Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
File:                     870F31E28EB6835FE94CC62D908989A74790CB3E.mft (raw, json)
Hash identifier:          MXl6952ehKHWPonRgCuZeAjzEAaNjjrpEV+kKf3B9gI=
Subject key identifier:   8E:0B:4E:B3:17:BB:1C:0A:2A:CA:DC:C1:B6:18:20:9F:B7:61:8C:0E
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       4ED2CA6835EC9ABFE737BA6C44ACB7E74A6E2CC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
Manifest number:          01AE
Signing time:             Sun 10 Aug 2025 14:17:23 +0000
Manifest this update:     Sun 10 Aug 2025 14:12:23 +0000
Manifest next update:     Mon 11 Aug 2025 17:11:23 +0000
Files and hashes:         1: 323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa (hash: Pff7DtfMYO4MrGrfXFCgY6pGTXB03AtsILjl7o9DOYk=)
                          2: 34352e3138312e39332e302f32342d3234203d3e20323639313735.roa (hash: 4Jnh/rCJDTermsdI1dmftvy1mZKM6AFj8TGUOVLS+Y4=)
                          3: 870F31E28EB6835FE94CC62D908989A74790CB3E.crl (hash: NKBQCxRIHKv/srpgV2eswzDiiaiMXhGs2ma1p6MRJsc=)
                          4: 34352e3138312e39352e302f32342d3234203d3e20323639313735.roa (hash: 1oY7FtDZ/o3AJipI3DGTsDD5HBCmtWkfvnscc/EGHNk=)
                          5: 323830343a316634633a3a2f33322d3332203d3e20323639313735.roa (hash: 1w7/3g2jnOrotC49nW1EYA8lup8R/WWYbA+wjJYgmHI=)
                          6: 323830343a316634633a3a2f33332d3333203d3e20323639313735.roa (hash: 92rAgKGyB82YXG+BbGsX61h0T+f7B1KJQ0Xx3x2ovrc=)
                          7: 34352e3138312e39322e302f32332d3233203d3e20323639313735.roa (hash: eNTgdwM/7BO4VPgNc0uIrE158KBwvOzCR8H9yY8IDsA=)
                          8: 34352e3138312e39322e302f32342d3234203d3e20323639313735.roa (hash: ShFIyk+Z0cduxovwg4cuTLF9BX3C8AsUtnC5hL20kp0=)
                          9: 34352e3138312e39342e302f32342d3234203d3e20323639313735.roa (hash: yvUWPozum5zwymdPC2/KIpd9/UtiIrfNODFpGCZ+PO0=)
                          10: 34352e3138312e39322e302f32322d3232203d3e20323639313735.roa (hash: apBa/r52IvmGI+iVNX1/lrmpH2Jbn6NvkOsUQzR5wUY=)
                          11: 34352e3138312e39342e302f32332d3233203d3e20323639313735.roa (hash: r1bn3UoZrI0mrN3xTbLY/a73fUMxwg2slKcvEzUxpHw=)
                          12: 323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa (hash: b8FIVNNVHkwZkEufW79ZWTHrDvAE3HENowgmB+V6L94=)
                          13: 323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (hash: yzkgD2HbkOeS731A8ZsgS65mmCo5d1scpi/s48QeCAE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 17:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d2:ca:68:35:ec:9a:bf:e7:37:ba:6c:44:ac:b7:e7:4a:6e:2c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Aug 10 14:12:23 2025 GMT
            Not After : Aug 11 17:11:23 2025 GMT
        Subject: CN=8E0B4EB317BB1C0A2ACADCC1B618209FB7618C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:10:cc:36:73:e9:90:a0:86:9e:7d:95:75:
                    29:f1:fd:52:ba:c9:f1:0d:32:1d:b8:28:e6:ca:56:
                    4f:48:ef:1f:67:37:4e:03:e0:18:c9:ec:1a:36:13:
                    ec:77:6b:f5:29:83:44:bc:7c:c8:75:5b:f8:54:7f:
                    31:b0:7e:45:8d:53:7c:06:e8:a3:fb:0a:26:f1:91:
                    75:98:e6:d7:13:90:c5:30:7c:9b:a5:6f:3c:ca:21:
                    70:08:00:03:00:cb:fe:32:34:d1:7a:04:26:51:bc:
                    14:04:32:c4:f9:30:83:c9:74:b7:38:b9:fe:9a:a8:
                    87:45:77:7e:af:35:3a:d0:6f:60:b3:96:95:87:ac:
                    e5:dc:3b:9b:e1:3b:44:ea:67:b2:3f:68:85:92:18:
                    e9:21:c7:c8:b4:18:1e:69:52:9c:62:3c:2f:81:52:
                    1c:ea:b8:ea:e8:98:cc:90:0e:aa:3f:5f:a6:aa:7c:
                    4d:74:79:18:c5:f0:d8:1f:33:50:58:00:63:3f:2c:
                    5a:c3:b5:20:2b:b1:12:b4:00:66:74:ac:3b:45:f3:
                    52:a6:9f:dc:ef:af:9e:f4:77:42:3f:8a:8b:7d:de:
                    ee:e3:bb:ab:ba:85:eb:00:84:27:54:4a:a8:1f:8f:
                    94:5e:95:40:5f:2c:84:c5:f6:0f:22:f2:ab:46:8f:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0B:4E:B3:17:BB:1C:0A:2A:CA:DC:C1:B6:18:20:9F:B7:61:8C:0E
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:96:58:40:ee:0f:c1:cc:ab:e9:ae:ab:74:3f:bc:0b:47:7c:
         13:56:61:96:a6:72:d4:76:7c:16:a7:8b:e1:c9:b4:bd:91:b2:
         6e:69:bd:99:e1:87:16:13:e5:11:af:fa:53:38:4d:5f:33:fb:
         7e:68:cf:b6:2c:1f:8f:da:8e:c9:25:d0:43:ec:8c:9a:17:33:
         03:4b:bd:27:0d:19:83:a0:b8:a6:96:de:39:60:4c:cc:94:37:
         5f:68:e7:a9:0e:8f:3d:5d:70:ed:d1:f9:d5:41:af:dc:4f:46:
         76:90:5d:6e:81:d9:0a:a0:fa:4c:18:1a:df:8d:75:78:6b:59:
         06:e4:8f:b8:ce:af:18:88:27:d7:78:d2:d6:9c:a5:01:48:ed:
         1a:84:a3:80:3d:2d:b4:1e:58:6b:52:2c:a9:63:37:36:ae:3c:
         0a:b8:93:72:0d:80:b3:88:87:09:68:06:1c:07:dc:08:39:b3:
         2a:6a:a2:20:89:fb:1a:b5:48:1b:2e:55:93:77:56:39:df:49:
         fd:38:b7:65:62:76:c3:a7:73:df:01:e2:ff:ab:0a:85:37:4d:
         ff:7a:fa:4f:bd:5f:9e:2c:e6:7f:36:66:89:0e:29:11:fe:ff:
         86:2a:e2:12:9d:ff:ba:f2:5b:f3:1f:38:9a:75:79:e0:86:91:
         7d:fe:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:43 2025 by rpki-client