Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          pKHN+PrjYg2znbVuWaTHhre/OgXNfVmhBOLVoj8lV0s=
Subject key identifier:   AB:1D:98:F4:01:FC:F4:79:BE:32:09:2C:51:C5:3F:06:A6:C1:53:04
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       1551EBB496A07BAD7409EA1EB627A42B28448713
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          028C
Signing time:             Sun 10 Aug 2025 00:20:40 +0000
Manifest this update:     Sun 10 Aug 2025 00:15:40 +0000
Manifest next update:     Mon 11 Aug 2025 02:23:40 +0000
Files and hashes:         1: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
                          2: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
                          3: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
                          4: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
                          5: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: z4kma8KPgW8HyczAmJ6+dKxq4AamG2A+lWGl0ExV4LQ=)
                          6: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          7: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          8: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:eb:b4:96:a0:7b:ad:74:09:ea:1e:b6:27:a4:2b:28:44:87:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Aug 10 00:15:40 2025 GMT
            Not After : Aug 11 02:23:40 2025 GMT
        Subject: CN=AB1D98F401FCF479BE32092C51C53F06A6C15304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:da:af:f0:e4:36:30:87:70:75:4a:89:42:
                    dd:3a:38:43:51:80:62:ae:52:a1:a8:5f:ed:de:94:
                    92:ab:b6:88:d1:98:ac:a7:bb:35:47:76:85:16:87:
                    4c:28:df:05:b0:65:ac:30:be:f7:89:a8:64:44:61:
                    17:01:9f:9b:41:ac:d4:6f:f2:c0:8a:f9:d7:46:dc:
                    58:f3:0b:cc:53:b6:17:df:fd:9e:ee:b1:bc:54:15:
                    25:85:36:01:f4:1b:40:55:39:97:86:2b:e9:f6:aa:
                    5b:df:8a:a1:30:25:17:08:cd:60:a6:5f:68:90:6b:
                    e5:94:ae:4d:b3:89:e6:c8:2f:b8:fa:f2:27:16:da:
                    9e:09:ad:3e:6c:03:a7:3d:07:b9:19:e7:ef:42:7c:
                    fb:55:18:45:88:3c:d7:f5:5d:41:fe:7e:da:5f:25:
                    c2:c8:51:ec:82:4d:45:c0:45:42:78:d5:8a:d4:c9:
                    9f:64:2b:71:77:98:89:49:0a:c4:29:21:7a:1a:a3:
                    ba:71:12:ac:a3:15:42:4f:9f:aa:53:bf:6d:e7:15:
                    01:3f:e1:6f:9a:a6:44:07:22:f5:9e:3d:a8:74:35:
                    73:74:a4:3f:5f:2a:84:12:b6:92:50:a0:4e:9e:4b:
                    ff:d4:63:9a:5a:80:8b:85:d7:d2:51:e1:79:6c:2c:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1D:98:F4:01:FC:F4:79:BE:32:09:2C:51:C5:3F:06:A6:C1:53:04
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:98:9a:79:b2:09:77:95:db:19:3a:5b:c6:f5:78:82:1b:
         11:84:74:93:3f:71:dc:62:02:3f:99:e6:54:95:51:ea:7f:a2:
         00:8b:2c:1e:d5:31:c2:42:cf:7a:a7:0c:55:39:42:e9:3d:b2:
         0d:c7:25:69:3c:08:a9:b3:2e:5b:08:f6:9b:18:0f:8f:3e:e2:
         5a:91:50:c7:00:f3:4c:c0:06:16:52:cd:28:98:58:79:ee:2e:
         a5:18:f9:9a:99:8b:22:5f:80:5c:a3:81:46:9c:13:94:ae:ae:
         c7:b6:0b:c7:58:31:51:68:35:3b:41:77:17:f5:17:72:f6:9c:
         91:8f:51:8e:17:b5:ce:9f:05:82:e0:af:8e:eb:4e:5c:7b:c6:
         4a:e4:b8:f5:e6:9a:04:d4:37:b7:23:6e:c2:de:82:1b:17:a4:
         7d:f1:c0:3f:d0:8e:5a:92:eb:13:eb:a7:33:31:b6:60:d1:fa:
         d7:3a:04:9b:fd:ee:13:4b:61:20:fe:29:6a:a5:77:f9:38:0d:
         0e:4b:1f:0d:ff:a6:c0:17:ee:ff:8d:03:67:aa:37:e7:a5:37:
         18:c0:57:97:df:79:bc:8c:c6:42:6b:07:0d:39:df:95:6a:4e:
         b5:86:df:95:a3:17:4f:78:15:d7:ae:0f:a8:70:b8:52:bc:29:
         7a:7a:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:50:58 2025 by rpki-client