Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
File:                     411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft (raw, json)
Hash identifier:          KNmjwMfBsbIBs7AdNc86NGFCyCsl0c0DwdsvsaZPcdQ=
Subject key identifier:   E1:DE:4D:00:E1:73:36:48:B7:C4:8C:4D:4B:62:85:BE:A7:70:F5:5C
Authority key identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B
Certificate issuer:       /CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
Certificate serial:       7D20E8146B14CAF5AA572E5608DE3DF44A0A2A20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
Manifest number:          CD
Signing time:             Wed 20 Aug 2025 06:30:00 +0000
Manifest this update:     Wed 20 Aug 2025 06:25:00 +0000
Manifest next update:     Thu 21 Aug 2025 06:30:00 +0000
Files and hashes:         1: 411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl (hash: MmB5LqcJtE9SlqmwViOABoOdXqvZmRwJlx3hxyC6thM=)
                          2: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: /LHvi05kCt9zKgKY+WIZNYGkbzjxuWi5IXygDqTTTek=)
                          3: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: bqvZ1PV8LUhBf5JFS4uCb4PW7l97mORSa3iC75GRr/8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl
                          rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:20:e8:14:6b:14:ca:f5:aa:57:2e:56:08:de:3d:f4:4a:0a:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
        Validity
            Not Before: Aug 20 06:25:00 2025 GMT
            Not After : Aug 21 06:30:00 2025 GMT
        Subject: CN=3082010A0282010100DA646426CBDA659A79B7E64CAF58495348E47909EF34F550FB56FB80CA26D216DCB3602C1B4305DD3BFBD6E1E7C3A4F74DC0A4F8051641EC672D2F53255F3F944EDFF55F229C4191DE0F4D32AF476470ADA653CFB48451F64D1490693820DBDCDBF074F2162E7486DE16D98610DEB5718A0968441BDAB98A0E03F9DD74EB597072C4E0262A651E0B5070CBAF6866AF17163F5A3CC86BEA751D8945F11EB64CA44C1454A9B8AB62FD5564F1245B7CD28B403B0BC2A0D1663F5243C5423A5FE1E7072CF692B3F19DF5C51FAA42EABD108DE84A6FC6878C6543A2347E9CC8674BBC7FAC4775CFAFB898492A500E2308CBC220AB4F4AC50097ED182ADB1321816F330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:64:26:cb:da:65:9a:79:b7:e6:4c:af:58:
                    49:53:48:e4:79:09:ef:34:f5:50:fb:56:fb:80:ca:
                    26:d2:16:dc:b3:60:2c:1b:43:05:dd:3b:fb:d6:e1:
                    e7:c3:a4:f7:4d:c0:a4:f8:05:16:41:ec:67:2d:2f:
                    53:25:5f:3f:94:4e:df:f5:5f:22:9c:41:91:de:0f:
                    4d:32:af:47:64:70:ad:a6:53:cf:b4:84:51:f6:4d:
                    14:90:69:38:20:db:dc:db:f0:74:f2:16:2e:74:86:
                    de:16:d9:86:10:de:b5:71:8a:09:68:44:1b:da:b9:
                    8a:0e:03:f9:dd:74:eb:59:70:72:c4:e0:26:2a:65:
                    1e:0b:50:70:cb:af:68:66:af:17:16:3f:5a:3c:c8:
                    6b:ea:75:1d:89:45:f1:1e:b6:4c:a4:4c:14:54:a9:
                    b8:ab:62:fd:55:64:f1:24:5b:7c:d2:8b:40:3b:0b:
                    c2:a0:d1:66:3f:52:43:c5:42:3a:5f:e1:e7:07:2c:
                    f6:92:b3:f1:9d:f5:c5:1f:aa:42:ea:bd:10:8d:e8:
                    4a:6f:c6:87:8c:65:43:a2:34:7e:9c:c8:67:4b:bc:
                    7f:ac:47:75:cf:af:b8:98:49:2a:50:0e:23:08:cb:
                    c2:20:ab:4f:4a:c5:00:97:ed:18:2a:db:13:21:81:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DE:4D:00:E1:73:36:48:B7:C4:8C:4D:4B:62:85:BE:A7:70:F5:5C
            X509v3 Authority Key Identifier:
                keyid:41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:61:55:95:dc:0b:50:de:67:47:b1:93:5e:4b:d5:3e:63:b0:
         95:4f:0f:d8:c7:f8:80:fa:18:e9:26:ab:0d:60:ee:2e:cd:98:
         cd:bd:43:f5:e2:2f:a3:20:62:58:8b:91:72:ed:c6:ae:76:02:
         fa:5f:1b:3d:27:3c:8b:dc:9d:a6:97:6d:bf:82:e4:ab:77:28:
         83:6c:15:bd:29:73:ae:d4:8c:1c:f2:e1:8a:ba:ee:58:fe:c2:
         30:bd:65:b8:31:0c:e5:10:5a:ef:de:db:3a:76:3c:36:24:88:
         65:ae:dd:99:6f:e0:94:f6:9c:14:4c:a7:38:01:8f:41:63:41:
         e7:b6:a7:86:8a:99:1f:22:07:1e:51:ef:e5:08:e6:7f:4a:d2:
         58:d2:f9:5d:a0:57:1e:7d:c4:45:9b:fd:c2:b8:82:bd:d6:a3:
         06:13:f9:a2:66:09:c7:b5:5a:c5:00:f6:bf:c3:d6:f0:8f:97:
         f4:f9:58:bd:81:48:de:23:68:ef:9f:9d:9c:e8:e5:34:b4:93:
         9b:64:79:bf:2f:c2:0e:d5:86:df:28:17:4f:4e:2e:89:ad:7e:
         27:9d:cf:09:df:5b:bf:ee:ad:38:ea:28:94:d1:ed:4d:9d:8f:
         61:9a:38:27:17:90:79:a4:3d:2f:01:61:f1:38:5e:d8:90:e6:
         c0:9b:fe:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 20 21:29:20 2025 by rpki-client