Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
File:                     C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft (raw, json)
Hash identifier:          yiCXsyIktVDnaJmoZrN+TgTjkXPqyPgx/5TZ1N1d4vQ=
Subject key identifier:   2F:41:82:45:09:65:DB:86:2A:D2:2A:2D:35:3C:1E:47:66:90:D2:ED
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Certificate issuer:       /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial:       135B5EFD45E7D757442410159B05DAD21B93F93A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
Manifest number:          02BD
Signing time:             Wed 17 Sep 2025 22:54:17 +0000
Manifest this update:     Wed 17 Sep 2025 22:49:17 +0000
Manifest next update:     Thu 18 Sep 2025 23:48:17 +0000
Files and hashes:         1: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: cYRnXeUL77tbZZROt3Wn+JGjwSu2QmTDm/qcgCbUuRs=)
                          2: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl (hash: OeGsiehzweRCx+K9h18WZ47Eov2VFH156kT7wQgnnCU=)
                          3: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: UhTWnyVMbYu8EHBAglnDBIow7lLgfSvBg43ee63dnW4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 23:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5b:5e:fd:45:e7:d7:57:44:24:10:15:9b:05:da:d2:1b:93:f9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
        Validity
            Not Before: Sep 17 22:49:17 2025 GMT
            Not After : Sep 18 23:48:17 2025 GMT
        Subject: CN=2F4182450965DB862AD22A2D353C1E476690D2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:a0:c4:f0:26:8c:2d:3c:86:18:b1:63:fc:
                    65:74:f0:04:53:0d:21:b2:ad:04:ee:1c:74:7f:9a:
                    fe:7d:e5:e4:03:36:ac:24:d3:fb:b9:93:03:b7:dd:
                    df:09:4e:f4:60:39:45:c5:ed:1f:8e:a8:73:6e:79:
                    d8:85:25:ff:79:82:bd:69:2e:70:ad:66:70:34:d1:
                    b3:17:3a:1b:2a:b3:7c:b8:68:30:1d:86:d6:99:1c:
                    1d:76:58:2d:49:a3:a0:e8:0c:4c:9d:ac:b9:67:e5:
                    34:d9:d9:32:7b:bc:be:e2:ba:f5:8f:92:d1:ec:1c:
                    3e:d7:4d:f0:35:a0:d9:00:6d:f0:ad:09:ce:fb:04:
                    cb:dd:da:71:6d:57:29:79:72:a5:6b:16:7d:10:1a:
                    37:7b:e9:a6:1b:92:2a:ba:96:1b:39:ab:2b:e0:c5:
                    fe:96:71:58:39:75:f0:5c:e8:56:75:84:17:3a:81:
                    75:fe:1e:96:e2:99:67:fc:69:63:82:c8:00:e0:8d:
                    59:bc:f2:3a:1d:4f:68:b5:b6:e4:e2:18:bf:09:6a:
                    43:bc:1b:37:59:de:45:40:e4:d6:db:f5:f6:0b:f2:
                    d3:5e:9b:af:47:c3:dc:8e:51:ca:6a:66:a7:e1:f2:
                    4f:d7:a7:60:dd:b5:42:04:79:e7:28:3f:74:e2:d0:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:41:82:45:09:65:DB:86:2A:D2:2A:2D:35:3C:1E:47:66:90:D2:ED
            X509v3 Authority Key Identifier:
                keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:83:14:94:b1:f0:56:4c:28:62:7d:44:ae:75:16:a7:7d:dc:
         78:e5:f2:f1:0b:e4:2f:6c:03:8c:bb:14:3a:c7:4b:9c:2f:da:
         20:f3:77:40:81:a4:e2:7e:9b:39:fa:6a:5c:bc:17:f2:08:ef:
         8a:9c:35:04:f3:46:31:9a:95:b6:53:f6:00:f6:02:18:f4:79:
         1f:48:05:71:f3:46:9a:df:37:ef:8d:76:33:eb:5b:3c:fa:55:
         1d:46:b2:93:bb:b0:13:61:5f:b3:4f:86:6a:ef:f6:ad:31:c6:
         11:62:81:2c:fa:6e:eb:3c:94:31:39:79:a5:82:4e:4b:43:29:
         95:10:ea:a9:8f:d7:73:e3:c3:93:9c:77:eb:9f:b6:3b:03:e6:
         71:8d:2b:c1:90:6d:31:c5:98:b0:d8:eb:a7:5b:e8:4c:92:66:
         1d:2b:d8:62:8a:a5:ee:ea:6c:88:5c:b6:ac:ad:f6:ed:01:1a:
         e6:e9:8b:d6:4d:45:61:08:5b:05:07:3b:86:03:65:96:3f:ec:
         c1:c1:32:71:1a:34:85:ca:62:00:63:48:e2:f3:1f:2f:93:ec:
         a9:59:44:57:cc:0a:b9:4c:14:a8:6a:fe:2a:a9:1f:e4:16:3e:
         e5:5a:20:b7:f1:4a:5b:72:a7:5d:60:de:a8:bf:fe:e8:3c:33:
         dd:f1:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:29:04 2025 by rpki-client