Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
File:                     806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft (raw, json)
Hash identifier:          nhgRygvT+Ch0pd/5hjjxiBm0mnfftJI+4yra7avL5oc=
Subject key identifier:   0E:40:DD:1A:7C:A3:89:06:28:BF:52:58:55:11:07:D6:07:44:AC:A6
Authority key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52
Certificate issuer:       /CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
Certificate serial:       6AD659B14C5DBE80A22519E6C59401D83ED7F11B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
Manifest number:          028B
Signing time:             Sat 09 Aug 2025 11:15:45 +0000
Manifest this update:     Sat 09 Aug 2025 11:10:45 +0000
Manifest next update:     Sun 10 Aug 2025 12:42:45 +0000
Files and hashes:         1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: aJepNlwBajDAqgc6KneJ78CpKDsJPHnN/0pqAA8sjeQ=)
                          2: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl (hash: FLEzHBzb619/AxB9+f0q+TPu/aVLwf59hbUbiGvlLaA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 12:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d6:59:b1:4c:5d:be:80:a2:25:19:e6:c5:94:01:d8:3e:d7:f1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
        Validity
            Not Before: Aug  9 11:10:45 2025 GMT
            Not After : Aug 10 12:42:45 2025 GMT
        Subject: CN=0E40DD1A7CA3890628BF5258551107D60744ACA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:75:17:b8:ea:44:06:40:46:86:49:50:6e:
                    c0:89:69:60:97:d0:a9:1d:01:41:d8:ab:e2:83:09:
                    45:42:c4:60:e9:6d:6b:3f:ad:04:6c:8f:c0:5d:b5:
                    f8:f4:8c:62:23:d9:19:b4:df:aa:b5:7c:32:f2:04:
                    a1:25:8f:ef:c5:df:75:11:f8:b6:bf:1b:fc:4a:49:
                    72:05:78:d6:67:f6:17:b9:a0:de:ad:b4:d8:aa:32:
                    dc:e3:ba:80:09:e5:b5:4b:db:cf:83:1a:78:b8:72:
                    fd:53:dc:3a:14:9c:99:17:77:eb:4b:b7:2d:c5:fa:
                    13:3f:9d:eb:44:64:87:7b:14:7e:a1:29:0f:e8:8e:
                    b8:73:2c:e5:6f:bb:b3:70:dd:62:07:0d:0e:ea:da:
                    27:a4:a8:9a:31:b1:c8:e1:c1:1b:51:12:bf:67:ec:
                    b7:48:c1:a4:6a:d9:a8:00:d8:58:37:97:3a:90:32:
                    06:fd:8d:c5:6a:f7:4a:51:d4:e5:91:2e:c8:57:be:
                    7b:d1:3a:d7:1a:68:e2:30:a2:ca:2b:d1:7e:42:63:
                    16:0e:1a:f5:d3:ae:36:ad:18:af:15:95:a1:21:91:
                    47:2a:05:11:7d:a9:fa:48:77:bb:fb:40:e6:fd:8d:
                    e0:13:fa:65:0c:75:06:ab:26:0e:15:e4:19:97:f1:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:40:DD:1A:7C:A3:89:06:28:BF:52:58:55:11:07:D6:07:44:AC:A6
