Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
File:                     D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft (raw, json)
Hash identifier:          oZsYDgcqqmwq8zGlr2kthz1u7NCu4kN/5X+LLS/2k9k=
Subject key identifier:   55:FB:87:8F:8C:BF:8D:66:B7:B1:25:F7:F8:FF:61:E7:70:D6:80:A1
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       24304695D8DB2FCEE93BA7DE82C660F4F0C62B22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
Manifest number:          02AF
Signing time:             Wed 17 Sep 2025 12:58:04 +0000
Manifest this update:     Wed 17 Sep 2025 12:53:04 +0000
Manifest next update:     Thu 18 Sep 2025 13:31:04 +0000
Files and hashes:         1: 3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (hash: jjJjT28GywBLjygGVXWL4ZlLuMuD46UXs8EBIkhnFL8=)
                          2: D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl (hash: 6uZqGdFiHr0kXlF0dX0MQQinXgENLa6jDfHqtBqOvqg=)
                          3: 3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (hash: QsO1DL8JBb7HVDv32XyDE5mIRhLWooOEuQSlsQhv0nA=)
                          4: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (hash: l+1vkNbJX9FznsoCq04IQdf645yMO+XY7naPC5k2nAc=)
                          5: 323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (hash: qIqXFF+EFAPY9WZVD0mrTRtSZpbvEDWHAOrmv/e83ZA=)
                          6: 323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (hash: 19YYElrSUoCNGtrtG01beRgcwWRs9m7ywAl7Jl+phzY=)
                          7: 3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (hash: 1EPG9j2IFN7RdrK+OBQg1vA1qlOU4uWKrh0eWi6f4z0=)
                          8: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (hash: 7GQpIb7eN0gEhjMCm8bJJo8/053mAvBMK769o/t1ImA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 13:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:30:46:95:d8:db:2f:ce:e9:3b:a7:de:82:c6:60:f4:f0:c6:2b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Sep 17 12:53:04 2025 GMT
            Not After : Sep 18 13:31:04 2025 GMT
        Subject: CN=55FB878F8CBF8D66B7B125F7F8FF61E770D680A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:11:b7:95:49:b9:53:a8:59:fb:db:30:fd:
                    e6:52:f9:6f:13:c9:1b:3f:6a:83:54:7a:a1:ac:2c:
                    86:e7:03:e4:46:78:43:f2:88:a8:e7:67:de:3d:17:
                    b3:19:be:42:fc:0d:71:ef:b4:5f:1d:08:7a:f3:a5:
                    14:f6:4f:40:73:61:13:94:c8:b8:48:74:67:92:e0:
                    97:89:81:de:ab:70:a9:e1:10:19:c5:19:29:57:81:
                    d4:ac:f6:c2:ca:79:7d:c4:ca:4d:88:9c:7d:e9:31:
                    a9:f6:b5:5a:08:ec:53:15:79:9f:b4:a1:cc:ac:85:
                    8b:3e:34:f1:84:61:3a:a9:2e:65:6f:d3:27:4c:5a:
                    88:5d:eb:1e:98:67:cd:0d:2b:9e:36:50:ac:0a:6c:
                    b0:8c:8d:ac:29:22:15:b4:0c:bb:26:f5:07:ff:67:
                    a0:b1:59:52:0a:4f:b7:26:73:f4:90:b3:a6:2f:e2:
                    c5:f6:d2:b1:08:86:68:a3:36:33:4a:37:9e:e5:49:
                    29:23:4c:65:e6:1d:9c:ef:d2:8f:80:a4:1c:56:dc:
                    d8:d1:1c:b1:d9:41:b9:9b:b0:f4:15:e1:ca:e5:af:
                    ca:87:0d:c0:e2:aa:ec:3e:38:49:7e:2a:6d:86:23:
                    6b:8b:75:d4:ee:6a:0e:82:ad:a2:00:0d:b4:a7:98:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:87:8F:8C:BF:8D:66:B7:B1:25:F7:F8:FF:61:E7:70:D6:80:A1
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:67:0a:52:c9:76:70:e4:24:4d:c0:f0:44:06:49:59:28:
         2e:f0:ed:de:54:a6:fb:11:61:f5:b9:84:3d:7a:0f:d3:a6:ae:
         78:e4:d9:38:1c:e8:cc:c7:d0:d9:1d:2a:2d:30:9f:7d:f0:af:
         45:7e:6a:d1:35:e9:82:45:b7:7d:64:8b:d8:2e:40:b5:9c:c0:
         2e:8b:1f:b1:a4:e2:f8:1c:35:5b:c9:b4:cb:3a:55:3b:2f:60:
         c8:29:95:42:b8:21:6c:85:df:ef:a4:55:99:97:28:cd:8c:22:
         45:54:33:12:47:fc:d5:b9:d9:65:02:4e:50:73:d0:64:7d:6c:
         86:86:2f:50:4e:d4:2c:bf:d3:84:cb:f3:0b:e0:97:fd:2c:13:
         ce:d2:0d:11:31:de:08:75:24:3b:5b:01:81:64:6a:91:86:83:
         ed:fe:8b:9e:a8:cc:45:46:6e:93:94:2c:51:bc:5d:36:02:e4:
         9d:9a:de:f2:40:b2:69:8d:5c:20:f9:a4:ad:16:09:7d:92:36:
         20:81:7c:10:75:2e:56:b9:d0:d2:8c:eb:5c:88:8a:82:0c:83:
         85:d7:db:10:7a:f1:cb:e9:ca:a2:92:2a:60:a6:84:d4:b2:f9:
         ac:03:4a:16:b3:38:9e:a3:9a:28:33:c7:40:c9:80:b1:b2:be:
         05:02:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:14:49 2025 by rpki-client