Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft
File:                     AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft (raw, json)
Hash identifier:          D+tPDsskt+FSUnMVjnnaKuDJkQZSd3unlZdWWtdprVU=
Subject key identifier:   80:33:C8:95:56:07:72:83:C1:35:C1:C7:24:62:63:27:B0:0A:DC:E4
Authority key identifier: AF:84:90:35:23:F7:C1:08:9C:C2:30:8C:EE:C9:C1:B4:F2:62:4F:76
Certificate issuer:       /CN=AF84903523F7C1089CC2308CEEC9C1B4F2624F76
Certificate serial:       4CBFC80833E3824F16671C76BA76502A0963B875
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft
Manifest number:          A2
Signing time:             Tue 29 Jul 2025 12:23:33 +0000
Manifest this update:     Tue 29 Jul 2025 12:18:33 +0000
Manifest next update:     Wed 30 Jul 2025 15:05:33 +0000
Files and hashes:         1: 323830343a356535303a3a2f33322d3438203d3e20323639303235.roa (hash: Bq4328QC2oJbIa2OEDl6O0IhJyx6BsT2aK+blWV/MBk=)
                          2: AF84903523F7C1089CC2308CEEC9C1B4F2624F76.crl (hash: oNJFx4c3GNNPc4MRItjyqqnT4fqRNUZo/hbaMJ2LQ6E=)
                          3: 34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa (hash: OUjUwqRpP9E674rXXfVeyIP4XX4eBVBttWVH7gAzpxY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.crl
                          rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bf:c8:08:33:e3:82:4f:16:67:1c:76:ba:76:50:2a:09:63:b8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF84903523F7C1089CC2308CEEC9C1B4F2624F76
        Validity
            Not Before: Jul 29 12:18:33 2025 GMT
            Not After : Jul 30 15:05:33 2025 GMT
        Subject: CN=8033C89556077283C135C1C724626327B00ADCE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:67:5a:ca:5e:77:58:59:e5:07:1c:db:0e:
                    49:8b:54:5c:17:29:1d:15:38:d1:7d:ce:d1:f8:51:
                    6a:0e:99:0b:1e:16:e5:60:23:6d:e8:3f:97:a8:82:
                    1d:26:b5:66:d4:39:8e:d5:17:85:33:af:5c:34:bf:
                    4c:07:72:ba:3c:fb:80:4b:7b:4f:37:87:b5:1e:22:
                    91:79:bc:75:5c:5e:2b:0b:1c:2c:ac:63:e7:90:4e:
                    c0:dd:3b:af:14:e2:d2:98:5a:3c:74:ed:23:ff:8c:
                    22:45:74:bf:03:33:74:81:96:b9:56:ce:64:cf:17:
                    8f:d5:03:28:cd:ae:9b:d1:9b:8e:7b:5e:a1:bc:c4:
                    57:00:7e:f2:44:35:10:ea:fd:7d:2d:5d:1a:8c:25:
                    81:80:9f:fa:cf:43:e9:2d:59:64:ef:72:c8:2c:55:
                    f8:68:52:67:a5:e1:dc:87:f5:cd:2c:88:3e:ba:04:
                    69:1d:9c:b9:b0:dd:ed:c2:ae:19:92:ef:e3:64:3f:
                    c2:33:03:ed:a3:95:f2:40:ee:13:7c:4a:ba:f5:4e:
                    d8:4c:44:2f:04:6b:71:6c:fe:d4:c5:f9:7e:31:76:
                    84:35:b8:e4:84:c9:2c:37:12:11:2f:93:3b:a1:f4:
                    85:d8:b4:b6:9e:ca:e7:81:8a:96:0b:e4:55:e4:76:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:C8:95:56:07:72:83:C1:35:C1:C7:24:62:63:27:B0:0A:DC:E4
