Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft
File:                     AC9C321F62E4F984FA376FC446EDB27A235860FC.mft (raw, json)
Hash identifier:          YADvzR2lsPVSYIj3UQal6B4rp8dc0lJCprh60dkjQhc=
Subject key identifier:   B1:10:5A:26:7F:22:8C:F8:76:02:60:D8:C1:8C:86:EC:B3:0A:6F:82
Authority key identifier: AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC
Certificate issuer:       /CN=AC9C321F62E4F984FA376FC446EDB27A235860FC
Certificate serial:       66AED0A75B4791228704EACE3C932B6D2D3661FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft
Manifest number:          0131
Signing time:             Sat 23 Aug 2025 17:13:41 +0000
Manifest this update:     Sat 23 Aug 2025 17:08:41 +0000
Manifest next update:     Sun 24 Aug 2025 19:12:41 +0000
Files and hashes:         1: 323830343a383563633a3a2f33322d3438203d3e20323732363031.roa (hash: XK8gG2MoZUzZDNRypc0/+NDptZEJBoOxLDViPs/6X7M=)
                          2: AC9C321F62E4F984FA376FC446EDB27A235860FC.crl (hash: 8JXdWxVwFMS26006Dt6R4ck4taSIwkJkCCGGzPrze9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.crl
                          rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ae:d0:a7:5b:47:91:22:87:04:ea:ce:3c:93:2b:6d:2d:36:61:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9C321F62E4F984FA376FC446EDB27A235860FC
        Validity
            Not Before: Aug 23 17:08:41 2025 GMT
            Not After : Aug 24 19:12:41 2025 GMT
        Subject: CN=B1105A267F228CF8760260D8C18C86ECB30A6F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:7f:f8:35:ba:2f:18:95:9d:2e:56:8b:e3:
                    ab:67:5e:c6:98:38:8f:3b:64:80:28:01:92:7e:63:
                    60:da:58:64:c4:ba:18:f8:3b:99:df:08:a7:7b:31:
                    d4:a9:48:9f:31:95:35:ee:91:c9:1b:55:f2:b4:6c:
                    f1:2d:cf:63:10:5b:83:31:dd:8a:db:ac:54:e9:18:
                    cf:90:a5:0f:3b:b1:28:08:f0:af:ea:cf:df:83:17:
                    51:26:fc:88:82:0a:42:41:a8:a4:70:ea:9d:10:ac:
                    82:b0:07:0a:10:ef:95:b3:ea:12:b1:4c:70:22:df:
                    a1:a2:89:13:8e:d7:e4:6a:ca:00:3a:87:13:68:c8:
                    89:7b:44:c4:67:f9:e8:93:01:df:cd:13:5c:50:00:
                    6a:15:e1:bd:84:c4:e5:be:98:0b:c0:8a:f9:36:9a:
                    12:8e:d0:57:97:64:ac:bb:10:47:72:67:e6:50:0f:
                    e8:f1:07:c7:b7:87:3e:21:89:d1:9b:6b:77:fc:5c:
                    84:43:89:4c:fe:0f:27:ad:60:8c:76:11:c9:99:b0:
                    dd:31:46:08:64:3f:38:5b:2e:d7:75:0f:f9:04:a0:
                    19:25:55:c8:7c:14:1e:c1:b0:3d:58:05:ba:0b:b3:
                    02:b5:a1:d0:7b:e4:93:bd:fd:46:0b:72:bb:17:c0:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:10:5A:26:7F:22:8C:F8:76:02:60:D8:C1:8C:86:EC:B3:0A:6F:82
            X509v3 Authority Key Identifier:
                keyid:AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:17:04:b9:4f:6a:42:3a:60:3f:fa:02:5a:8e:29:6b:ac:
         ee:4d:07:74:ca:73:2c:1c:a7:3a:2c:aa:77:7c:75:19:0e:f0:
         21:8b:f8:0a:a6:de:01:1f:a4:5d:2e:28:93:7b:15:97:bc:a5:
         59:d7:94:2c:0d:58:a5:50:df:32:b5:30:5d:4e:98:4b:91:20:
         de:94:a5:0f:47:87:09:db:b6:ab:d9:29:29:73:6b:d2:16:ab:
         95:cd:0a:4e:97:1a:9b:22:5f:d3:00:1c:03:a3:96:3e:07:6e:
         a1:3a:25:ff:03:e6:a2:77:12:af:ba:31:b2:71:0d:f0:eb:90:
         f3:6c:2d:10:0d:30:e2:42:62:5c:78:09:29:64:18:3d:a7:e0:
         54:c0:9d:94:0f:1a:ca:ff:31:53:14:ef:c7:f8:81:29:f1:67:
         92:a4:12:4a:c6:60:65:71:57:2c:a7:9a:b7:98:73:9f:3a:f4:
         f1:0c:63:72:83:80:17:98:43:44:66:d9:11:5a:9d:e9:fc:40:
         2c:b2:66:1a:41:ef:4f:c8:c5:a7:e1:a4:fe:c4:b7:b9:71:30:
         40:a5:44:91:29:2a:1d:16:18:a6:d7:11:5f:6b:f1:f7:95:4e:
         03:41:cd:1d:5d:10:1c:40:25:f8:b8:f5:ce:26:48:d3:60:46:
         4c:6b:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:56 2025 by rpki-client