Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
File:                     86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft (raw, json)
Hash identifier:          kgLT0K7nnBODyLpyrgrw8TzdeEY5lXlqgNtawCVT25o=
Subject key identifier:   87:19:57:3B:D8:41:14:5B:4C:B1:6C:94:86:A9:4B:DB:A4:7D:99:4F
Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0
Certificate issuer:       /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
Certificate serial:       3E64E64FF57ADDABD9F0104B1F6BF52B0380A895
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
Manifest number:          028E
Signing time:             Wed 20 Aug 2025 11:51:16 +0000
Manifest this update:     Wed 20 Aug 2025 11:46:16 +0000
Manifest next update:     Thu 21 Aug 2025 12:38:16 +0000
Files and hashes:         1: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: Qdu7ZPvtWolsR6S18cFwU2L0RkOx/OTxPbCtP7nSMn0=)
                          2: 3137372e35352e33322e302f32302d3234203d3e20313938393439.roa (hash: 7CshKhBtHVrQ0tJFFcXx3+VO9JLZbKKJSAUo6dLGT1A=)
                          3: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: B1N902gGkDJZjUPJf8kMlgOJ/iI731NAEvBLdvSXVgY=)
                          4: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: bfSoIykLJzsF+3x5osdnlysy+tXqP89AxDxIWy3zZ4E=)
                          5: 3133382e3138352e3231322e302f32322d3234203d3e20313938393439.roa (hash: Oed2W4c76OZZKhsL2QZt6dXmiau2LdfvKoxCstKD1sc=)
                          6: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl (hash: Ib76dx/e8qUjPztssP6f4Fs5/2XyN5rdAEV867ZaOiI=)
                          7: 323830343a323638383a3a2f33322d3438203d3e20313938393439.roa (hash: KoYDQxPjaq7VnFVwnRMt2tHtea2V6niqBjXTeaQ+QD4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl
                          rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:64:e6:4f:f5:7a:dd:ab:d9:f0:10:4b:1f:6b:f5:2b:03:80:a8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
        Validity
            Not Before: Aug 20 11:46:16 2025 GMT
            Not After : Aug 21 12:38:16 2025 GMT
        Subject: CN=8719573BD841145B4CB16C9486A94BDBA47D994F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:d7:bf:05:dd:7b:d9:d7:47:55:36:3e:8a:
                    8d:36:d4:8b:7e:d1:30:09:e3:06:4e:6c:15:0f:f9:
                    c9:ab:b2:62:d3:96:aa:95:9a:c5:62:45:09:34:81:
                    0e:fc:fa:8a:50:3a:fb:2b:13:b2:3e:f5:dc:e0:e9:
                    6d:9f:d6:ab:b8:21:29:4e:b3:94:db:13:95:1e:82:
                    14:02:ac:22:06:25:75:f4:65:98:2d:c4:52:0e:8c:
                    37:8b:31:f3:59:db:9e:50:54:26:e9:c0:2a:ce:2e:
                    26:47:6f:4f:0d:4f:78:a4:36:b1:8c:fc:72:b2:7c:
                    18:6f:ca:6a:3f:a7:79:95:d7:5e:73:db:29:74:ba:
                    a2:49:7d:b0:a4:15:b0:20:17:0b:2d:24:42:5d:68:
                    17:2e:68:b9:09:1a:73:b8:01:6c:a6:1a:e6:83:cb:
                    1e:8b:8b:54:4d:16:c4:c7:c0:52:6c:98:89:cd:57:
                    d1:13:97:8b:d3:c5:4e:ca:e3:a0:61:24:1c:f6:a6:
                    0c:f1:a7:4d:5c:b5:49:88:7e:48:08:64:7c:52:c7:
                    46:b4:e6:06:18:78:59:72:f9:bf:8d:72:c7:e8:3f:
                    ed:79:79:e7:93:bf:26:27:2a:48:5f:be:8f:31:93:
                    6a:64:66:3b:2e:90:e8:b1:fb:62:25:bb:e7:ae:a4:
                    69:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:19:57:3B:D8:41:14:5B:4C:B1:6C:94:86:A9:4B:DB:A4:7D:99:4F
            X509v3 Authority Key Identifier:
                keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:4b:a5:f3:e3:5a:e8:d4:3f:a5:55:1a:7e:3a:93:06:00:
         35:f4:54:91:e2:49:19:7d:67:85:5f:88:b9:b0:d8:ec:bf:91:
         98:72:e7:c0:23:f4:f1:4e:a8:b9:85:42:b4:50:31:99:74:f7:
         30:8d:e6:c0:41:9b:7f:da:57:d8:5c:46:9f:8c:0d:68:c7:ef:
         ab:ea:f5:68:79:c8:74:47:72:b0:ec:4d:bb:eb:14:14:c1:a8:
         65:e3:26:59:ca:2b:7e:18:de:ec:66:29:92:0d:ca:40:28:09:
         26:45:91:2b:d7:6c:9e:5c:90:89:57:92:3b:35:81:12:fa:c8:
         51:94:0e:20:0d:44:c3:03:30:fd:5a:85:85:03:c8:28:4c:8e:
         c2:4a:ba:cc:9b:04:ed:54:95:91:5f:8f:78:76:5f:de:7b:da:
         b9:0d:b1:b8:d7:93:39:8f:70:a2:7f:42:3d:a5:a5:97:71:ca:
         dd:d2:a6:43:d6:e4:b5:06:2e:27:25:21:ee:72:15:0f:17:6a:
         fc:d2:83:1e:cd:ae:46:27:2b:61:fb:69:57:dc:9a:07:56:8c:
         8b:3c:16:ca:f1:e6:73:2c:e7:81:fe:4d:82:00:2c:76:76:fb:
         05:fe:af:36:09:17:00:31:39:ab:25:1e:e1:e3:47:fb:ea:76:
         65:07:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:30:47 2025 by rpki-client