ef:27:4a:45:ff:a1:
         ef:e1:66:10:4c:e2:61:95:19:b1:30:19:7c:84:e6:6e:de:cf:
         84:77:f4:f5:9c:81:c8:96:85:97:e3:e0:a3:a6:00:9c:bf:c0:
         1e:05:be:34:21:f4:56:5e:96:70:54:fc:95:68:c8:ce:78:52:
         1a:52:b2:ee:df:37:7a:8f:f7:e8:1d:1b:27:1a:b3:26:ed:9c:
         6f:f2:30:9e:37:fd:4c:3a:13:39:d6:0f:72:f8:87:09:dc:c1:
         bd:30:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:52 2025 by rpki-client