Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
File:                     581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft (raw, json)
Hash identifier:          hbeKt3w6NLcpoKiOlVf3dcItLxO9ClD8giV3oQ2NI/Q=
Subject key identifier:   C9:6A:91:43:DD:64:FD:C1:1B:FA:0D:12:F0:03:93:9F:41:33:54:E3
Authority key identifier: 58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4
Certificate issuer:       /CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
Certificate serial:       2D5EED586A122DC9A1713371C21F171EE382ED7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
Manifest number:          0122
Signing time:             Thu 18 Sep 2025 17:12:30 +0000
Manifest this update:     Thu 18 Sep 2025 17:07:30 +0000
Manifest next update:     Fri 19 Sep 2025 17:24:30 +0000
Files and hashes:         1: 581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl (hash: TOfEr//ZUIhJ/TyGZezJGrJFdJDfh1x9+GzwE7rpkeA=)
                          2: 323830343a393038383a3a2f33322d313238203d3e20323733353538.roa (hash: 7SsgFVf4qilP6riElw0Dsp1S7JCn5aQdOBEBP0daWuw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl
                          rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:ed:58:6a:12:2d:c9:a1:71:33:71:c2:1f:17:1e:e3:82:ed:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
        Validity
            Not Before: Sep 18 17:07:30 2025 GMT
            Not After : Sep 19 17:24:30 2025 GMT
        Subject: CN=C96A9143DD64FDC11BFA0D12F003939F413354E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:34:0f:2b:43:dc:44:d2:f6:95:b2:3c:02:
                    b9:eb:bc:2b:d0:b7:bb:d1:dd:16:63:af:8a:54:ce:
                    ba:56:ef:4c:67:e3:6e:f0:8c:04:9d:a0:11:7b:87:
                    96:90:48:1b:1a:2d:8a:2f:66:d7:bf:4a:44:d4:5a:
                    e4:1c:a2:ba:a5:20:c0:22:0a:74:c1:11:d3:f8:ca:
                    0a:4c:24:f2:00:1e:75:0d:2d:36:7e:8d:d3:cd:8c:
                    ee:6b:4d:14:b2:98:cb:8b:2f:a8:c1:1f:50:1f:71:
                    8e:53:7f:51:79:52:c6:54:4e:4e:25:50:2b:59:85:
                    d0:35:4c:b2:2a:9c:9d:05:f8:3e:a9:0d:87:b2:4d:
                    a6:63:a0:3b:d0:04:d6:5a:66:9a:5a:ab:b1:3a:ee:
                    26:9d:ae:87:4d:8f:c4:f7:83:3b:87:c6:eb:ca:e6:
                    23:e4:a1:b7:6d:56:f4:67:84:33:eb:4f:0c:99:d2:
                    e4:21:af:84:a7:dc:1c:1f:68:89:03:37:f4:af:f6:
                    50:a3:d1:32:24:de:7c:4f:94:2b:c7:98:03:c4:31:
                    38:ec:7a:d1:aa:a4:47:60:7f:dd:27:e8:b4:df:54:
                    cd:07:7f:06:17:d3:f7:8e:af:c6:33:e5:16:df:33:
                    02:07:c9:da:cf:75:d1:c0:e5:48:17:17:c3:6d:de:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:91:43:DD:64:FD:C1:1B:FA:0D:12:F0:03:93:9F:41:33:54:E3
            X509v3 Authority Key Identifier:
                keyid:58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2e:40:b3:92:b5:0e:91:94:4b:36:c8:88:36:57:86:c9:99:
         1a:48:ea:73:15:30:97:1a:fa:6a:1a:aa:bb:72:27:e9:40:56:
         7d:d9:23:90:d7:a9:2b:58:c4:1b:97:bf:9d:75:ca:52:cf:66:
         a0:9b:ba:db:cb:a2:d9:45:60:55:62:0e:c0:0a:7e:74:f7:d5:
         b8:44:be:08:b1:4f:e3:1b:81:f3:bf:aa:db:3c:e6:9f:13:33:
         aa:b1:4f:12:03:70:c9:77:41:48:33:de:d7:fa:70:ee:ac:55:
         2f:16:73:bd:d5:e1:f3:69:27:6f:cd:11:ad:c1:3b:8a:56:7a:
         3a:62:3a:5a:db:1c:de:37:27:10:be:17:6f:71:5c:54:db:49:
         4b:c3:1b:e1:74:f6:5c:80:17:e2:c6:2a:94:18:5c:cd:de:52:
         da:db:5c:00:84:ea:6d:ac:4d:44:2b:a9:9b:92:05:9f:e2:ae:
         41:c6:03:26:5e:d7:a8:96:45:c9:c0:9c:9a:9b:ac:eb:aa:d9:
         91:64:97:af:a7:64:21:65:b7:73:71:ff:38:a5:55:69:1c:8c:
         28:db:03:33:28:1d:b2:f9:9d:c2:d5:03:14:77:b6:9d:49:21:
         2d:18:a4:61:78:1e:d0:fd:3c:a5:7a:2b:7d:f5:ed:b8:9e:61:
         c7:03:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:01:32 2025 by rpki-client