Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
File:                     9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json)
Hash identifier:          maTkxgZ5CK7qA8+krGO+ZYna7k9f42KWHpmZo47r/m8=
Subject key identifier:   6B:97:3E:AF:8A:2B:EB:A3:7E:BE:FF:8E:24:09:AD:35:DF:CE:13:90
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       59746ACCE95D3082A7F29382423EAEDBA9CD5CFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
Manifest number:          02C4
Signing time:             Sat 23 Aug 2025 12:21:51 +0000
Manifest this update:     Sat 23 Aug 2025 12:16:51 +0000
Manifest next update:     Sun 24 Aug 2025 15:38:51 +0000
Files and hashes:         1: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: fjUq+2OEZ2tApMzj288/NKrvwEiH+6RX3sAnPykGFRs=)
                          2: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: S3oDmDxZ7u+pQWr3Vaeife2NmnFlhMzIb0DSWDNK+gs=)
                          3: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: Op1QUlbs1kMgDUhfRTkD0khQVu8yE34ODvSUQUBmo3Q=)
                          4: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: 8her+PoAT9avPWWQK9qhm9DUMHGf0Ur31Z2fvvlEG+w=)
                          5: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: gLs1P9X81n1VFfuY9I9DWXvqDOQ8Y2hZzFOcfoQ0ohc=)
                          6: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: qeJpzQeOLKkwOi3JlBWrssz8TP7xi7dkX2rBNdr0I2c=)
                          7: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: VizvqRIuYKfkI4s8BEKfvxZE9y5806w4B0z2gcdiGkE=)
                          8: 3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa (hash: afiDgNmjYoTHl9tBgKdwse060m18ExwL0lIq/AJdzls=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:74:6a:cc:e9:5d:30:82:a7:f2:93:82:42:3e:ae:db:a9:cd:5c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Aug 23 12:16:51 2025 GMT
            Not After : Aug 24 15:38:51 2025 GMT
        Subject: CN=6B973EAF8A2BEBA37EBEFF8E2409AD35DFCE1390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:fb:55:44:c5:f2:79:78:02:41:55:9b:ac:
                    5b:40:60:79:19:ce:e4:d5:06:e4:a9:c2:58:5b:f0:
                    b4:06:6f:5a:f5:37:7d:c1:1e:f4:46:06:95:67:5b:
                    f7:83:ec:63:a0:81:46:8a:b6:56:9f:0c:24:46:dd:
                    9f:9f:50:d9:64:a4:1c:8f:6d:42:d5:85:ea:93:52:
                    8b:0d:47:04:27:69:41:6f:ae:5b:11:9b:4d:8d:d4:
                    d5:ee:26:4d:c5:f9:cd:40:70:be:0f:bb:3b:40:fd:
                    53:8e:cd:9b:3e:62:d5:e7:de:a9:2c:03:b0:7c:d9:
                    95:f3:06:15:c6:fe:35:39:57:89:a4:8b:18:f8:9a:
                    7a:db:f0:4f:4a:2b:cf:29:0c:62:db:e0:66:6b:94:
                    6b:f7:22:8d:55:df:30:e4:d1:10:bf:60:01:b7:27:
                    43:e6:54:98:80:d1:74:af:02:6c:84:aa:f5:68:62:
                    8d:d0:e7:a3:74:4c:59:23:ff:0f:d6:f0:70:1e:64:
                    48:4b:86:c5:68:e5:dd:52:52:99:a5:28:dc:84:42:
                    cf:35:51:08:4e:3c:f1:5b:4b:b7:5e:4d:ec:de:3a:
                    d6:17:ee:bb:96:be:37:6c:b9:8f:31:26:77:a8:f8:
                    52:63:0d:9c:0e:25:2f:85:bc:b7:d4:c6:60:6c:a0:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:97:3E:AF:8A:2B:EB:A3:7E:BE:FF:8E:24:09:AD:35:DF:CE:13:90
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:29:14:ac:92:d9:7c:0c:be:7f:ae:4f:49:a8:8e:cb:da:
         e3:f9:06:8f:c4:e5:0c:b2:95:dc:84:e6:bc:0e:b1:37:3c:8d:
         ee:1d:3a:28:6c:a7:79:ea:4a:e0:c7:b4:41:ea:45:94:7f:c5:
         70:73:b2:e8:7d:fa:65:ba:b5:1b:fd:e7:e4:5d:c2:ad:c4:14:
         69:d7:6c:b1:a4:47:b3:73:19:6a:fa:c4:81:fd:21:7e:21:48:
         b1:7c:2f:d1:2e:35:8f:03:41:51:94:70:c8:6d:af:0d:2f:da:
         c0:16:e0:a4:8e:e6:f9:8d:19:37:55:a4:41:b3:58:f0:e1:00:
         be:6f:c1:05:c5:dc:cc:57:d7:26:0a:73:5f:b8:d5:f5:bd:4b:
         99:ee:a3:93:5b:ad:62:d8:8f:f8:64:74:ef:08:48:a3:a4:21:
         6b:23:d7:cb:d7:de:13:56:05:c5:80:36:02:d3:90:7b:0a:20:
         71:31:60:6c:90:f6:d3:50:3d:ea:72:b4:9f:23:65:2b:24:22:
         57:22:fa:be:bf:f6:88:5c:e5:06:b9:f8:17:87:77:dc:ed:d6:
         b4:80:71:41:99:7a:63:d3:13:07:78:82:f1:bc:83:22:2e:5a:
         92:6e:b6:64:ca:a9:62:05:fe:a9:5b:95:ae:51:4b:99:40:af:
         90:b9:d9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:41 2025 by rpki-client