            X509v3 Authority Key Identifier:
                keyid:AF:84:90:35:23:F7:C1:08:9C:C2:30:8C:EE:C9:C1:B4:F2:62:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:ec:7a:93:6e:15:64:7a:43:7c:57:1a:2a:cf:6d:97:12:
         5b:20:0d:f2:bb:ba:24:ce:32:6b:8f:7f:79:34:a0:42:17:f7:
         db:19:f9:28:9a:de:f6:34:d0:bd:e5:2e:fb:b8:13:26:26:82:
         55:16:d0:f0:f3:ed:a0:95:65:da:ab:40:7d:ea:1e:b9:d0:bb:
         db:49:64:cc:05:73:fc:0b:16:b7:38:2f:7a:23:b9:7d:c0:fd:
         a6:5e:47:41:c2:e5:db:a8:6f:31:6f:87:89:10:75:26:0e:31:
         bc:9f:b0:f9:33:d0:86:43:bb:05:72:a1:d2:34:e1:c1:af:e3:
         a6:35:0b:04:71:1d:b4:92:af:5c:59:fb:49:b5:66:6f:15:cd:
         20:3f:7f:49:c0:31:a9:e4:8a:a2:cf:f1:bb:a5:b1:b3:5c:41:
         a3:32:26:73:96:26:ba:23:80:13:7f:0a:90:a9:68:57:e5:89:
         94:b1:74:1e:2f:a3:be:7c:c1:ce:d1:70:50:a1:c0:5c:c1:f5:
         57:c9:58:f6:d6:9d:62:45:1e:6a:95:56:13:9b:34:84:2c:cc:
         34:19:18:4e:30:5b:7c:8e:69:5b:15:c0:d5:b2:55:af:c5:14:
         9a:75:2d:5d:76:ae:09:d4:7e:1a:8c:c8:3d:3b:02:12:96:b1:
         d9:41:3e:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTL/ICDPjgk8WZxx2unZQKgljuHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY4NDkwMzUyM0Y3QzEwODlDQzIzMDhDRUVDOUMxQjRG
MjYyNEY3NjAeFw0yNTA3MjkxMjE4MzNaFw0yNTA3MzAxNTA1MzNaMDMxMTAvBgNV
BAMTKDgwMzNDODk1NTYwNzcyODNDMTM1QzFDNzI0NjI2MzI3QjAwQURDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaH2dayl53WFnlBxzbDkmLVFwX
KR0VONF9ztH4UWoOmQseFuVgI23oP5eogh0mtWbUOY7VF4Uzr1w0v0wHcro8+4BL
e083h7UeIpF5vHVcXisLHCysY+eQTsDdO68U4tKYWjx07SP/jCJFdL8DM3SBlrlW
zmTPF4/VAyjNrpvRm457XqG8xFcAfvJENRDq/X0tXRqMJYGAn/rPQ+ktWWTvcsgs
VfhoUmel4dyH9c0siD66BGkdnLmw3e3CrhmS7+NkP8IzA+2jlfJA7hN8Srr1TthM
RC8Ea3Fs/tTF+X4xdoQ1uOSEySw3EhEvkzuh9IXYtLaeyueBipYL5FXkdpd/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgDPIlVYHcoPBNcHHJGJjJ7AK3OQwHwYDVR0j
BBgwFoAUr4SQNSP3wQicwjCM7snBtPJiT3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFmVHRLd2QxWUhNSFVwRjV3MjhCc2k4YmdDRFBzeUtITlBiOXkxNkhR
cWQvMC9BRjg0OTAzNTIzRjdDMTA4OUNDMjMwOENFRUM5QzFCNEYyNjI0Rjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGODQ5MDM1MjNGN0MxMDg5
Q0MyMzA4Q0VFQzlDMUI0RjI2MjRGNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHFmVHRLd2QxWUhNSFVwRjV3MjhCc2k4YmdDRFBzeUtITlBiOXkxNkhRcWQvMC9B
Rjg0OTAzNTIzRjdDMTA4OUNDMjMwOENFRUM5QzFCNEYyNjI0Rjc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfQPsepNuFWR6Q3xXGirPbZcSWyAN8ru6JM4ya49/eTSgQhf32xn5KJre9jTQ
veUu+7gTJiaCVRbQ8PPtoJVl2qtAfeoeudC720lkzAVz/AsWtzgveiO5fcD9pl5H
QcLl26hvMW+HiRB1Jg4xvJ+w+TPQhkO7BXKh0jThwa/jpjULBHEdtJKvXFn7SbVm
bxXNID9/ScAxqeSKos/xu6Wxs1xBozImc5YmuiOAE38KkKloV+WJlLF0Hi+jvnzB
ztFwUKHAXMH1V8lY9tadYkUeapVWE5s0hCzMNBkYTjBbfI5pWxXA1bJVr8UUmnUt
XXauCdR+GozIPTsCEpax2UE+qA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 16:36:11 2025 by rpki-client