Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
File:                     9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft (raw, json)
Hash identifier:          2rVss9GE7y7ZeQEw0JoW2Z8ttTQUdvo8clkt9YZY7VE=
Subject key identifier:   FF:10:8C:B3:48:83:59:72:F9:2B:C2:86:53:04:E5:5B:90:54:4F:E5
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       42088F1F9A521E020CF59B38D2069ED4E6E0DA84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
Manifest number:          01DC
Signing time:             Sun 27 Jul 2025 05:29:40 +0000
Manifest this update:     Sun 27 Jul 2025 05:24:40 +0000
Manifest next update:     Mon 28 Jul 2025 06:48:40 +0000
Files and hashes:         1: 3138392e35302e38302e302f32302d3332203d3e203238333237.roa (hash: e9HZymDCqJKW/MrGNjfZUewWACYFm0DkCf9m7cTv/cY=)
                          2: 34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa (hash: 46RSHOwSye0wh+PL5ysBB7nSfbqmEzYaKYMLvcSziSs=)
                          3: 34352e3232392e3230382e302f32322d3332203d3e203238333237.roa (hash: rGy1ehE/Bn0XuecpILb0jzzs4yEVA5Ng7V6ILLU8ggI=)
                          4: 9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl (hash: rKmqFMQUjRPV4jmmWmrAoWioN4lPf9s8tsXzHYK7GY8=)
                          5: 3138392e35302e38302e302f32302d3332203d3e20313938393439.roa (hash: PULtCWH4amDpwqJMX/vVa/ZBJqkPcmfTwYJzuPne7qM=)
                          6: 323830343a343864633a3a2f33322d3430203d3e20313938393439.roa (hash: T5PQk+XSOonG3g2hvRrDdrLKKD/SDyNap/J/IcWp2/E=)
                          7: 3133312e302e32302e302f32322d3332203d3e203238333237.roa (hash: s2/kAKjnFX6aRyyXodEUttWXr6XdHhQ5QyULnEcQnAU=)
                          8: 3133312e302e32302e302f32322d3332203d3e20313938393439.roa (hash: fTd/5cBG9mlz6n9KlIjz6g6nXkqHzbKoyPgp4g5+LNU=)
                          9: 323830343a343864633a3a2f33322d3430203d3e203238333237.roa (hash: E1XoywGDOSssXFy2GAns/rcsG06KGYaYnzhvqTT1kT0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:08:8f:1f:9a:52:1e:02:0c:f5:9b:38:d2:06:9e:d4:e6:e0:da:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Jul 27 05:24:40 2025 GMT
            Not After : Jul 28 06:48:40 2025 GMT
        Subject: CN=FF108CB348835972F92BC2865304E55B90544FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:ab:15:05:78:c1:bb:ce:db:09:e4:2d:63:
                    79:d8:8b:b2:a5:f5:8d:ad:06:c5:41:28:d5:df:ca:
                    15:68:d1:41:4a:8a:d1:f3:51:48:4d:ff:a7:ef:9a:
                    3d:d2:17:c3:f5:68:da:14:aa:4d:e9:d0:83:51:91:
                    64:9b:72:b4:3a:8f:f8:cc:57:85:99:11:57:02:b4:
                    d5:f1:cf:c4:ba:9f:85:81:3b:9f:e1:71:1c:82:c7:
                    29:cf:9d:c7:e0:18:61:27:5c:9e:5a:b1:82:83:2c:
                    a3:3e:9f:8a:23:b4:69:17:79:7c:69:59:8f:70:75:
                    28:9a:a1:72:11:fd:1b:d9:17:6c:2a:70:81:77:51:
                    20:47:89:ff:a2:0d:1b:43:d4:b1:1a:96:05:48:d1:
                    95:c7:72:56:ee:d6:7b:41:4f:4d:a4:6d:09:41:92:
                    40:b6:28:eb:d7:14:59:74:e9:54:57:2d:d0:8d:ca:
                    82:f1:4a:b5:91:5b:06:d9:3e:fe:b4:67:13:25:23:
                    51:3a:8e:ff:76:08:5f:40:fe:b8:1b:55:28:7b:08:
                    09:37:56:b1:72:7d:8e:e1:4a:29:62:4d:6c:91:b1:
                    5a:7b:7e:ba:01:d0:c0:1a:e4:13:cd:1d:5d:1a:3d:
                    bd:9b:be:67:cf:9f:8b:11:9d:72:03:3e:c7:0a:af:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:8C:B3:48:83:59:72:F9:2B:C2:86:53:04:E5:5B:90:54:4F:E5
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:50:d0:ae:42:c0:db:4f:b7:94:1e:75:ec:fe:85:96:b8:91:
         25:54:6c:42:f3:c0:5d:8d:26:fc:6a:17:cd:12:13:d8:ef:c2:
         c3:9c:ed:ec:86:47:b9:a3:d1:4d:30:43:68:5f:18:de:0f:c9:
         37:6a:08:a7:f5:95:4c:99:53:31:33:1d:2e:64:5f:6a:e1:b0:
         34:70:4c:55:62:cc:60:fc:de:92:f3:3b:b5:aa:10:48:ef:25:
         bd:50:cc:a9:c8:1c:54:ba:5f:7e:f2:9c:e3:07:f3:b7:57:ff:
         53:8e:22:02:92:0e:29:40:ac:48:68:11:00:fd:56:7c:61:50:
         52:92:3c:cb:da:59:7e:57:5e:20:66:72:8c:55:f7:f3:46:f9:
         6e:52:8f:8b:b4:b9:14:14:1a:fa:11:fe:2d:5c:04:a0:1f:aa:
         a6:76:18:cc:eb:82:8a:6f:ef:29:3c:bb:7e:8b:6e:47:44:e4:
         73:cc:f5:b6:c8:6b:25:b8:ec:d9:3f:bc:8b:aa:bf:c7:74:06:
         3c:6b:cf:bb:6a:e9:0f:bf:ae:9f:ac:e5:90:bc:a5:b3:30:0a:
         2e:3a:ac:4c:67:9e:7c:f5:24:09:80:35:f4:ac:46:49:d2:b9:
         1c:36:2f:70:8d:c7:b7:20:a7:9d:86:58:ff:c8:e2:46:69:3b:
         14:ae:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:48 2025 by rpki-client