Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
File:                     85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft (raw, json)
Hash identifier:          eG6AZB55yCPfcUtwmfveuWd+wtA5yvD3Isiva7AeiYM=
Subject key identifier:   E8:94:5A:CB:D4:B6:11:78:2D:45:73:82:D2:64:7B:19:13:A1:77:1B
Authority key identifier: 85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13
Certificate issuer:       /CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
Certificate serial:       393A57E7CA8A623DE2CCDEC2EDF394EABCD2E80F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
Manifest number:          18
Signing time:             Sun 10 Aug 2025 08:18:32 +0000
Manifest this update:     Sun 10 Aug 2025 08:13:32 +0000
Manifest next update:     Mon 11 Aug 2025 10:49:32 +0000
Files and hashes:         1: 3139302e392e3131322e302f32322d3232203d3e20323733363339.roa (hash: J6WUd5glG5jeS4DZU6q2Gm0x+DtQh5cTqGnpPD427IA=)
                          2: 85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl (hash: q3BX9NqYS894Xr4WWEDTy4+QeJx1quI+CwapiAv+wjU=)
                          3: 3139302e392e3131332e302f32342d3234203d3e20323733363339.roa (hash: sUdtxk4NXvoeiaz1NpeACLa7VnhlZiLC62loksRVz4M=)
                          4: 3139302e392e3131352e302f32342d3234203d3e20323733363339.roa (hash: eqBr6Cm1ax/yL+Uy2XrhorwsBjltmjJiRD19QytKKwY=)
                          5: 3139302e392e3131322e302f32342d3234203d3e20323733363339.roa (hash: N8YAVwGqrrgB1Zfeu1c6LlyNKIFRpyxdhrk7duWgKpk=)
                          6: 3139302e392e3131342e302f32342d3234203d3e20323733363339.roa (hash: ed+JbOHBCQsNfsGF/Q7Vz27gIqPQP6fh90KC5vwdhxI=)
                          7: 3139302e392e3131322e302f32332d3233203d3e20323733363339.roa (hash: NlDejssKshiP6MJc/8yd5rGqPTlJLYt67T63Q4B8Z8k=)
                          8: 3139302e392e3131342e302f32332d3233203d3e20323733363339.roa (hash: DnmQJ9O0F8bbtO3b05M/USiBRzBFbweyiWzexHmh2sw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl
                          rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3a:57:e7:ca:8a:62:3d:e2:cc:de:c2:ed:f3:94:ea:bc:d2:e8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
        Validity
            Not Before: Aug 10 08:13:32 2025 GMT
            Not After : Aug 11 10:49:32 2025 GMT
        Subject: CN=E8945ACBD4B611782D457382D2647B1913A1771B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:3e:fb:5a:e7:ee:fb:75:e4:8a:f0:a8:75:
                    23:87:71:b3:f7:11:40:b3:b0:06:57:7b:c8:a7:83:
                    9f:e1:02:d3:1a:05:ab:8b:eb:c5:c5:dc:70:79:98:
                    b7:d1:af:57:34:18:63:9d:a3:39:bb:f9:d8:74:9e:
                    ba:2c:bb:e2:41:96:39:06:fb:5e:2f:17:c5:e5:9e:
                    00:f8:4f:76:76:50:4a:db:37:3a:39:aa:4f:89:72:
                    8b:e1:38:f7:62:53:1f:25:f5:3a:76:76:eb:6c:00:
                    1d:a7:04:6e:5d:5b:c7:34:e3:a7:1e:d4:f5:5c:d5:
                    5c:2b:ba:86:b6:b6:67:05:b6:c9:f7:e8:b3:36:d3:
                    16:be:6c:a6:cd:76:d6:73:f5:ac:0e:94:57:60:f0:
                    33:88:ea:92:dd:df:46:e6:f4:67:19:bd:29:47:a8:
                    84:8c:e2:37:ce:5f:0d:e6:c1:bf:e0:fb:ff:e7:04:
                    41:46:15:81:9a:b9:a3:86:f8:9a:3f:43:06:a9:27:
                    20:c1:ea:ba:62:a9:21:5d:97:4a:22:71:7e:fd:d4:
                    6f:06:a2:f9:ac:6c:43:03:2f:cc:27:01:65:dd:18:
                    a2:4b:a0:63:39:ff:f9:00:ea:66:bd:a5:76:0e:af:
                    c1:4b:12:d3:14:02:72:53:54:04:c3:30:cd:00:c2:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:94:5A:CB:D4:B6:11:78:2D:45:73:82:D2:64:7B:19:13:A1:77:1B
            X509v3 Authority Key Identifier:
                keyid:85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:18:03:8e:cb:35:27:d8:f9:e4:1d:d1:4a:dc:4d:ce:94:87:
         a4:0a:b6:09:1a:f0:d6:69:85:59:f2:41:50:a5:c7:e4:cf:6c:
         f0:c3:15:1d:c8:70:53:16:09:7b:67:19:5c:85:5a:74:a4:e4:
         81:04:6e:27:8b:39:d7:53:ab:24:2a:e8:a4:31:9f:ba:09:d6:
         6e:3f:5d:9f:63:02:77:49:65:69:6a:5c:95:3d:59:0a:1f:5b:
         65:57:58:4d:f6:80:86:4c:ba:e0:ca:ef:8b:38:5c:b7:69:94:
         83:7e:ba:61:47:08:c2:96:30:d4:d7:0b:37:83:66:37:c1:53:
         94:bf:bb:69:c1:e8:a4:6e:72:2c:06:e7:ae:ef:de:ab:8e:95:
         bb:89:41:80:d4:34:82:07:00:ea:29:24:be:6f:d7:8c:21:c1:
         b9:b3:13:92:27:e5:40:89:ef:bc:50:fd:f5:c6:c8:0d:95:cc:
         fb:e2:a7:ad:a8:5c:01:10:31:6d:c7:98:cd:6d:31:94:e9:a7:
         70:85:79:ab:99:a0:8f:21:09:f2:d1:7d:86:07:04:90:0f:b6:
         27:18:f8:bc:50:12:4d:b3:15:eb:c2:02:96:af:b0:2f:98:5e:
         f5:d1:2b:98:99:d7:45:0a:be:b8:ac:ad:a0:4f:9a:6f:05:79:
         3f:c1:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:17:51 2025 by rpki-client