Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
File:                     9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft (raw, json)
Hash identifier:          QDl1AZTmwO3nc4zlXG2njMx0G9Cnq96ZgA6OsMuaZjw=
Subject key identifier:   97:0E:E9:5A:E7:55:D5:47:5A:9A:32:C0:A6:9E:A3:A3:88:13:C4:EF
Authority key identifier: 92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB
Certificate issuer:       /CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
Certificate serial:       223B61464A5B6AB04707AD86FA746ABF4F895436
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
Manifest number:          87
Signing time:             Tue 05 Aug 2025 20:54:31 +0000
Manifest this update:     Tue 05 Aug 2025 20:49:31 +0000
Manifest next update:     Wed 06 Aug 2025 23:44:31 +0000
Files and hashes:         1: 9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl (hash: PxDItY3v4NVNC9jWO7G/WT/tw7xX5xKhLtsNZ1mBPzI=)
                          2: 34352e3233312e3132302e302f32332d3233203d3e20323637323131.roa (hash: CyCgQgSZjuv4wVb9P7eMVerpprnry+KDzCk9mtKJajs=)
                          3: 34352e3233312e3132322e302f32342d3234203d3e20323637323131.roa (hash: 2QT40wjDP2a1e2mgr9R45aVDZs5BQ7idYM9V2kEpV8k=)
                          4: 34352e3233312e3132302e302f32342d3234203d3e20323637323131.roa (hash: eucSio1ZgqQSEYIbgZh+U5b+dT6QL7rVvfizHWjky80=)
                          5: 34352e3233312e3132332e302f32342d3234203d3e20323637323131.roa (hash: y4PAY1WdI9s0IpVA+5L9Wk1gUhm4EjMzYQVHzhs28Mg=)
                          6: 34352e3233312e3132312e302f32342d3234203d3e20323637323131.roa (hash: iFjWGW2wsuTHYcVZKi4BmaWBAxygP+CD2RJuxvyFXXA=)
                          7: 34352e3233312e3132322e302f32332d3233203d3e20323637323131.roa (hash: fGfiIQx8IGoNdAz62bgecZ58p4JrC2xl6Dsp7BoXc0U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl
                          rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 23:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3b:61:46:4a:5b:6a:b0:47:07:ad:86:fa:74:6a:bf:4f:89:54:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
        Validity
            Not Before: Aug  5 20:49:31 2025 GMT
            Not After : Aug  6 23:44:31 2025 GMT
        Subject: CN=970EE95AE755D5475A9A32C0A69EA3A38813C4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:e1:1b:ba:96:3c:6a:77:14:5a:cf:a3:6b:
                    75:7e:7b:b5:82:f0:2a:d6:bc:14:1c:84:fb:2d:56:
                    e0:90:de:95:35:c5:17:3e:0a:2b:82:ff:1c:ff:38:
                    b9:85:a9:b9:43:48:69:2d:0b:32:ef:d5:20:db:02:
                    fa:48:1a:32:67:7a:f1:50:14:43:3d:45:5c:25:74:
                    3f:f4:1f:18:1d:94:90:7e:bc:21:08:af:57:af:7c:
                    6b:eb:44:98:c9:c4:b5:38:f3:36:8c:7d:45:8a:0b:
                    77:3d:ff:c8:b6:13:c5:37:b5:74:4a:0a:eb:2b:78:
                    e1:01:3f:6c:f6:66:0b:83:25:2d:e3:e6:a6:51:cc:
                    77:69:00:0f:1f:7a:74:d7:38:ef:13:ee:40:db:79:
                    ae:8e:01:a9:94:74:a2:3b:60:3d:39:2b:26:fb:f2:
                    e4:2e:4d:47:d6:7c:e7:80:06:04:b5:4e:00:29:87:
                    36:b9:f4:f3:84:8a:75:a2:79:6b:64:74:75:11:2c:
                    03:57:a5:9c:d9:e4:d0:99:43:73:7f:db:b7:ff:aa:
                    6e:4c:97:f2:f3:a8:ed:e5:93:ba:6f:4d:ae:cb:2b:
                    0f:01:22:2e:00:c6:da:df:15:d0:97:40:0b:1c:1f:
                    02:41:99:1f:8d:b1:c9:36:69:52:5f:ee:e6:fe:1c:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0E:E9:5A:E7:55:D5:47:5A:9A:32:C0:A6:9E:A3:A3:88:13:C4:EF
            X509v3 Authority Key Identifier:
                keyid:92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:4e:1d:14:21:0a:a5:96:ea:11:77:c3:20:88:92:aa:51:
         dd:62:c7:e3:c4:bf:86:8d:76:2c:c9:4f:b9:b5:87:e3:ea:bf:
         4d:2e:1c:4a:41:f8:1b:d5:6e:75:dc:a1:43:44:24:c8:0b:0b:
         fa:ab:a9:f0:6e:3f:09:0c:fa:3f:1d:98:4f:66:b2:30:70:ba:
         90:3f:ac:da:ab:ff:60:c5:7b:76:cd:ea:a0:32:27:bc:4e:33:
         8f:2d:3f:1a:03:f7:5c:db:e7:08:6d:dc:5c:ab:e1:af:c2:f1:
         d8:e3:ed:31:38:37:24:42:6a:cc:63:7b:81:8c:28:e2:9e:6b:
         10:17:c5:eb:ab:bd:fe:3c:e9:00:5c:1d:24:22:e4:b5:78:78:
         0a:39:ed:71:22:6e:42:98:3e:cc:4e:8c:d7:4f:be:a9:36:26:
         8a:a7:14:f0:ef:ad:f5:ad:60:42:62:04:c4:aa:dc:72:a6:52:
         68:52:15:09:1a:29:34:2b:2a:a0:f4:2a:d9:36:03:67:38:63:
         42:8c:9e:d2:95:65:b8:9a:51:fc:68:c8:b8:c4:24:fd:b1:30:
         54:ad:70:e2:2c:b6:74:9b:9e:2d:30:b9:a7:05:85:9d:49:04:
         56:70:a5:e5:15:58:3e:a7:0a:c5:72:13:66:6e:dc:9f:0e:75:
         c2:30:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:38 2025 by rpki-client