            X509v3 Authority Key Identifier:
                keyid:80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:56:0b:89:d8:3e:07:07:cc:3d:5e:d5:34:86:0f:79:c4:
         ba:04:31:06:dd:39:1f:63:f7:5c:23:e8:4b:d5:65:84:4f:e3:
         95:c5:c7:84:ac:e5:a1:f0:f1:52:5f:f8:3b:7d:d1:c2:a8:76:
         90:bc:21:75:b0:ff:aa:e0:42:4e:93:15:c1:9a:5b:35:9c:1a:
         b4:9b:ec:66:96:d3:0e:b1:e7:72:5b:26:02:3a:27:4c:92:99:
         df:b1:fe:e4:33:28:d9:23:cb:dc:0e:7d:fe:fc:8d:ed:1e:1d:
         5c:2e:b8:46:ab:a5:2e:c4:63:ba:51:7a:27:68:95:ee:cb:82:
         20:93:e5:ae:7b:68:30:04:0d:6d:91:e4:8d:39:67:eb:7b:d5:
         d8:f0:57:5e:65:b4:b4:46:05:22:7c:39:e4:3d:88:bb:f0:16:
         c5:f2:a7:f9:d9:8e:94:44:33:ed:0f:34:5b:6b:fe:59:c3:54:
         9e:b6:0c:a6:0f:f8:c4:1f:2d:2b:df:8f:ad:e2:64:bd:77:a3:
         3e:f0:a5:3a:96:49:46:86:72:72:15:e2:09:0c:d0:c5:b6:98:
         50:a1:c7:12:70:ca:33:9b:2e:44:dc:e9:07:b7:4f:bb:22:2b:
         57:30:06:91:54:6d:e3:6b:06:f4:7e:50:62:7e:33:4d:df:fb:
         4b:67:db:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUatZZsUxdvoCiJRnmxZQB2D7X8RswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA2RTBCNDBDNjdGMTFBQTNCRkQzMUUyODQ0QjhEQzNB
MENBMTQ1MjAeFw0yNTA4MDkxMTEwNDVaFw0yNTA4MTAxMjQyNDVaMDMxMTAvBgNV
BAMTKDBFNDBERDFBN0NBMzg5MDYyOEJGNTI1ODU1MTEwN0Q2MDc0NEFDQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihXUXuOpEBkBGhklQbsCJaWCX
0KkdAUHYq+KDCUVCxGDpbWs/rQRsj8Bdtfj0jGIj2Rm036q1fDLyBKElj+/F33UR
+La/G/xKSXIFeNZn9he5oN6ttNiqMtzjuoAJ5bVL28+DGni4cv1T3DoUnJkXd+tL
ty3F+hM/netEZId7FH6hKQ/ojrhzLOVvu7Nw3WIHDQ7q2iekqJoxscjhwRtREr9n
7LdIwaRq2agA2Fg3lzqQMgb9jcVq90pR1OWRLshXvnvROtcaaOIwosor0X5CYxYO
GvXTrjatGK8VlaEhkUcqBRF9qfpId7v7QOb9jeAT+mUMdQarJg4V5BmX8TkPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDkDdGnyjiQYov1JYVREH1gdErKYwHwYDVR0j
BBgwFoAUgG4LQMZ/Eao7/THihEuNw6DKFFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJN
dVgvMS84MDZFMEI0MEM2N0YxMUFBM0JGRDMxRTI4NDRCOERDM0EwQ0ExNDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNkUwQjQwQzY3RjExQUEz
QkZEMzFFMjg0NEI4REMzQTBDQTE0NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMS84
MDZFMEI0MEM2N0YxMUFBM0JGRDMxRTI4NDRCOERDM0EwQ0ExNDUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASrVWC4nYPgcHzD1e1TSGD3nEugQxBt05H2P3XCPoS9VlhE/jlcXHhKzlofDx
Ul/4O33Rwqh2kLwhdbD/quBCTpMVwZpbNZwatJvsZpbTDrHnclsmAjonTJKZ37H+
5DMo2SPL3A59/vyN7R4dXC64RqulLsRjulF6J2iV7suCIJPlrntoMAQNbZHkjTln
63vV2PBXXmW0tEYFInw55D2Iu/AWxfKn+dmOlEQz7Q80W2v+WcNUnrYMpg/4xB8t
K9+PreJkvXejPvClOpZJRoZychXiCQzQxbaYUKHHEnDKM5suRNzpB7dPuyIrVzAG
kVRt42sG9H5QYn4zTd/7S2fbGw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:28 2025 by rpki-client