Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft
File:                     24FA36932743D891AB7056E7D2F49B837E9D4E79.mft (raw, json)
Hash identifier:          WkuSrurJWt1cBbAfXw08ecOW0HCx62IeUuS5MULSuFY=
Subject key identifier:   67:7A:8D:9D:2B:A4:B8:BE:E5:D2:BF:E9:FF:BD:18:8D:7F:E2:73:31
Authority key identifier: 24:FA:36:93:27:43:D8:91:AB:70:56:E7:D2:F4:9B:83:7E:9D:4E:79
Certificate issuer:       /CN=24FA36932743D891AB7056E7D2F49B837E9D4E79
Certificate serial:       4B1B9073B46CE006F9035DE32549D078C8A1E440
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24FA36932743D891AB7056E7D2F49B837E9D4E79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft
Manifest number:          01A2
Signing time:             Wed 20 Aug 2025 09:19:07 +0000
Manifest this update:     Wed 20 Aug 2025 09:14:07 +0000
Manifest next update:     Thu 21 Aug 2025 10:53:07 +0000
Files and hashes:         1: 323830343a383261303a3a2f33322d3430203d3e20323732353330.roa (hash: ffQ77kwlbUBU/gX9Qt8ZD9b30bUA05yjRMppHRpbNSM=)
                          2: 24FA36932743D891AB7056E7D2F49B837E9D4E79.crl (hash: 7DYv6xkYLWmdDiFekOFt8UBz//6umKtHikhawrzORsk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.crl
                          rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24FA36932743D891AB7056E7D2F49B837E9D4E79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1b:90:73:b4:6c:e0:06:f9:03:5d:e3:25:49:d0:78:c8:a1:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24FA36932743D891AB7056E7D2F49B837E9D4E79
        Validity
            Not Before: Aug 20 09:14:07 2025 GMT
            Not After : Aug 21 10:53:07 2025 GMT
        Subject: CN=677A8D9D2BA4B8BEE5D2BFE9FFBD188D7FE27331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:d7:19:ae:a2:dc:a0:8e:e0:02:b7:80:9d:
                    73:40:45:f4:93:47:42:5c:d8:4a:b9:5d:01:48:1c:
                    2d:bd:d5:4b:ee:16:0e:e6:01:ce:82:28:3a:98:09:
                    ec:19:0a:3f:bd:1b:6b:6d:3c:e4:bc:a7:d0:41:e2:
                    36:36:93:01:16:ad:e0:3c:73:89:ff:fd:3f:d9:4c:
                    4a:40:6a:9a:a7:fa:af:11:78:67:03:c8:4d:c8:c6:
                    b1:6c:85:8d:be:cf:39:f6:a6:67:22:c4:e7:f6:24:
                    7d:d1:5a:51:f3:40:9a:00:54:95:7d:16:91:64:78:
                    60:65:cf:e8:d7:f6:53:2d:2e:11:bf:07:70:c9:5d:
                    cd:c6:0c:55:b3:1b:b8:57:cd:9e:f6:24:ec:ba:ee:
                    37:ea:66:f5:13:45:f6:73:80:15:93:63:0d:c9:05:
                    be:21:6f:58:89:da:de:1d:6d:75:db:2b:39:31:93:
                    5b:39:59:eb:a0:7c:b4:37:9a:45:0f:29:9c:ce:f8:
                    be:f1:5d:65:c9:1c:7c:89:5e:d8:ce:aa:b9:bb:f1:
                    2d:d0:37:40:40:c4:06:20:35:63:ac:da:75:c6:a5:
                    f2:b6:68:30:db:28:37:05:a6:a5:71:70:bd:45:d1:
                    8b:d2:bb:8f:94:75:0d:92:fa:aa:0e:b2:f1:f1:35:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:8D:9D:2B:A4:B8:BE:E5:D2:BF:E9:FF:BD:18:8D:7F:E2:73:31
            X509v3 Authority Key Identifier:
                keyid:24:FA:36:93:27:43:D8:91:AB:70:56:E7:D2:F4:9B:83:7E:9D:4E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24FA36932743D891AB7056E7D2F49B837E9D4E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/2/24FA36932743D891AB7056E7D2F49B837E9D4E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7a:7f:e6:cd:3c:e1:72:f2:3c:60:11:6a:c0:bd:ae:bf:6d:
         a7:5c:50:ff:78:15:a6:d5:ac:f5:bb:26:ff:fb:98:40:07:0b:
         4f:e0:b1:18:e4:d7:d3:00:fc:3b:45:53:d1:4e:39:84:b1:21:
         fe:38:0f:f9:b6:69:2b:3f:bc:3d:52:8d:73:f6:e4:5d:b7:23:
         9d:dc:53:4e:54:6f:2c:c7:e4:59:6c:e2:6d:ce:a5:2b:6a:aa:
         08:02:aa:70:c3:0f:43:31:6d:77:2b:1c:c1:2c:91:c3:21:cf:
         e5:43:fc:22:7f:de:e5:89:9b:cd:60:b7:d9:eb:d7:a8:1e:07:
         fe:2e:d2:a7:88:5c:dc:d7:b7:94:e8:a7:7b:bb:94:fb:65:1c:
         ab:67:86:99:44:c0:48:c4:81:f0:3e:2c:99:85:e9:93:13:83:
         35:78:ab:14:8e:f1:c7:69:b4:75:bc:ab:aa:7b:0c:88:8c:d3:
         de:e6:60:87:5a:d0:3c:97:21:6b:0c:47:2a:54:69:34:4d:18:
         e3:02:80:77:4e:d2:37:7e:2f:db:4b:49:44:d1:94:90:17:18:
         61:3f:56:73:e5:b7:4c:66:90:59:0c:85:e6:07:89:92:35:94:
         b0:64:55:8c:5f:d3:97:06:fa:b1:1f:f3:eb:07:9d:de:37:34:
         8f:d7:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:28:13 2025 by rpki-client