Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
File:                     433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json)
Hash identifier:          chyiQCbvsqwxsAU6u2z7IVnclvBVJ5n8wFda4r0ySrA=
Subject key identifier:   29:82:75:72:DD:D3:5F:AA:D6:E8:AA:90:D0:17:A0:7B:D6:DA:F3:D3
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       0534627D997B44443BE7F82AF5BC68553661AAD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
Manifest number:          AC
Signing time:             Fri 08 Aug 2025 17:11:01 +0000
Manifest this update:     Fri 08 Aug 2025 17:06:01 +0000
Manifest next update:     Sat 09 Aug 2025 17:30:01 +0000
Files and hashes:         1: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: WXAJkYXv8bRZSubXt45kgePyJbh253KxIteSp3lhpT4=)
                          2: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=)
                          3: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:34:62:7d:99:7b:44:44:3b:e7:f8:2a:f5:bc:68:55:36:61:aa:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Aug  8 17:06:01 2025 GMT
            Not After : Aug  9 17:30:01 2025 GMT
        Subject: CN=29827572DDD35FAAD6E8AA90D017A07BD6DAF3D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:2d:a9:03:d2:9b:54:0f:b7:ad:ca:02:8e:
                    28:d4:3c:14:e0:a2:2d:53:97:85:45:05:2a:6e:7d:
                    dd:d7:bb:62:08:38:6b:68:a6:9d:9f:c4:68:49:72:
                    60:fa:fe:aa:8b:bc:92:d3:fd:d6:c5:a7:16:4c:d2:
                    87:3c:0e:11:c9:46:99:ee:78:22:85:f2:79:38:43:
                    0b:4f:7a:70:64:44:d4:7b:aa:3c:14:77:c9:4b:4b:
                    6c:38:0e:c7:f8:08:f3:db:0b:06:6c:3e:14:59:1c:
                    77:24:ec:37:b9:60:e8:3e:26:10:d7:27:b2:a6:5a:
                    cf:d0:8b:7e:b5:08:3b:1c:07:aa:90:f5:9c:c5:14:
                    f8:6c:64:16:a1:23:86:19:a5:d8:fa:b5:a6:f4:4b:
                    2c:91:5c:92:b9:90:da:e0:e0:b2:72:e9:cb:4a:cb:
                    da:a6:a8:01:91:47:53:d7:f5:dc:7c:be:48:b9:f5:
                    8f:f4:2b:d1:35:09:48:28:f8:c6:90:bf:e8:fe:6a:
                    a6:45:e3:32:aa:48:ec:49:f7:37:f8:33:94:fb:71:
                    3b:16:23:0d:ad:c2:44:a1:33:9d:8f:c9:b1:43:6d:
                    d5:26:0e:59:2d:91:7d:4b:7f:70:89:3d:aa:1a:7e:
                    36:40:56:1a:6b:60:ba:af:52:7a:91:91:a6:7d:19:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:75:72:DD:D3:5F:AA:D6:E8:AA:90:D0:17:A0:7B:D6:DA:F3:D3
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b5:5b:9d:9b:db:89:23:41:bd:2e:83:d8:08:30:44:99:a0:
         a4:51:72:a1:e7:7a:cb:aa:1e:f5:9f:f5:64:22:82:80:47:68:
         d2:56:04:3a:f5:4a:49:34:eb:66:65:a9:3f:92:0b:ba:7a:c5:
         01:bb:92:75:2b:97:30:da:c8:f2:9b:0c:87:8f:f5:6a:1f:44:
         56:fc:81:0f:00:c2:ff:79:19:cf:fd:e5:d3:cc:08:9c:c7:43:
         9e:54:e3:f4:8b:d4:4f:8a:06:45:3b:c7:dd:81:b1:16:3b:be:
         5e:9c:c9:ac:b5:f0:01:6d:cb:fa:0e:53:d2:f1:e0:9b:a7:a8:
         2d:8d:53:b9:74:f9:a4:cf:c8:05:d4:ed:89:82:35:77:c9:69:
         e6:97:8a:22:45:fa:7f:2b:83:e7:3d:2f:0e:06:91:69:cb:0e:
         a0:cd:f2:b2:31:ae:1a:81:90:bd:84:b0:01:14:43:37:2f:b5:
         99:09:f6:8e:a7:ec:d1:38:aa:a5:0d:29:5f:aa:c3:d0:8e:1e:
         fa:c8:0c:cd:4b:70:f0:a3:66:1d:97:ae:bb:fb:8a:51:f0:a4:
         27:26:84:31:ef:49:d0:c1:05:cd:9c:bc:42:29:bf:ef:8d:e8:
         03:42:ee:f7:35:3d:f7:97:a4:48:51:1e:08:40:d1:5b:ea:39:
         91:e9:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:14 2025 by rpki-client