Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File:                     A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier:          YNdgEvi1kwmkztmpxTdmtBx8Z6xMncqYbztsMlTdP98=
Subject key identifier:   4A:8F:03:D8:98:80:D8:0B:DD:3F:FB:BD:DB:8D:63:1C:93:1E:47:4E
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       3E43332E9DBE1302F67EBDEFDB70C938B60D71FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number:          02A3
Signing time:             Sat 23 Aug 2025 20:01:28 +0000
Manifest this update:     Sat 23 Aug 2025 19:56:27 +0000
Manifest next update:     Sun 24 Aug 2025 22:38:27 +0000
Files and hashes:         1: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: 2ZPeU9OVrxwtDSYqKVwnhOIFYK55B9uLTCmnmIW9gtw=)
                          2: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: hPkw1ttlYJ42cUc0Dp0zOZqoQc0JKu0HxxZ15u/LszY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 22:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:33:2e:9d:be:13:02:f6:7e:bd:ef:db:70:c9:38:b6:0d:71:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: Aug 23 19:56:27 2025 GMT
            Not After : Aug 24 22:38:27 2025 GMT
        Subject: CN=4A8F03D89880D80BDD3FFBBDDB8D631C931E474E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:d2:1d:30:d2:98:45:46:da:81:bb:64:9c:
                    a1:66:3f:78:01:ce:f5:d8:2b:68:46:c6:4f:88:a1:
                    da:65:b6:b9:aa:24:6f:e9:02:1b:73:21:04:76:fb:
                    fb:0b:7c:e0:f2:f6:e9:91:63:f6:84:6e:30:77:58:
                    b3:66:e8:46:a7:14:2f:95:63:98:91:57:4f:16:b8:
                    2d:96:c9:73:4c:d2:3f:21:26:5f:c9:19:f2:5b:d1:
                    c4:c5:d9:4e:f4:51:bf:45:68:28:e0:8f:74:9f:84:
                    e1:bf:cd:6f:87:da:fe:86:8a:25:36:b8:e6:e8:78:
                    22:67:d6:f5:6a:2c:55:16:17:31:58:e0:99:67:91:
                    2c:a0:08:c8:4d:ff:d0:13:b1:f1:aa:72:eb:8e:01:
                    7a:10:16:bd:cd:1d:9b:37:ee:ab:22:6e:d2:b4:57:
                    df:1b:59:08:d0:45:7f:6d:49:b8:2d:c4:d1:da:c5:
                    81:5b:00:53:f6:e1:04:98:90:64:e7:36:6c:69:ed:
                    cb:ae:da:60:56:1f:25:ed:a7:06:31:22:27:17:ec:
                    f2:4e:f4:a9:76:17:c5:8f:de:2a:94:ff:3d:5f:8c:
                    eb:f7:31:88:2e:f4:a3:e3:d0:f5:5c:1a:37:20:cc:
                    9b:ca:61:d0:d6:8a:1a:4c:8a:3e:fc:76:86:31:5d:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:03:D8:98:80:D8:0B:DD:3F:FB:BD:DB:8D:63:1C:93:1E:47:4E
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:35:14:6a:ca:ea:11:a1:07:8c:1f:96:5b:3c:c9:e5:7c:6a:
         a6:9d:95:b9:15:8b:3f:da:96:55:24:e5:6b:41:f5:0f:ae:3c:
         d5:88:94:6d:78:38:8d:97:d2:1d:3e:bb:46:8b:fb:dc:21:a1:
         07:72:2d:29:1d:5f:19:07:4d:3f:7c:34:c9:ab:7f:2b:6a:83:
         6c:f2:a8:8d:b1:66:11:f4:21:bf:73:74:67:06:f9:e6:2a:10:
         a8:9d:b3:41:64:f4:99:1f:d2:cb:72:91:ea:d1:07:c5:bb:75:
         5b:34:c4:38:bc:99:28:da:d4:8a:bb:05:81:de:81:2a:94:25:
         76:56:e9:71:9d:77:43:ad:72:a8:63:fa:b9:cd:1e:bc:15:76:
         a1:b8:59:88:3a:de:cc:0a:a9:8f:95:35:53:76:8c:57:dd:51:
         93:ee:0e:c1:9a:7b:f7:58:45:52:2a:35:41:c5:13:8d:1f:32:
         db:e7:34:ed:25:7b:cc:25:48:08:82:34:2e:98:7f:29:44:0b:
         4d:58:61:d9:d0:19:45:40:74:06:8d:16:38:5f:88:a7:6e:b9:
         50:dc:9f:5d:0e:0f:58:a6:96:92:e9:ca:79:21:58:3b:16:7c:
         80:60:d3:eb:92:97:0b:da:61:b3:9e:53:ba:cb:d1:cb:ae:32:
         51:b2:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:34 2025 by rpki-client