Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
File:                     D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft (raw, json)
Hash identifier:          AJRiinNgfwqFQiaXUXlwCxzmJpqIBHxYCK7MlvsabSY=
Subject key identifier:   5D:E2:D9:5D:08:EC:36:DE:B0:29:E5:A3:33:11:7B:85:48:F8:1A:19
Authority key identifier: D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB
Certificate issuer:       /CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
Certificate serial:       5AA93939DDEB0AB66C6207BD036772DCD44FC1D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
Manifest number:          AA
Signing time:             Fri 19 Sep 2025 04:17:07 +0000
Manifest this update:     Fri 19 Sep 2025 04:12:07 +0000
Manifest next update:     Sat 20 Sep 2025 06:57:07 +0000
Files and hashes:         1: AS28343.roa (hash: 38oCwk7agpN74oJb3YDJeiQoYXWYFqwuFuOq7AnXNJI=)
                          2: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl (hash: /24Fb5TZpb8tXU3edv/w8U+XTiAfwsZyavMh9CEW0BQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl
                          rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a9:39:39:dd:eb:0a:b6:6c:62:07:bd:03:67:72:dc:d4:4f:c1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
        Validity
            Not Before: Sep 19 04:12:07 2025 GMT
            Not After : Sep 20 06:57:07 2025 GMT
        Subject: CN=5DE2D95D08EC36DEB029E5A333117B8548F81A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:ba:2e:79:66:d4:86:05:46:ea:65:f9:54:
                    fb:87:6c:38:82:38:e0:9d:c1:9d:55:1b:ff:79:e6:
                    d4:d5:e0:c2:44:62:b6:f8:0f:35:b5:a6:9c:27:d8:
                    86:0d:bb:a3:89:ce:57:32:55:f0:6a:7b:32:fe:b7:
                    a3:ee:00:b6:d8:cc:ed:ed:35:4e:72:ee:bd:8b:32:
                    93:0f:d6:94:54:ac:62:9d:68:75:d3:ea:b6:eb:c2:
                    fb:3b:4c:b3:16:03:ee:ee:6f:1e:de:6e:9d:fa:79:
                    2c:15:9c:27:02:03:99:af:40:c7:3f:7d:5d:82:e3:
                    88:1c:7b:ee:c2:da:7f:db:f2:0d:ce:11:5c:18:14:
                    e7:51:12:91:ce:51:40:22:1f:a6:16:fc:72:dc:ed:
                    f1:f1:25:c8:a9:8e:da:d2:3e:03:6e:1e:bb:88:93:
                    87:7c:86:66:b1:22:e8:e5:9b:0a:d8:3a:5a:79:6f:
                    e7:d5:8c:e0:de:22:39:b3:0a:69:0d:64:3d:1b:73:
                    7b:fb:ad:d2:f4:4f:58:be:89:3f:f8:16:be:83:9b:
                    66:63:3b:12:e2:9c:e6:51:32:0d:25:3a:07:49:a0:
                    52:fa:7a:5c:b7:c4:c3:03:05:67:91:2e:c6:89:d8:
                    79:12:43:a0:8f:26:95:b1:d1:9f:8a:c1:ca:5f:3f:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E2:D9:5D:08:EC:36:DE:B0:29:E5:A3:33:11:7B:85:48:F8:1A:19
            X509v3 Authority Key Identifier:
                keyid:D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a1:b8:fe:b8:e9:ca:00:11:5c:d5:7b:68:1d:0d:84:56:4f:
         8e:f6:1b:46:a9:22:5c:01:07:7e:5c:08:66:b2:9e:6a:f0:94:
         0a:6d:b9:3e:16:13:22:80:3d:e3:be:b9:eb:f3:76:ac:79:ba:
         f6:9e:32:76:dc:4d:66:24:ec:02:47:01:2d:43:0b:23:22:28:
         16:c6:3c:36:5a:0e:eb:d5:a9:ee:4f:5d:c6:27:76:d0:5f:dd:
         82:79:64:38:36:a4:c4:26:3b:c3:7d:cf:89:4b:d6:2e:0b:54:
         ee:74:72:b1:a9:5b:cd:69:18:9e:cf:de:f3:74:77:2e:d7:6b:
         f1:2f:53:a9:6d:2a:9c:16:ce:f0:14:54:f4:07:2f:31:fd:70:
         c9:c4:de:72:09:e6:9b:ce:db:d7:c7:f1:7c:4e:fa:91:e0:22:
         7c:f8:55:fe:e7:b4:b9:e1:1f:d2:b0:27:b3:32:8d:f7:3d:48:
         e6:ba:1c:d8:33:4e:65:8b:17:e8:e4:9c:34:4b:6f:b4:3c:9f:
         bc:08:86:eb:7a:4e:5b:f3:b6:3c:58:cf:be:b0:a1:48:a1:22:
         03:2c:9b:2f:66:66:a7:37:55:a1:bd:96:11:b5:34:c9:5c:73:
         d1:28:05:ba:82:1e:07:48:f0:58:cb:b7:d2:13:b3:00:24:09:
         cc:17:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:50:44 2025 by rpki-client