Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
File:                     4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft (raw, json)
Hash identifier:          f02tSXVbAM1XtSWgIRzZM9vMgpxCCEVzar/8HejZk3w=
Subject key identifier:   DF:C8:F3:23:6E:75:78:90:CD:0C:DC:C3:97:F0:B6:89:C4:15:9F:C7
Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Certificate issuer:       /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Certificate serial:       C563E9EF9E3B97B7A18DA48AA6DD23E4B1C845
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
Manifest number:          01D1
Signing time:             Thu 18 Sep 2025 09:33:31 +0000
Manifest this update:     Thu 18 Sep 2025 09:28:31 +0000
Manifest next update:     Sat 20 Sep 2025 00:35:31 +0000
Files and hashes:         1: 323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (hash: sWCWC2blugwDA5GjLHplzoTjJrDf4ml2mn5K8bTAaT8=)
                          2: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl (hash: 2ybBlNY+sDaChafASnZDRINPUU5GqS5QC0/99bk0swE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
                          rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c5:63:e9:ef:9e:3b:97:b7:a1:8d:a4:8a:a6:dd:23:e4:b1:c8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
        Validity
            Not Before: Sep 18 09:28:31 2025 GMT
            Not After : Sep 20 00:35:31 2025 GMT
        Subject: CN=DFC8F3236E757890CD0CDCC397F0B689C4159FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:c1:56:ac:e8:90:3a:ac:b3:ee:71:c0:28:
                    98:ce:d1:64:2d:9d:8c:6a:7d:0f:71:33:fb:58:cd:
                    b0:bf:dd:b1:af:7d:4c:6e:0e:84:65:47:aa:d7:38:
                    2c:24:03:bc:5a:47:ac:86:e3:dc:3c:b7:50:b9:a2:
                    bd:e0:c8:a1:63:7d:3d:a3:36:72:36:24:c3:27:11:
                    9f:e2:bd:ec:81:73:a1:5c:8f:e5:02:4a:07:95:c6:
                    0a:b7:82:5a:e4:bc:ba:49:5e:fe:7b:b9:e1:9b:ab:
                    69:b3:49:ae:30:dc:05:98:e2:4b:73:82:b3:a6:65:
                    f5:19:83:27:65:07:73:60:0c:81:e1:0f:87:f6:04:
                    f8:cc:eb:ea:6f:99:ef:0b:79:66:82:80:89:c6:6b:
                    a3:ff:af:79:9b:5a:19:80:3b:79:d3:ba:31:3e:8f:
                    2a:f7:3a:0d:d3:08:6b:e6:78:65:67:c4:55:bb:da:
                    b9:49:e2:e4:ff:08:a5:33:33:82:be:36:a0:da:9c:
                    af:55:8c:ee:43:e2:b7:03:e6:cc:23:36:20:fd:9e:
                    56:cb:b6:9e:7b:6a:f8:2c:c8:2a:5f:64:d8:79:5d:
                    2c:22:c8:7a:99:5e:f9:45:04:3b:cd:ec:7d:f5:46:
                    8f:2b:62:1c:58:bb:e5:b2:f8:79:5f:9f:32:46:84:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C8:F3:23:6E:75:78:90:CD:0C:DC:C3:97:F0:B6:89:C4:15:9F:C7
            X509v3 Authority Key Identifier:
                keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:84:0e:65:53:bb:f8:0b:a2:23:98:52:82:be:82:dd:3a:
         6e:f2:93:61:a0:be:12:be:51:94:24:b8:82:8c:42:ed:87:f5:
         91:c3:cb:55:1a:c2:af:fa:fc:27:8c:90:9d:71:7b:91:6e:62:
         57:6a:ee:a7:73:ce:56:fc:ff:d9:5d:bc:83:75:90:83:44:bd:
         4f:1f:a4:8f:a4:84:24:9a:26:bc:e6:e5:26:c2:26:be:60:65:
         32:ea:fc:49:68:05:11:b1:62:af:ff:65:ad:28:08:1d:a0:36:
         bf:be:92:e6:cd:ca:fb:a3:08:b4:78:7a:7a:d9:e1:73:63:2e:
         fa:2f:c4:b1:a8:a0:24:62:11:4c:10:3b:39:bd:13:14:8e:e1:
         ed:b4:61:a1:fe:e3:18:3e:cf:a7:18:7b:e8:5e:95:d1:19:97:
         ea:c3:72:3d:e7:21:10:03:46:47:d2:0b:55:84:79:8a:0e:96:
         cd:f4:68:6d:4d:a7:73:2c:2d:04:74:5c:7d:b2:59:7a:d6:60:
         a6:13:cf:e2:b2:bf:de:c3:f6:b1:b1:ff:fa:5d:ac:66:79:a3:
         5a:1f:75:07:32:8d:12:1c:b2:55:87:79:ed:83:3d:75:26:76:
         ea:eb:80:a6:a9:da:6f:94:a0:95:2c:68:a9:58:52:b6:89:cb:
         6b:96:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:21:32 2025 by rpki-client