Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
File:                     11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft (raw, json)
Hash identifier:          qUTgDTvE8U/4Y0BQ8PZ/FMXxoi+cVA82sTlSHisv9sE=
Subject key identifier:   85:CB:87:0C:7D:CD:2C:F3:DC:65:B4:A1:8E:32:88:E7:DF:A6:6C:4E
Authority key identifier: 11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05
Certificate issuer:       /CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805
Certificate serial:       4116FB0D627A90C12FB6ABC5E50D30E38DDD8908
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
Manifest number:          2F
Signing time:             Sun 10 Aug 2025 17:11:36 +0000
Manifest this update:     Sun 10 Aug 2025 17:06:36 +0000
Manifest next update:     Mon 11 Aug 2025 19:32:36 +0000
Files and hashes:         1: 323830343a333732633a343030303a3a2f33342d3334203d3e20323636333934.roa (hash: N4lEki/B6/0uCIsUsg+P01x6hC/9w7hDRDTzdQZJvS8=)
                          2: 323830343a333732633a3a2f33342d3334203d3e20323636333934.roa (hash: AWcAIcos7JvGJsufxg+H8d0EcS463i6i1K5EMLdZf9c=)
                          3: 323830343a333732633a633030303a3a2f33342d3334203d3e20323636333934.roa (hash: Ix8eRWQHyNaG97EzmFL826uIb8NIHHIOcqYAMs0HL9w=)
                          4: 323830343a333732633a3a2f33322d3332203d3e20323636333934.roa (hash: MbgmA9xW/wF1uf0e0wQjZ59+KPdVYa3YMQSGd77cPOY=)
                          5: 323830343a333732633a383030303a3a2f33342d3334203d3e20323636333934.roa (hash: DO7t8qqnPOMb081Z5pUnHwondjUbpyk3mXzqeLj7v5w=)
                          6: 11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl (hash: P1KmLfj0ZD2eir8YU4KdnQDcccMZGAGezj4rwxn109Y=)
                          7: 3137302e38312e37362e302f32322d3234203d3e20323636333934.roa (hash: tVRi5JyERJD8r9u9BE1kNJsoDmpAZynHpxJlnRLlL+4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl
                          rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:16:fb:0d:62:7a:90:c1:2f:b6:ab:c5:e5:0d:30:e3:8d:dd:89:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805
        Validity
            Not Before: Aug 10 17:06:36 2025 GMT
            Not After : Aug 11 19:32:36 2025 GMT
        Subject: CN=85CB870C7DCD2CF3DC65B4A18E3288E7DFA66C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:5f:3b:73:88:e0:aa:be:9a:fe:62:8b:3a:
                    21:88:7b:a6:53:52:2d:e1:43:12:55:07:af:a8:63:
                    49:40:8f:b0:d3:d7:be:f7:3e:c0:4c:05:17:63:01:
                    1b:00:7d:86:ae:8b:8c:a1:4e:9d:e6:39:16:fa:26:
                    8d:a2:a2:13:df:64:b0:7a:8b:2e:0c:da:61:b1:9f:
                    0c:14:e9:f6:0a:31:2f:60:3d:4d:f6:eb:6b:be:45:
                    a2:84:00:5e:a1:ff:86:02:69:9f:11:41:bd:24:12:
                    15:29:ed:92:9b:88:8a:38:71:41:6e:23:07:3d:e2:
                    64:8f:63:aa:e8:04:93:06:8d:42:92:27:10:cf:6a:
                    04:e7:93:99:e7:86:09:d6:a5:b8:f6:50:0c:a6:50:
                    de:c7:99:d4:98:f2:4f:0c:42:fc:9f:f1:af:0e:6d:
                    8c:af:c9:a1:3e:12:42:ad:7f:13:4c:ae:17:44:a0:
                    d5:d6:e9:2b:eb:c3:d4:20:fd:9f:05:cd:04:62:f8:
                    ac:09:34:94:a9:2c:29:b9:ef:62:de:43:f5:dd:17:
                    8b:22:c1:33:35:2c:b6:77:9b:c4:17:0f:06:6d:cf:
                    2f:b3:97:33:0f:6a:02:dc:2d:44:03:58:cf:f7:fc:
                    ed:f1:ab:c3:86:25:f4:67:af:99:9c:b6:12:8b:bf:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CB:87:0C:7D:CD:2C:F3:DC:65:B4:A1:8E:32:88:E7:DF:A6:6C:4E
            X509v3 Authority Key Identifier:
                keyid:11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:60:8a:e8:aa:9f:9e:52:d1:9b:c3:0b:14:d8:c8:c6:86:2b:
         82:2e:4b:85:94:b0:89:39:dc:59:72:72:d5:ca:b0:bd:5b:75:
         c2:2b:d8:bb:ac:2c:c6:3b:66:c1:04:01:66:64:d3:46:8a:2d:
         6d:0a:18:5f:10:bf:8e:80:cf:57:80:8f:8f:74:61:eb:0a:7c:
         a1:fa:2b:c4:cd:3f:10:b0:68:56:37:87:1d:06:30:43:e3:a1:
         54:75:24:c7:59:e0:b1:26:87:ff:f2:d6:4f:50:4b:ea:94:e7:
         ec:ef:20:b4:fa:b4:1e:2d:07:a8:ca:92:61:ec:ab:c9:73:a8:
         2d:a2:5e:76:c3:90:ec:cf:98:11:26:91:fd:ae:2e:55:32:3c:
         cb:30:b5:17:f3:84:f2:f5:99:8e:0c:db:6d:95:7e:5f:12:ff:
         8e:0c:d2:e5:28:af:07:86:cd:62:c9:62:73:54:5c:c4:54:3c:
         f7:ff:2f:60:a0:6d:43:8c:bf:27:25:aa:32:29:d1:c6:4f:aa:
         59:3e:36:c1:45:6e:dd:39:eb:5d:b3:19:c4:20:3c:a5:17:35:
         b4:10:bd:fb:15:27:52:e5:3a:b5:da:63:55:f9:5f:b6:66:f9:
         3a:14:fc:86:fa:c5:4f:3c:41:b3:7c:19:1d:2f:1f:0f:e0:13:
         61:44:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:23:27 2025 by rpki-client