Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
File:                     2855A71E150CFAB4453167F74DEE4613F739EA02.mft (raw, json)
Hash identifier:          Qn/DIRZr2arrKMYCWsiUdGkh+OXA1bwTqy5Vxb2xAvw=
Subject key identifier:   54:37:04:90:D4:A6:D2:D8:7D:D9:CD:58:6E:9C:E7:B1:F6:71:76:43
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       53F26C36138D75289F0B4D418D95CF25EC27A1BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
Manifest number:          8D
Signing time:             Wed 20 Aug 2025 08:02:05 +0000
Manifest this update:     Wed 20 Aug 2025 07:57:05 +0000
Manifest next update:     Thu 21 Aug 2025 09:29:05 +0000
Files and hashes:         1: 3137372e33362e37302e302f32342d3234203d3e20323730393531.roa (hash: QB/7FYKGMuSSTESFD3l9dOYNebWGpIMbGxvB3Q59iG8=)
                          2: 3137372e33362e36392e302f32342d3234203d3e20323730393531.roa (hash: B+19bI+kr6Z2d08IfqBncU9ZASUecW1oIy0/EqKAbyU=)
                          3: 3137372e33362e36382e302f32342d3234203d3e20323730393531.roa (hash: 7Okh+SXRNQjQa5fOkXfDbosLb0nUEjaGjU4QjG6p7dU=)
                          4: 3137372e33362e37312e302f32342d3234203d3e20323730393531.roa (hash: 5T2+0XB0DlBcQ+y+y2vwtE7XEVqcQE/QcBCw+GVC2fU=)
                          5: 2855A71E150CFAB4453167F74DEE4613F739EA02.crl (hash: 0GvR6CA0zF2CrInqpe3Se45Xfq5xESYO1fh0AKVVNOo=)
                          6: 3137372e33362e37302e302f32332d3233203d3e20323730393531.roa (hash: T0uisPhEBXv8mI4+ibqv1hEDBIpV4KI+/rJcBTNDy94=)
                          7: 323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa (hash: +mB7+Ln3v26C5H7k/9q3QiKkmQNWgXA//LXEnTHml5k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 09:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f2:6c:36:13:8d:75:28:9f:0b:4d:41:8d:95:cf:25:ec:27:a1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: Aug 20 07:57:05 2025 GMT
            Not After : Aug 21 09:29:05 2025 GMT
        Subject: CN=54370490D4A6D2D87DD9CD586E9CE7B1F6717643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:8d:c0:4b:68:ae:da:8a:7e:fe:4c:67:b6:
                    ec:ac:c3:22:a2:06:a7:0a:4f:02:a5:a2:3e:41:6f:
                    fc:55:24:2e:da:45:5b:c3:83:05:db:f1:6f:21:f3:
                    bc:f5:6b:d9:ae:4c:c2:f6:65:86:5c:fc:7f:92:bf:
                    64:b1:e5:00:17:3f:f7:5d:af:26:03:e9:7b:87:05:
                    71:a0:43:25:69:8b:fe:45:f9:e9:d3:68:57:81:29:
                    1a:47:af:62:4f:9c:02:07:d4:3a:d0:49:c9:05:63:
                    e1:fc:3b:9f:a1:e4:7f:90:80:0a:08:d2:91:fa:e6:
                    b1:7a:55:38:5e:ce:aa:90:95:b8:0a:ad:8b:20:3d:
                    69:50:c2:27:c4:28:cc:74:fe:f7:a5:64:7d:e8:e2:
                    56:e7:ec:f8:41:0b:9c:20:27:ed:b8:6e:d5:ce:cc:
                    73:7f:34:ca:35:7c:27:cb:31:c4:78:97:1d:3a:13:
                    73:56:64:af:5a:36:07:47:42:3f:d9:61:5e:75:cf:
                    b2:ef:a0:03:04:66:f1:41:e1:78:ff:e3:14:e5:9f:
                    89:f6:81:81:c5:d2:fe:54:a7:06:b0:9e:0e:1f:b5:
                    97:d3:a0:77:c8:ae:d0:97:8d:00:d4:02:13:26:78:
                    64:9a:70:5e:f7:eb:17:3c:3c:49:c4:e8:21:bf:24:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:37:04:90:D4:A6:D2:D8:7D:D9:CD:58:6E:9C:E7:B1:F6:71:76:43
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:13:03:d6:85:c2:0d:bd:30:71:1b:30:7f:34:ce:fd:71:13:
         43:4e:58:37:8d:c2:e3:6c:a4:ec:11:20:7d:d6:b5:23:96:64:
         39:db:64:4b:ae:c9:25:e5:41:04:89:6b:f1:cb:d2:53:91:b0:
         c5:74:93:b7:ff:d7:2a:4b:50:41:43:99:0b:7d:9b:e6:46:c5:
         c0:9d:bd:30:69:32:06:ff:5e:5d:96:06:1e:8e:83:4c:9d:87:
         0c:4b:b4:aa:e1:5b:6a:2d:bc:c8:32:7b:65:79:09:cc:67:2b:
         d9:cb:1a:56:f1:99:20:6d:56:da:87:31:c3:06:a9:cb:55:59:
         c4:46:ad:83:67:9f:2d:59:c9:e6:c6:85:94:0b:ef:b2:7f:bb:
         d1:39:1d:21:28:e2:a3:0e:bd:2c:cd:16:b0:67:4d:6b:52:21:
         f9:c2:1a:f3:63:32:5e:90:56:ed:33:f3:b4:37:89:20:03:bc:
         a9:11:2d:db:0c:ec:92:76:92:7e:ae:13:94:0f:5e:17:ca:ef:
         b6:c2:ea:4d:35:a5:de:85:c0:e8:e6:3a:5b:5a:30:4f:0e:91:
         3a:1e:ff:23:2c:5c:0c:99:2f:25:1d:6c:fb:55:d0:34:35:2a:
         73:80:7b:af:ea:40:e0:35:ce:2a:c8:63:9e:48:6c:4f:34:7d:
         b3:fc:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:29:56 2025 by rpki-client