Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
File:                     2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft (raw, json)
Hash identifier:          mi6NUfslPISgbBYNqRjCkeO13IVQoYpnp9mCwJz/3uo=
Subject key identifier:   91:D1:73:CE:3F:6E:E2:E9:40:22:40:9A:70:44:DD:F8:1A:7E:AE:70
Authority key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19
Certificate issuer:       /CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
Certificate serial:       68E4E67540F25F8415F405D3743058951EE5DAB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
Manifest number:          028B
Signing time:             Tue 05 Aug 2025 14:22:49 +0000
Manifest this update:     Tue 05 Aug 2025 14:17:49 +0000
Manifest next update:     Wed 06 Aug 2025 17:08:49 +0000
Files and hashes:         1: 323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (hash: 8HJEKPfJsJ9cUBPI5dVpHTR/hYHRd/Hg9OtQORwVD/Q=)
                          2: 34352e362e3138382e302f32322d3332203d3e20323636313639.roa (hash: mLr+uiC6lfZpqhMzaY1jB2Xz68LEez2gkuQCR+mbw+s=)
                          3: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl (hash: l6qgBxd7i6WSHyFYITk61Ug277e+Cey+VSKwKK2FVBE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl
                          rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 17:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e4:e6:75:40:f2:5f:84:15:f4:05:d3:74:30:58:95:1e:e5:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
        Validity
            Not Before: Aug  5 14:17:49 2025 GMT
            Not After : Aug  6 17:08:49 2025 GMT
        Subject: CN=91D173CE3F6EE2E94022409A7044DDF81A7EAE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:37:0b:19:02:0e:af:15:f7:97:0f:c2:60:
                    ac:ae:8d:20:06:96:55:a3:35:26:60:70:ca:ee:13:
                    f7:8f:9c:62:02:06:47:e0:56:e6:0f:45:de:79:40:
                    ab:81:c5:4a:1e:5a:9d:7e:96:d3:48:54:75:a1:23:
                    1e:43:90:15:6d:b4:32:87:e8:53:07:5d:28:aa:01:
                    2f:93:24:8f:1a:dc:3d:49:0d:b0:e8:93:95:fc:b9:
                    51:50:ff:f0:55:f3:5e:81:7f:c6:23:74:bd:a0:ad:
                    3b:12:f5:f4:c7:ef:44:e8:ff:69:f7:02:b5:9f:1b:
                    50:ac:fe:61:1c:ee:12:da:7a:9a:dd:dd:37:e5:50:
                    52:2e:5f:fa:c6:b3:bb:47:a4:ee:3e:01:5c:1a:da:
                    11:56:f4:bb:b6:9f:dc:05:08:fd:29:f7:84:6f:29:
                    5c:8f:1b:ef:ff:aa:fb:56:36:c7:d9:bd:27:cc:7e:
                    0d:53:f6:06:c3:7f:f4:de:22:8e:4d:0a:b3:4b:d4:
                    ef:23:97:37:4b:c2:63:4f:8f:29:99:f6:b6:18:3b:
                    37:94:20:f7:43:ed:50:48:6e:84:c0:2f:01:a3:c0:
                    6b:2e:b5:a3:31:05:e6:ac:57:b0:48:fa:ae:81:47:
                    83:a7:d3:79:4c:3f:b7:13:ce:a7:fa:d4:78:62:08:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D1:73:CE:3F:6E:E2:E9:40:22:40:9A:70:44:DD:F8:1A:7E:AE:70
