Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
File:                     27703D671AE6A9B45D2221CB442F8C340216A354.mft (raw, json)
Hash identifier:          aFCsZyH2HkhmxmcYsIhlTBQF4VuznaE56iBaoi+lO8Y=
Subject key identifier:   A2:9A:3E:7E:08:D2:AF:96:98:F0:B8:6F:01:6B:93:93:2F:43:A6:1E
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       6A0C1E09B6A0BF7D824A1AEB089DAEA892CDABA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
Manifest number:          0228
Signing time:             Fri 22 Aug 2025 18:50:00 +0000
Manifest this update:     Fri 22 Aug 2025 18:45:00 +0000
Manifest next update:     Sat 23 Aug 2025 18:59:00 +0000
Files and hashes:         1: 3136382e39302e3139352e302f32342d3234203d3e20323635323831.roa (hash: KB/zrTx0YANgVAsh59FaM3Zpm7Df/anyHlTatA1Qf90=)
                          2: 3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa (hash: IdsmlnUIH4r8p18vC5CqYfDqzhec7kfm76eomhB+HYY=)
                          3: 3136382e39302e3139342e302f32342d3234203d3e20323635323831.roa (hash: fGDxes0tl7nSTJA6RONVGXktPVKvRrrL5n6BSHW7Q60=)
                          4: 3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa (hash: IAaVQ+/TCH4zNzwSm9cewgIAV164mrU9z2ZUbA7SAIc=)
                          5: 323830343a326436633a383030303a3a2f33332d3333203d3e20323635323831.roa (hash: h5V63SbIJgaXMECGURn4WQ0dPdPCTahfUcE79snoetw=)
                          6: 3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa (hash: HfaPHBwMYNwE/IacUsz6F8tLkOAWsRTJdIZRD+n/o0M=)
                          7: 323830343a326436633a3a2f33322d3332203d3e20323635323831.roa (hash: xiPPfby3vjvws7ufFaHsotsYGl24/n3VAs+6mR5KQew=)
                          8: 3136382e39302e3139322e302f32332d3233203d3e20323635323831.roa (hash: 1e3JcsuuS25QC+4B4RA3FFzkqjtQycbqNo021EWU33o=)
                          9: 323830343a326436633a3a2f33332d3333203d3e20323635323831.roa (hash: 2Rr2G1VvmRIlgxXs5A3dxrFG+34LF9NB4ItG/kUqeUA=)
                          10: 27703D671AE6A9B45D2221CB442F8C340216A354.crl (hash: Rh9fV5Dr1onDp4tJB9ti7ENk1Wvpi3fXKa5mqQ7BDVg=)
                          11: 3136382e39302e3139342e302f32332d3233203d3e20323635323831.roa (hash: h5bCNVW0pSGirvyYTKNfPnsZyk0ub/scmuMA+jBfObA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 18:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0c:1e:09:b6:a0:bf:7d:82:4a:1a:eb:08:9d:ae:a8:92:cd:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Aug 22 18:45:00 2025 GMT
            Not After : Aug 23 18:59:00 2025 GMT
        Subject: CN=A29A3E7E08D2AF9698F0B86F016B93932F43A61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:73:ad:a8:13:91:8d:e8:31:1d:84:26:ce:
                    c7:bf:5a:f0:98:07:1a:28:62:bd:47:f4:2c:9e:f1:
                    66:45:89:12:2e:39:08:9c:c2:d6:51:2a:d3:4a:39:
                    88:0f:b0:86:c4:65:6d:c0:7a:d8:7f:9c:fb:c6:62:
                    da:d5:b7:cf:44:31:33:2c:dc:78:cc:25:d2:b4:98:
                    e9:74:f4:7d:0f:79:62:a7:e0:0d:2e:bf:f3:6c:cf:
                    e5:f8:8f:ae:94:b6:68:33:48:ad:bb:58:47:18:d2:
                    b3:42:f1:e5:6e:4a:18:eb:5c:e4:37:61:30:44:9f:
                    89:a5:e7:f7:39:c2:70:0e:9f:09:35:e4:9a:af:ba:
                    71:62:b7:5b:59:0d:2f:be:75:6c:f9:a9:6b:76:e0:
                    b8:11:f2:7b:b1:d3:38:19:15:d7:d7:8e:91:07:e3:
                    d5:56:3c:86:a6:7b:18:74:3e:23:b6:fb:07:1a:0b:
                    ae:31:13:31:49:ce:d5:d8:fc:7b:e8:ac:b1:5f:1b:
                    3d:f7:10:50:b7:ff:68:ec:5c:a7:b0:51:9c:66:0f:
                    4c:29:bf:f7:c3:4c:d5:a2:e6:dd:8d:14:c1:60:13:
                    36:66:e7:fe:4b:d8:fe:48:d3:e1:fc:ef:d0:ee:40:
                    3d:ea:f7:0b:53:37:cd:35:a6:35:e2:aa:e2:da:f7:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9A:3E:7E:08:D2:AF:96:98:F0:B8:6F:01:6B:93:93:2F:43:A6:1E
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:da:f2:12:93:1c:8f:74:7d:9b:46:41:a7:3a:52:86:c2:
         bf:f4:27:bd:f4:c8:a2:6c:58:73:7e:2f:a0:8e:52:16:b1:82:
         1c:5c:41:24:1b:5f:20:13:dc:51:78:24:53:ad:12:af:6f:2a:
         d9:4c:d6:ab:34:74:a7:67:25:4a:f8:89:11:de:0b:b3:9d:61:
         53:1d:df:9a:a9:44:cf:09:5b:6f:a3:b5:4c:7a:73:92:7c:a4:
         55:34:0a:b4:50:4a:69:68:d1:86:71:8c:5e:a8:80:44:f5:d2:
         86:1c:40:f2:74:d6:8a:80:39:1b:66:a1:2d:12:4d:44:0b:21:
         40:5d:ba:4e:0e:78:14:33:20:78:86:c8:a4:cf:fb:96:bc:75:
         14:a2:a3:2f:fa:11:43:d2:df:49:cd:dd:90:93:82:c5:d4:91:
         8a:8f:f5:9d:84:34:4b:89:cb:55:46:e9:4d:1f:b0:7f:dc:c0:
         a4:3b:3a:21:81:47:13:59:f6:4b:5c:53:6b:65:ce:72:4e:db:
         6c:0f:48:e1:42:52:b4:b8:da:75:f2:4e:d6:73:37:99:b8:be:
         eb:d1:31:87:73:1a:9b:5d:cf:be:a8:9c:2d:7d:a2:9e:f9:31:
         10:52:44:8a:ae:98:41:49:b3:7b:00:3b:f9:5d:d4:e4:70:e5:
         8c:a4:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:01:54 2025 by rpki-client