Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
File:                     4D2990768E393F68FA14BF3F1F2B973208903FBC.mft (raw, json)
Hash identifier:          F8D1ArSgxNVtkffecVj5BtwCCW8IFwq+g7NqYjHMR3Y=
Subject key identifier:   E2:E8:3A:DB:64:7E:6E:C0:48:9F:49:D7:AE:04:12:76:3A:20:0C:93
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       035822A217F43EFC7F872E4954D039775FD905F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
Manifest number:          0165
Signing time:             Sun 10 Aug 2025 06:17:55 +0000
Manifest this update:     Sun 10 Aug 2025 06:12:55 +0000
Manifest next update:     Mon 11 Aug 2025 06:36:55 +0000
Files and hashes:         1: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=)
                          2: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: /4kndRTLPJ7z6o8eMCZNO62enqlcrNH71OhR/rdSbZ4=)
                          3: 4D2990768E393F68FA14BF3F1F2B973208903FBC.crl (hash: udrJawRoVQQ4yWB0E3Efa+xGE6kijHvnDh/7PxAvKcw=)
                          4: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=)
                          5: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=)
                          6: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=)
                          7: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 06:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:58:22:a2:17:f4:3e:fc:7f:87:2e:49:54:d0:39:77:5f:d9:05:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Aug 10 06:12:55 2025 GMT
            Not After : Aug 11 06:36:55 2025 GMT
        Subject: CN=E2E83ADB647E6EC0489F49D7AE0412763A200C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:93:9c:fb:4a:ce:60:01:5e:0d:72:d9:97:
                    c7:2e:b3:02:5c:54:28:9a:3e:bd:ac:11:7c:0d:59:
                    44:33:27:68:23:da:50:73:8d:6c:39:3c:84:e0:2b:
                    1b:66:49:79:84:17:27:4f:7d:ae:bc:9b:12:bf:21:
                    6b:39:77:db:1a:99:68:60:4a:0f:eb:74:df:c1:36:
                    33:20:e1:f6:73:39:e7:46:28:66:8c:af:79:07:6f:
                    14:08:25:5a:e8:b6:6b:dd:1d:ad:bb:c5:d5:f5:08:
                    12:32:f3:1b:40:92:b4:f5:bc:2d:71:d0:9f:21:1b:
                    18:2d:b4:66:b9:32:ec:77:78:b5:57:64:6d:b6:eb:
                    f0:e1:5c:36:df:e6:0c:65:e9:95:4b:73:34:bb:32:
                    4e:68:0b:f5:de:94:1d:a9:4d:27:41:ea:70:99:e3:
                    93:1c:19:5e:d7:9f:77:7d:38:dc:6d:04:44:02:91:
                    79:62:79:b1:c9:f7:b1:1a:f7:c4:f7:17:7a:0f:ca:
                    fe:ca:80:22:5e:fb:2c:8c:dc:05:9d:e8:af:b3:5f:
                    6e:99:18:7f:52:21:3f:0e:75:1a:d3:d0:7f:55:85:
                    f2:ab:12:f5:b2:a3:98:ea:3e:76:ff:0a:14:1a:4c:
                    36:c3:d4:3e:a0:36:bd:40:ae:24:aa:97:e7:00:27:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:3A:DB:64:7E:6E:C0:48:9F:49:D7:AE:04:12:76:3A:20:0C:93
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:35:d4:9f:d0:f7:51:f2:c4:cb:1c:8c:70:ea:ee:58:b4:a3:
         6e:0b:81:94:cc:85:1a:59:7d:df:49:27:5d:81:08:0a:ce:9d:
         9b:6d:06:c0:5f:f2:c1:21:1d:0f:e4:98:6f:a5:fa:82:07:5d:
         fe:92:db:52:67:54:e4:23:fe:d8:71:89:97:82:d7:ec:9f:be:
         81:36:fa:84:b5:31:90:7c:92:69:c7:f2:bc:88:d2:6f:86:42:
         ae:7e:62:1a:6e:df:78:8b:f3:0e:28:68:0e:d6:54:58:4c:15:
         fa:85:5a:0f:5a:f7:cc:3c:bd:7e:12:9b:94:82:ab:77:71:cd:
         e0:65:73:f9:cb:92:1b:a7:e0:84:1e:db:90:49:ad:85:a5:d8:
         b9:15:88:68:2f:33:52:4d:f5:2f:f1:5b:76:67:2a:82:6a:8b:
         c4:b5:f3:37:19:32:ef:c8:48:bf:c8:97:6c:0c:2f:96:86:50:
         4a:dc:82:af:51:c1:95:00:84:51:2c:31:d2:d8:81:25:b1:fc:
         e7:42:0e:c4:ce:1c:0d:a4:1a:c1:04:c6:59:a9:f9:36:a2:33:
         16:79:d9:4b:99:61:6e:b1:be:27:77:3f:d5:ee:c8:a9:b6:c4:
         0d:e1:37:82:ac:40:b8:0c:09:e4:2c:64:70:ed:13:82:98:ab:
         fb:00:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:37:23 2025 by rpki-client