Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          rt3iyipsuS3tu+1zn54BXrVHoOvPRQWxfhINQqQjHpo=
Subject key identifier:   C4:E2:11:B1:20:B3:D0:2C:69:BA:BB:EF:EC:29:12:AE:B9:A1:3C:4D
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       2812D66D54373053E93C7DE643D9536FA81A8560
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          028D
Signing time:             Sat 09 Aug 2025 15:40:00 +0000
Manifest this update:     Sat 09 Aug 2025 15:35:00 +0000
Manifest next update:     Sun 10 Aug 2025 17:29:00 +0000
Files and hashes:         1: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: 16TbMKZdTZfIkFgwAstb/ibbX/bvn7/DJ8wvTNDWTQU=)
                          2: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: sXeIiddgIsbS+sATicLgnnXS6mGcpy75xY5FDmKS1hQ=)
                          3: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: r+oC/tP9cVlGYdiKnaYO/EjxupaEl0ebrhGSL23ifBg=)
                          4: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: Pcjq5j9L01oqldGDpHJ1/0Fhghry022+OEJwmG3qykg=)
                          5: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: IvMpdw39E7yHBfdNRqRjqhm3M4HxFQsnyvqHbu0ZRt4=)
                          6: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: noH/6wQklcBAaxEAf8opJx4ehieMk2GZ8QTzCrekJZE=)
                          7: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: zMCHN8yC7ghYw168p27lFSu7RUnCDRSI9dmPPgfS5pA=)
                          8: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: sBpa4s503VeZUYCOt+l0MWz+VMtYiBSEsylwD1QPHFw=)
                          9: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: WisQ1JL2FAAn8kaZqf230Nksj1G0DtPacu/DRaDBIZA=)
                          10: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: G0SWK+jmKHTG0ctDczQrKf6TxfRS64Q9op8j2QG1tjc=)
                          11: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: U2eH9NqttfTafC3EBRQM8TEtkvvFsyjejY/7ctga6eE=)
                          12: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: TO6Eb49up/wmLJo6dXO2I0VlV7zMLlLB/b9vOIm4NVc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:12:d6:6d:54:37:30:53:e9:3c:7d:e6:43:d9:53:6f:a8:1a:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Aug  9 15:35:00 2025 GMT
            Not After : Aug 10 17:29:00 2025 GMT
        Subject: CN=C4E211B120B3D02C69BABBEFEC2912AEB9A13C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:f1:d4:9a:48:8b:33:93:46:1b:3e:01:c9:
                    56:64:99:a9:1b:88:f8:98:e2:70:e0:b7:f8:26:48:
                    3c:b5:31:06:ec:03:cb:ff:53:0d:65:44:3d:a5:74:
                    bb:19:92:b5:8e:7d:1e:80:9a:4b:83:c3:0b:45:fc:
                    1f:cf:6c:da:f1:35:bb:be:66:7e:33:41:08:31:a4:
                    4a:a2:71:2d:c4:fa:11:0a:b4:59:3f:96:7c:ef:f2:
                    8d:50:84:6f:18:7b:dc:30:2b:7e:89:ac:3a:57:7a:
                    dd:80:18:fd:d4:34:ee:6d:c3:69:30:0e:bc:f0:6a:
                    f0:8a:09:95:be:16:d0:81:09:5b:e6:76:e4:ac:72:
                    29:04:ec:a2:68:c6:72:26:25:78:3a:a5:a3:a9:53:
                    73:3e:1c:d9:25:41:e7:a4:81:bf:b5:79:19:39:2e:
                    7b:87:6a:9c:8c:30:4e:fc:c6:1e:29:ea:4b:2a:fa:
                    f4:11:dd:63:bc:ea:96:ac:66:1c:7f:7f:ea:a0:7c:
                    a0:10:83:09:a6:9e:38:13:33:bb:7f:51:2c:57:9d:
                    27:6a:e5:02:b0:37:c6:29:70:83:ad:b8:38:55:79:
                    a6:90:02:5d:e4:98:69:3a:de:54:e0:ab:bb:5a:b0:
                    d9:5c:6b:82:04:eb:ef:10:6d:f2:52:7a:b2:fe:e6:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:11:B1:20:B3:D0:2C:69:BA:BB:EF:EC:29:12:AE:B9:A1:3C:4D
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:6f:83:60:54:45:aa:06:68:07:ae:9a:2d:33:b2:ae:1a:
         0f:44:2f:77:d0:62:c6:0a:9b:13:08:0a:9a:51:9c:94:29:cc:
         a7:4d:95:e1:74:79:cb:bb:b9:d5:ac:98:9f:5d:82:8a:3c:10:
         67:1b:fb:13:01:5d:a1:ed:8e:12:bb:d8:34:81:92:3f:08:c1:
         21:9f:d6:0a:58:c4:df:f3:aa:ea:18:3b:2d:12:81:4a:26:c5:
         5c:88:b5:0c:7e:66:6f:b0:20:d4:96:95:83:3f:d8:e6:2e:f1:
         f3:7b:6d:67:fa:65:17:bd:e0:25:95:68:ff:2e:8d:61:38:9f:
         11:c9:8a:3f:0e:27:f0:4a:13:6c:1f:ba:c1:68:03:87:4c:1b:
         c2:7a:83:2c:7b:2f:2b:b5:89:dd:c7:51:71:92:ea:d6:4b:34:
         9c:3d:da:5b:97:81:cd:78:47:19:05:70:9d:31:e9:36:8f:ed:
         84:45:6e:9c:3d:76:9e:f5:7c:3f:e5:dd:df:62:d3:e2:04:7f:
         ef:06:ec:29:c8:7f:57:fc:eb:f7:9f:b2:92:70:11:ee:78:24:
         af:be:90:c5:ad:e7:b5:a6:76:94:14:1b:28:f5:4a:ad:b3:bf:
         b7:48:8c:22:3f:a9:15:65:fb:5b:bd:dd:9a:5b:47:ef:7b:84:
         a6:a0:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:29 2025 by rpki-client