Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          1SLZp1VzpLzADzhH6HIkKOdmA+9mo0ROltl5YyU6f00=
Subject key identifier:   8E:0C:D1:23:CC:AF:DC:AB:DB:72:C7:D1:9D:65:80:81:3C:28:CF:02
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       1F79648E39724D7AACE24C3A7BC6A6A81CC30412
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          028C
Signing time:             Tue 05 Aug 2025 22:50:18 +0000
Manifest this update:     Tue 05 Aug 2025 22:45:18 +0000
Manifest next update:     Wed 06 Aug 2025 23:10:18 +0000
Files and hashes:         1: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: byFEroREFHPMjBDUcHp0vQUd8C3py3Gu47M47+GSIgs=)
                          2: 323830343a386230303a3a2f33322d3335203d3e20323733373036.roa (hash: 6TL5vKPSaKqQE4gIGwSgvsrJrF+N73V7cP4sGVuVr+A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 23:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:79:64:8e:39:72:4d:7a:ac:e2:4c:3a:7b:c6:a6:a8:1c:c3:04:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Aug  5 22:45:18 2025 GMT
            Not After : Aug  6 23:10:18 2025 GMT
        Subject: CN=8E0CD123CCAFDCABDB72C7D19D6580813C28CF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:06:38:aa:65:85:e6:e7:8a:39:2e:61:d6:
                    05:95:90:49:75:af:c7:fc:48:6f:8f:c8:15:06:2c:
                    93:7b:63:0f:43:d8:7a:7b:66:e5:c8:20:12:22:87:
                    ef:d0:95:0f:9b:9a:23:af:ab:dd:71:32:69:64:cc:
                    66:ee:c5:22:d4:cd:e1:36:a3:08:13:a8:ff:42:43:
                    71:fe:a2:fa:e2:e5:21:ec:15:50:bb:1e:d4:d1:5e:
                    76:bf:dd:6d:ab:c2:fd:e9:13:cc:25:83:2f:b6:06:
                    1c:36:0d:9a:08:e1:e9:00:ea:f4:52:a5:ea:86:8b:
                    33:6a:7f:1f:ba:16:9a:1a:3c:45:96:0d:ae:1d:ff:
                    f0:5c:46:4a:cc:15:55:42:00:3a:e8:28:f7:4b:82:
                    24:f9:df:a0:a1:4f:d3:ba:db:ae:31:97:c3:84:dc:
                    76:f6:cd:52:b4:82:78:ba:b9:2f:49:64:c6:f9:62:
                    4e:3c:96:93:86:24:df:90:34:15:ac:66:14:42:bf:
                    f8:46:0d:22:9e:95:90:5c:3c:d2:32:3d:26:0c:79:
                    e0:c7:cb:53:01:1b:54:80:c5:40:c0:e4:f8:c1:70:
                    b1:ac:4a:b6:62:ed:81:a3:d8:c7:b2:fa:43:82:54:
                    63:6d:64:6f:ab:0b:cd:fa:4e:43:28:3c:57:44:be:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:D1:23:CC:AF:DC:AB:DB:72:C7:D1:9D:65:80:81:3C:28:CF:02
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c8:9f:2d:c8:b5:96:99:aa:62:61:94:4b:49:8a:71:d6:6b:
         6c:c6:0a:40:d4:29:f0:d9:2f:30:dc:e4:2f:89:5c:b0:2b:e5:
         2a:27:89:ec:7f:91:d2:06:0b:a7:c6:4b:ad:0b:7b:1d:4f:5a:
         ac:cf:b3:3f:f9:8a:b6:1f:40:7d:1b:94:5d:96:31:fe:a7:d0:
         b8:42:53:3a:9f:bc:4a:27:07:60:b4:03:0e:fa:2b:61:a5:8a:
         ff:df:f2:c3:3d:4c:07:e6:ae:d3:7b:2f:bb:68:60:da:d7:b8:
         63:d1:87:7d:d2:cb:8d:f7:11:95:4e:6a:98:2f:36:b2:56:9c:
         c7:18:ee:9b:c6:6f:91:14:c3:4a:0b:f2:2a:70:89:22:08:92:
         e5:40:83:2e:b3:27:96:c5:32:23:68:9a:cc:16:a6:6e:ae:18:
         40:14:36:37:0e:c9:e3:56:7f:03:08:75:f9:6d:cb:56:42:c3:
         ee:a5:98:ec:6d:3a:5a:74:51:74:07:d4:eb:ec:3e:aa:98:a5:
         e9:df:5d:e7:c1:cc:2a:e3:70:ce:03:9b:7f:3a:57:19:37:e1:
         2e:a4:47:af:44:28:ca:3d:49:ac:cf:bb:93:46:2a:60:4f:a8:
         d1:99:ec:3d:e6:65:d2:33:c7:22:a3:35:0f:8a:0c:15:f7:fe:
         7a:64:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:16 2025 by rpki-client