Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
File:                     C4A0C992AC81775846EF3EACD736353F739F7D8D.mft (raw, json)
Hash identifier:          677GkC7Z3yASo8QyiK4iSpTdjfMXVygzxnC9VyBOa/o=
Subject key identifier:   B0:DD:19:0C:BB:F8:58:EF:12:49:9E:D2:27:E8:E3:19:3D:B8:6D:C4
Authority key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D
Certificate issuer:       /CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
Certificate serial:       6D0BCEB02680D12C9F9E9AA35B9A596692B29F72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
Manifest number:          D3
Signing time:             Wed 17 Sep 2025 20:27:54 +0000
Manifest this update:     Wed 17 Sep 2025 20:22:54 +0000
Manifest next update:     Thu 18 Sep 2025 23:20:54 +0000
Files and hashes:         1: C4A0C992AC81775846EF3EACD736353F739F7D8D.crl (hash: 6GdTJ49z+MLzQAUn8s86jyqueG7pNeT93dzjhDEkt18=)
                          2: 323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (hash: UltvwK1IjkiZQh4BCvjHwbqzp4fVl0TTCRXlrGrBNz4=)
                          3: 3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (hash: sPmYwrleYk60iVzRKjEPkW2mXoJ21mRmEiFeQ8dlLWw=)
                          4: 3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (hash: ZoebQ8nWQa3jdbb3EtwGSfMgCsFTKXtcv2/F7kCqlmY=)
                          5: 323830343a6531633a3a2f33322d3334203d3e203532353435.roa (hash: Y+Nm9Qg5bdUyRGd6aV5jpXl7oAxM5JXbGjkTuIUfvag=)
                          6: 3133312e37322e34382e302f32322d3234203d3e203532353435.roa (hash: Bb0kJTvT13zXjhXQKAhJWgr/b2sBD6PguhCL0LmXPFc=)
                          7: 3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (hash: 65gA/77fIfi/AzedgoYOwttHc1VkZPbASGxxcWoce2U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 23:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0b:ce:b0:26:80:d1:2c:9f:9e:9a:a3:5b:9a:59:66:92:b2:9f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
        Validity
            Not Before: Sep 17 20:22:54 2025 GMT
            Not After : Sep 18 23:20:54 2025 GMT
        Subject: CN=B0DD190CBBF858EF12499ED227E8E3193DB86DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9b:71:69:1c:6a:19:6a:f6:7b:14:56:d7:92:
                    0a:39:f5:e8:d3:be:ad:70:15:2a:09:53:80:c6:7d:
                    37:7d:4c:39:ab:60:c6:e3:8d:76:6b:b1:3c:b3:3b:
                    25:26:0e:22:c4:8e:e5:bc:07:f4:3e:19:9b:cd:78:
                    11:7b:40:c8:2e:3f:e9:fd:59:9f:b9:8f:a1:c0:95:
                    bf:29:42:8b:c4:52:25:bd:26:42:c7:92:a8:6e:62:
                    07:51:34:a6:2e:32:6d:5f:04:12:9d:e0:dd:31:ac:
                    de:a4:d5:22:16:e7:07:c3:2b:1c:a7:f7:4d:03:d1:
                    10:fa:94:e7:b2:28:6d:6d:b0:eb:0e:35:fd:6f:b2:
                    03:b9:df:a0:4d:d5:0c:35:12:ca:48:55:0b:f7:1a:
                    af:d2:72:1b:fc:24:1d:57:de:33:52:59:7b:76:99:
                    27:d5:67:a1:9d:bc:4b:31:00:38:ad:b0:c3:3a:e6:
                    4e:92:da:82:16:6b:cf:d3:91:f9:e5:23:8e:7a:d7:
                    ca:61:d7:7d:9d:5b:ce:ad:a8:61:c5:fa:ba:68:6e:
                    65:b3:fb:0a:f1:7c:06:ad:dc:8f:8e:a5:d9:26:cf:
                    5f:32:99:76:60:3a:98:26:0d:93:da:e4:7c:cc:16:
                    45:b2:bf:7c:0e:53:a3:4f:38:92:6b:57:8d:a7:4f:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DD:19:0C:BB:F8:58:EF:12:49:9E:D2:27:E8:E3:19:3D:B8:6D:C4
            X509v3 Authority Key Identifier:
                keyid:C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:e2:93:28:3a:2d:e0:6c:45:17:82:78:75:f1:a3:ca:29:
         3b:75:af:36:f0:5e:14:49:c2:21:57:b3:8b:2f:60:f6:6e:13:
         4a:12:59:a0:35:c7:d4:e0:5a:ff:06:7b:37:1c:ec:24:1b:f6:
         0c:c4:9e:2b:fc:b3:43:af:c0:f6:27:fc:1d:2f:69:a7:01:82:
         70:6b:86:b1:f1:19:20:0b:16:93:ad:d7:12:ed:f2:9c:26:90:
         b4:f8:1b:22:7e:11:89:3e:41:7b:df:ce:3d:90:84:13:ef:38:
         46:7f:e7:68:34:1c:e3:e7:b6:15:49:d8:04:66:76:57:2a:30:
         23:9d:d5:93:a0:26:c7:87:34:e9:87:27:5f:10:d9:ac:ac:6c:
         58:8d:87:21:38:64:59:3e:8b:b7:46:7b:b3:d5:f4:97:d3:e6:
         4f:ef:85:e2:7a:a9:af:36:8b:a2:ba:d0:4d:65:1a:4b:98:36:
         aa:36:b9:92:36:69:8d:1c:33:2c:eb:e0:d0:15:90:b8:08:87:
         82:13:0a:21:0d:91:44:45:77:f4:c4:a9:67:77:98:b6:c3:0a:
         53:1f:0f:91:4a:47:24:0f:38:61:d7:e8:db:04:06:eb:46:72:
         d7:6b:81:f4:15:14:dc:8e:9c:e6:98:62:7f:5d:09:61:1d:48:
         07:e4:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:08:04 2025 by rpki-client