Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft
File:                     D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft (raw, json)
Hash identifier:          yZvefBc0W7CfUTvbXkzazqGHRNw6F2/iA2tP9cD+4B4=
Subject key identifier:   8C:48:58:DD:27:B5:E1:3C:03:F1:9B:9F:EC:25:9F:6A:55:42:D4:94
Authority key identifier: D2:A9:51:8C:5D:33:31:3C:38:2F:48:AF:C0:51:DC:6C:FC:87:7E:BD
Certificate issuer:       /CN=D2A9518C5D33313C382F48AFC051DC6CFC877EBD
Certificate serial:       7DA3F22B93EB1C3242544845B9FF464BB932A8FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft
Manifest number:          04
Signing time:             Fri 19 Sep 2025 08:54:42 +0000
Manifest this update:     Fri 19 Sep 2025 08:49:42 +0000
Manifest next update:     Sat 20 Sep 2025 11:04:42 +0000
Files and hashes:         1: D2A9518C5D33313C382F48AFC051DC6CFC877EBD.crl (hash: 145x5Tgvd5b0WwD7n3Zew6TbefpyYzUGqMu0DgA4ZdY=)
                          2: 34352e3137322e3234342e302f32322d3332203d3e20323638373937.roa (hash: j9o3BIVMz/8TM/7c9X3WgYVwqYqYLEV/vSUSv2TCIS0=)
                          3: 323830343a356163633a3a2f33322d313238203d3e20323638373937.roa (hash: dOmL/+rdYfNPZaOkiG0zB1s2DqY/5q+Nf4dxVmUKuvM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a3:f2:2b:93:eb:1c:32:42:54:48:45:b9:ff:46:4b:b9:32:a8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A9518C5D33313C382F48AFC051DC6CFC877EBD
        Validity
            Not Before: Sep 19 08:49:42 2025 GMT
            Not After : Sep 20 11:04:42 2025 GMT
        Subject: CN=8C4858DD27B5E13C03F19B9FEC259F6A5542D494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:96:1f:98:f9:69:ec:85:33:db:9c:2a:bf:
                    7b:ea:18:6d:83:65:f5:83:54:02:c6:11:ea:9b:c4:
                    6f:b2:33:00:a1:bc:9a:b2:1d:3c:51:45:3f:51:9f:
                    ff:65:38:b7:63:4c:91:e4:1d:5f:3a:c2:70:50:b0:
                    0d:51:50:e0:e4:7a:c9:cc:c0:93:31:16:fd:d9:79:
                    32:40:ff:68:c9:02:a7:27:ad:f8:28:be:69:40:95:
                    84:db:ee:c4:00:91:0a:66:34:2d:15:b1:ca:77:92:
                    ac:da:f9:d7:56:27:f5:39:d8:d7:64:57:e8:98:da:
                    58:dc:25:d1:cb:78:af:f4:5c:4b:5d:39:ac:6d:b7:
                    8e:4f:5f:b0:2d:a9:e7:bb:53:c9:22:8f:e7:23:7c:
                    4c:6e:f9:10:c9:c3:5d:45:52:5b:0a:39:ac:3d:39:
                    b2:1b:c3:24:5c:6a:55:6e:28:ee:82:a3:a5:6a:dd:
                    36:83:39:f6:99:a0:99:a4:23:2b:94:d9:b1:42:7d:
                    6c:8d:f4:fd:da:af:c4:b7:31:96:e7:a8:1a:f4:2f:
                    47:61:15:09:37:7f:ff:b2:f3:5b:3a:34:72:e6:e4:
                    c2:4f:64:57:db:d6:df:b1:7a:90:44:a6:83:cc:65:
                    97:e8:40:f0:80:3b:14:82:aa:49:1d:66:3a:51:1a:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:48:58:DD:27:B5:E1:3C:03:F1:9B:9F:EC:25:9F:6A:55:42:D4:94
            X509v3 Authority Key Identifier:
                keyid:D2:A9:51:8C:5D:33:31:3C:38:2F:48:AF:C0:51:DC:6C:FC:87:7E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:14:db:09:80:7b:38:32:db:b5:f7:a9:3e:ed:46:5b:14:
         01:ca:df:3b:22:b7:84:6b:9c:9d:fc:45:35:9a:8b:52:c2:f5:
         b1:67:87:2a:1e:db:b7:d2:54:a3:4e:cc:00:63:18:34:9f:4f:
         36:8c:99:76:81:2d:aa:57:19:38:de:cf:43:d7:ca:55:4b:e6:
         c8:e3:59:82:23:23:ae:be:d5:fb:d4:de:a9:f9:28:e0:84:0e:
         f2:a5:75:c2:08:b4:93:ef:56:f0:02:59:90:be:3d:fd:6d:0e:
         8e:f2:47:13:b0:94:e6:81:29:8d:a1:9e:4c:42:cb:34:42:42:
         05:f2:03:dc:b7:60:00:ef:47:9c:dd:0e:20:ce:29:18:f8:f6:
         a6:5a:d7:cb:2a:d0:36:cc:51:b3:0b:c2:56:82:75:e7:d4:b6:
         3e:d8:a4:29:4a:bb:ef:09:6d:4d:61:4c:80:b9:5d:5b:90:ac:
         d2:48:0a:5a:fd:2a:7c:80:c0:0d:34:b0:72:77:37:b4:78:2a:
         57:f2:cb:cd:b7:47:12:ad:01:e6:8c:0c:ea:3c:47:53:56:4b:
         88:28:05:32:c1:92:87:5f:3f:e8:a3:0a:db:36:9b:08:54:c7:
         dd:f2:21:37:04:25:3c:78:69:4e:75:78:81:cc:2f:3e:d3:90:
         32:04:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 01:12:40 2025 by rpki-client