            X509v3 Authority Key Identifier:
                keyid:2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:b6:fc:13:b9:ed:aa:be:41:9d:e9:c4:dc:4b:0f:16:15:
         29:d7:8d:da:9b:70:7f:4d:5a:bc:36:55:2e:91:9b:8d:a7:90:
         cc:00:64:8c:e0:c0:0d:6f:bb:9b:5b:5d:1c:49:d1:1e:25:ab:
         de:fb:42:ef:e8:49:4c:95:d3:10:5f:71:d9:90:f9:84:cd:32:
         16:9a:8b:5f:bb:99:9e:24:69:08:20:1c:e9:0c:e0:b6:b0:34:
         0f:d8:8e:89:26:9c:f3:e4:a8:a2:c8:88:83:34:ce:ba:5a:0b:
         79:f0:62:90:e0:f0:0b:06:36:d9:1d:d2:84:cf:aa:a5:43:45:
         83:fb:6c:a2:ce:47:58:52:d0:3b:29:13:51:6e:66:5e:6a:e5:
         8f:48:27:ba:1f:04:30:3b:0e:3a:d6:81:67:fe:dc:7d:ec:72:
         d2:65:34:f5:58:7d:c1:a6:4f:d8:0f:82:bc:50:99:13:e5:34:
         90:b9:a8:92:51:b2:af:b3:4c:a1:07:6f:85:46:e9:55:e4:f0:
         22:16:7a:eb:58:4f:12:ea:37:6f:47:a0:c7:48:a2:ef:0c:86:
         c9:61:68:11:23:56:6b:6d:53:25:a6:58:6e:2d:b6:58:c0:ee:
         57:2a:ea:10:13:6a:39:c1:cc:53:a1:6c:6f:83:2d:44:cc:46:
         43:9b:43:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaOTmdUDyX4QV9AXTdDBYlR7l2rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwNUFGMkZBM0JBQkVFQUVEQkVFMjYzQzI0RjdGQzFE
QUMzNkMxOTAeFw0yNTA4MDUxNDE3NDlaFw0yNTA4MDYxNzA4NDlaMDMxMTAvBgNV
BAMTKDkxRDE3M0NFM0Y2RUUyRTk0MDIyNDA5QTcwNDREREY4MUE3RUFFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKzcLGQIOrxX3lw/CYKyujSAG
llWjNSZgcMruE/ePnGICBkfgVuYPRd55QKuBxUoeWp1+ltNIVHWhIx5DkBVttDKH
6FMHXSiqAS+TJI8a3D1JDbDok5X8uVFQ//BV816Bf8YjdL2grTsS9fTH70To/2n3
ArWfG1Cs/mEc7hLaeprd3TflUFIuX/rGs7tHpO4+AVwa2hFW9Lu2n9wFCP0p94Rv
KVyPG+//qvtWNsfZvSfMfg1T9gbDf/TeIo5NCrNL1O8jlzdLwmNPjymZ9rYYOzeU
IPdD7VBIboTALwGjwGsutaMxBeasV7BI+q6BR4On03lMP7cTzqf61HhiCK4JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkdFzzj9u4ulAIkCacETd+Bp+rnAwHwYDVR0j
BBgwFoAUKgWvL6O6vurtvuJjwk9/wdrDbBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNzRlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNx
MW0vMS8yQTA1QUYyRkEzQkFCRUVBRURCRUUyNjNDMjRGN0ZDMURBQzM2QzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMDVBRjJGQTNCQUJFRUFF
REJFRTI2M0MyNEY3RkMxREFDMzZDMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzNzRlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNxMW0vMS8y
QTA1QUYyRkEzQkFCRUVBRURCRUUyNjNDMjRGN0ZDMURBQzM2QzE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJOy2/BO57aq+QZ3pxNxLDxYVKdeN2ptwf01avDZVLpGbjaeQzABkjODADW+7
m1tdHEnRHiWr3vtC7+hJTJXTEF9x2ZD5hM0yFpqLX7uZniRpCCAc6QzgtrA0D9iO
iSac8+SoosiIgzTOuloLefBikODwCwY22R3ShM+qpUNFg/tsos5HWFLQOykTUW5m
Xmrlj0gnuh8EMDsOOtaBZ/7cfexy0mU09Vh9waZP2A+CvFCZE+U0kLmoklGyr7NM
oQdvhUbpVeTwIhZ661hPEuo3b0egx0ii7wyGyWFoESNWa21TJaZYbi22WMDuVyrq
EBNqOcHMU6Fsb4MtRMxGQ5tDqQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:28 2025 by rpki-client