Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
File:                     09B86DF2675EE46F17CF5F43330433E2F22C8432.mft (raw, json)
Hash identifier:          4e/Dhz1Kvx4kvIYNNhLYwWJLI1gVyeA30oySg6gVMOc=
Subject key identifier:   34:08:3C:04:3D:69:7C:21:65:55:3B:9F:06:74:A8:BA:54:AE:3B:90
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Certificate issuer:       /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial:       3DC12FB6DCFF568B24654DB78FB10FE5016A4722
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
Manifest number:          012D
Signing time:             Thu 07 Aug 2025 21:47:54 +0000
Manifest this update:     Thu 07 Aug 2025 21:42:54 +0000
Manifest next update:     Fri 08 Aug 2025 22:34:54 +0000
Files and hashes:         1: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (hash: hsUqcBtrggzHi8XWKiDT4v+VWmLmwqE/MP++GHfCjxs=)
                          2: 3133382e35392e39322e302f32322d3234203d3e20323632373639.roa (hash: zNH2DTIGS/EMjzSeq1+poV5vX3CbHq/oe6HfJIa6Sww=)
                          3: 3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (hash: okRSgm6tTpjxTkb9wnxtgrY0N5qGE6icPVw38aY+vUE=)
                          4: 3137372e3132342e3136342e302f32322d3234203d3e20323632373639.roa (hash: fIX1rsqkrEcxfwHxtTnwZrhQYl82JOUf5vdma4FSDSQ=)
                          5: 3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa (hash: 9cmwa/EjIHXq9mMNpoYQR4n5fw0qKo7hhSMP7U2r66M=)
                          6: 09B86DF2675EE46F17CF5F43330433E2F22C8432.crl (hash: +6lhnJ9IpSEXUE04rm1UY0BAO0fj4tsN+lxbKvJ/myg=)
                          7: 3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (hash: PuvRBmtSfW019bAKsmUe0+rTNxuXw1pFP0looDysGEw=)
                          8: 3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (hash: eQtF15LjNj6FDZHZkElJh6Yb4+GcGCOJMj782JJ6GaU=)
                          9: 323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (hash: BDbkIOTo1z+rcsqGg8AzmzwEnhj4V4/lYattEazDYSg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 22:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c1:2f:b6:dc:ff:56:8b:24:65:4d:b7:8f:b1:0f:e5:01:6a:47:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
        Validity
            Not Before: Aug  7 21:42:54 2025 GMT
            Not After : Aug  8 22:34:54 2025 GMT
        Subject: CN=34083C043D697C2165553B9F0674A8BA54AE3B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:64:8c:f9:d1:69:9d:58:52:6e:e2:7b:45:
                    c0:af:0b:94:02:b9:9a:a4:00:f3:66:31:92:66:5e:
                    77:bc:07:9f:4a:31:ef:70:a2:38:3d:bd:ef:6d:e3:
                    73:29:79:e8:0c:fb:bc:91:c3:e1:e1:5c:42:f8:3c:
                    75:d4:7f:f5:e6:f3:71:ff:10:b2:f3:e9:f7:58:7c:
                    7c:10:4e:11:a1:1c:be:55:47:cd:8e:39:b9:43:4b:
                    1c:c9:d3:0a:82:cb:ad:34:ae:cd:e4:63:4e:9a:94:
                    93:9c:30:b5:98:b4:6a:17:ea:5b:72:e5:ba:b9:42:
                    8d:84:48:b1:14:0e:67:6d:1a:9b:97:cf:36:37:5f:
                    30:cc:16:1b:7b:79:a9:98:65:68:48:8d:d9:c0:87:
                    82:ce:2c:57:e7:73:28:ad:48:b1:77:4e:a1:d7:83:
                    e8:e4:eb:d2:5b:34:20:87:9d:0b:29:e4:83:4b:7c:
                    87:47:29:99:69:e0:9f:3e:19:1d:c4:69:7f:85:80:
                    85:3c:97:dc:7a:b0:59:db:a8:53:c5:93:1c:f8:2b:
                    fc:41:2d:ce:17:32:cf:5a:54:e6:83:61:2c:3e:f6:
                    3c:c6:a1:84:df:c4:67:21:aa:27:b8:97:48:db:63:
                    04:55:33:39:44:60:f9:be:5b:e5:3b:2c:61:e6:29:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:08:3C:04:3D:69:7C:21:65:55:3B:9F:06:74:A8:BA:54:AE:3B:90
            X509v3 Authority Key Identifier:
                keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:65:af:2f:52:e8:4e:a7:3b:1b:9e:eb:41:fc:0f:12:86:e0:
         de:f5:a7:3f:ae:b2:a0:5c:14:bd:e4:93:89:b3:ae:63:3f:4e:
         f6:b1:60:85:a6:4b:93:0d:dc:0d:bd:d5:84:8c:db:5a:80:57:
         0e:e7:0b:28:de:b9:63:26:8b:52:a4:c5:5f:de:cb:0c:a2:e9:
         27:87:31:a7:5f:cb:fa:b0:92:a5:29:e3:8c:fe:c8:8a:37:2c:
         c3:79:b4:f7:19:f1:2e:9c:90:3a:8a:59:49:50:a7:5d:73:3b:
         1d:2b:40:39:09:13:d4:25:dd:ff:34:ab:a9:f9:e2:22:43:e3:
         8f:75:0e:72:e6:d0:aa:ab:c4:2c:25:15:d1:94:40:02:86:70:
         d0:4f:4f:32:c9:9c:b4:1c:51:ca:c0:3c:6b:c6:6c:23:a3:d8:
         c4:c1:41:e4:58:64:54:41:ca:14:eb:1c:d0:85:4f:24:96:9f:
         b9:d6:2a:40:09:31:a2:ef:29:9f:ec:7b:b9:07:67:21:3d:46:
         53:6b:23:a5:fb:f3:67:e5:d6:f2:c9:95:dc:1e:e7:74:3e:8b:
         d9:4f:b3:36:14:e9:da:74:5e:c0:50:f4:27:41:3a:ad:a0:1a:
         8d:55:3d:c0:0c:75:97:eb:f2:5d:d4:56:3c:c6:06:1a:9e:27:
         20:43:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:45 2025 by rpki-client