Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
File:                     A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json)
Hash identifier:          kt5BNS/Zr9fvfpwqdlhbrB7OjgVEiFFAK35nKcMvTgs=
Subject key identifier:   33:38:D5:A3:B2:CB:AA:2F:43:C6:61:E2:DC:6A:C6:55:DB:9D:3C:EC
Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD
Certificate issuer:       /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
Certificate serial:       43F127A38B14764006AB4D6EE30F17D64767C7DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
Manifest number:          02C4
Signing time:             Thu 18 Sep 2025 06:53:32 +0000
Manifest this update:     Thu 18 Sep 2025 06:48:32 +0000
Manifest next update:     Fri 19 Sep 2025 07:49:32 +0000
Files and hashes:         1: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: CVTIBOeM1eSo3+d70PBWtHxL3E/rnoPeFIIkn3jrV9M=)
                          2: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=)
                          3: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl
                          rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f1:27:a3:8b:14:76:40:06:ab:4d:6e:e3:0f:17:d6:47:67:c7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
        Validity
            Not Before: Sep 18 06:48:32 2025 GMT
            Not After : Sep 19 07:49:32 2025 GMT
        Subject: CN=3338D5A3B2CBAA2F43C661E2DC6AC655DB9D3CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:c3:84:56:01:66:1f:b6:33:40:6f:ac:a0:
                    d8:c6:8b:90:24:f6:63:fd:f9:a4:ca:17:c7:bc:3f:
                    2f:c3:1a:f0:69:57:b9:5f:68:cf:bf:e3:e6:e4:e5:
                    c9:9b:7d:79:16:10:e9:7b:e4:58:0b:da:5a:ab:7d:
                    ef:ba:1e:cf:4c:cc:fa:4b:4b:f3:12:77:76:ae:66:
                    b5:9d:ee:60:5b:2b:d5:c8:af:71:f5:5a:00:63:50:
                    eb:84:73:c4:2c:7d:cc:ef:4e:4d:34:99:58:4f:62:
                    8d:58:0b:1d:96:71:b9:5c:77:f8:5f:db:84:e3:47:
                    f1:cf:c3:1e:9a:e2:97:7d:86:f7:6d:4c:6c:da:e2:
                    dc:e7:3c:1e:6f:34:b5:c0:65:84:4d:15:23:db:d0:
                    79:74:44:fd:43:02:a0:28:69:1e:d0:b0:49:01:6d:
                    d2:ce:35:3e:b7:e7:05:b2:7d:f1:17:fa:b0:03:c7:
                    bc:71:a3:4c:e6:57:28:6e:8b:8d:1d:45:27:1a:5d:
                    7a:b2:22:37:92:40:ce:9d:8e:ef:a0:10:09:65:a9:
                    17:d7:cd:47:b7:16:6d:3a:ec:f7:8e:37:3f:95:dd:
                    7e:ae:0d:77:55:c3:87:21:52:f6:1d:16:c9:d3:4a:
                    83:5b:65:43:76:b2:b7:cf:a4:2e:fa:37:81:04:d6:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:38:D5:A3:B2:CB:AA:2F:43:C6:61:E2:DC:6A:C6:55:DB:9D:3C:EC
            X509v3 Authority Key Identifier:
                keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d9:67:87:c3:64:0e:a0:c3:34:69:dc:cb:82:e9:c8:14:58:
         f1:96:1d:d3:9d:7c:17:e3:74:94:eb:9e:39:48:30:16:41:9f:
         65:70:d0:aa:36:ea:6a:14:2d:93:e3:66:ea:22:d0:dc:fd:3b:
         06:44:0f:f7:d5:ec:c9:df:4d:92:cf:b6:c7:6b:05:0e:8c:10:
         f8:28:54:5a:df:71:50:da:02:9b:ac:3e:c8:37:2a:30:cd:57:
         e5:59:41:a9:ff:16:78:c5:84:6e:e3:fc:21:8e:b0:3f:63:8b:
         e9:7e:70:f8:9d:68:e5:95:3c:aa:4f:3c:b8:53:21:47:5c:1d:
         b3:98:dc:e1:56:25:4c:84:30:6b:1b:d8:bc:fd:e0:b0:3a:9e:
         c1:d1:d9:fd:c8:e9:d1:90:e8:a3:30:24:7f:9b:ba:f6:f0:b8:
         c9:56:67:6a:91:4e:8c:95:07:ba:6a:84:8b:6a:ba:e2:60:0b:
         8e:82:ba:4d:6b:1a:5a:eb:e1:e2:1e:a4:88:b0:bc:86:f7:9a:
         d8:4d:93:ca:17:dc:44:b7:ea:07:bf:da:9c:7f:f1:fd:8b:1b:
         d7:b6:05:05:d6:80:01:1e:e5:a4:d5:00:9d:84:59:78:98:34:
         fc:c1:3c:05:78:fb:25:58:3a:9e:9d:1d:2a:98:be:b5:07:f2:
         06:9f:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:00:20 2025 by rpki-client