Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
File:                     19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft (raw, json)
Hash identifier:          aN9d1sa96juqhXUbNkh2FKoEHmD/OGgniXeUeI5wqS0=
Subject key identifier:   3A:C0:2E:A8:A4:DE:05:3D:57:40:8C:59:4D:20:1B:89:47:9C:F1:98
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       50E790E8819B3ACCD95C644D66D9B2FE2D3D6294
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
Manifest number:          02AA
Signing time:             Fri 22 Aug 2025 22:46:59 +0000
Manifest this update:     Fri 22 Aug 2025 22:41:59 +0000
Manifest next update:     Sun 24 Aug 2025 02:18:59 +0000
Files and hashes:         1: 3137392e36332e32372e302f32342d3234203d3e20323732353534.roa (hash: jK2M3GMi/VaSObbwmp3ZXpVhlBdmLXf26np9omibgfo=)
                          2: 19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl (hash: 13I02465OlBI9YR9FlMHc3jdsmgyOZdgG60lTW4Xd0Q=)
                          3: 323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa (hash: ZnCQ04NjYjZFP4EL93UTYbNmonVLejw8p3gJcJc7zQE=)
                          4: 3137392e36332e32342e302f32322d3232203d3e20323732353534.roa (hash: FmVsNdSPNspmc77PQ+hHMBc4lFSDXeXu/qkM5Dc6sfk=)
                          5: 3137392e36332e32342e302f32342d3234203d3e20323732353534.roa (hash: pxjbZUVFK3thvMtEiArp++enZiQ3XjBPwUeBiAKHHHQ=)
                          6: 323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa (hash: cTWDD1gU6pxlRYr1M2h4g99AKhDApEK0/Nc8dkxvwVc=)
                          7: 323830343a383530633a3a2f33362d3336203d3e20323732353534.roa (hash: ZGmMeMEkOlrlktKXETD4k9r2Jh4FPaAf8e+E5I6zWqA=)
                          8: 323830343a383530633a383030303a3a2f34302d3430203d3e20323732353534.roa (hash: HtNiQW1K5Z1ecM7DwgJ01ui1E5VZcsDHpIhL/nAXZYA=)
                          9: 3137392e36332e32352e302f32342d3234203d3e20323732353534.roa (hash: lyBscb/PSIXRezOFX/FJ3NAHobVgyw+i/xADfbPwvNk=)
                          10: 323830343a383530633a343030303a3a2f34302d3430203d3e20323732353534.roa (hash: bcfLCfr5X25TavDO4m1mUUNsYUhdiks4lLL4G6O+YIo=)
                          11: 323830343a383530633a633038303a3a2f34342d3434203d3e20323732353534.roa (hash: IEMsct5M1957I2kf7o113u0t3SqqctM5WMc+7RV14Ks=)
                          12: 323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa (hash: fBUxNEsPr93iZwo273dchLn0qNTaYLVLKRPQT+/Wk2A=)
                          13: 3137392e36332e32362e302f32342d3234203d3e20323732353534.roa (hash: N8a1UDO7VDQENuA3p0zI8APV3bJRhKMGPfB1N6syJP0=)
                          14: 323830343a383530633a633030303a3a2f34342d3434203d3e20323732353534.roa (hash: GiKa/T0Uvifbl1StF3LZLMME1cVA/LLCvtcYU/c009Q=)
                          15: 323830343a383530633a613030303a3a2f34302d3430203d3e20323732353534.roa (hash: lc6vUR0/LR1ULFEF8pEdXCzqc5f/LZ/yLCmkpDcfeK8=)
                          16: 323830343a383530633a3a2f33322d3332203d3e20323732353534.roa (hash: LhHrVO/GmkzKwkdmDA9p1zeyB5qwzdKsetRDyBK7GWE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e7:90:e8:81:9b:3a:cc:d9:5c:64:4d:66:d9:b2:fe:2d:3d:62:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Aug 22 22:41:59 2025 GMT
            Not After : Aug 24 02:18:59 2025 GMT
        Subject: CN=3AC02EA8A4DE053D57408C594D201B89479CF198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:74:0e:2c:79:58:d2:13:7e:ee:d5:6a:ee:
                    37:ca:5b:53:42:cf:8f:8e:5b:dd:9d:93:b3:d8:d0:
                    cc:bd:56:15:0d:6b:f9:9f:8b:02:68:c0:bc:37:50:
                    a0:d3:9e:93:62:8c:5b:41:51:76:62:81:55:20:c2:
                    82:35:48:91:51:11:1c:7a:b5:b0:43:45:ed:88:ba:
                    70:cc:8a:d8:a4:9c:52:26:25:4f:6a:79:58:43:c1:
                    9b:9a:3f:b6:cd:91:fe:92:a9:51:fb:74:f0:5e:55:
                    ca:14:23:ac:8d:fc:90:63:a6:3f:10:52:36:06:d6:
                    fc:0a:4a:7d:36:b3:53:88:03:bc:e8:f7:a0:f3:0d:
                    81:da:1e:b1:37:7b:32:c6:23:03:da:3a:01:cd:0f:
                    0c:40:d0:e0:b0:b7:cb:d9:69:78:32:df:89:0d:41:
                    38:f1:9a:82:8a:0d:a0:81:4d:df:8e:23:1a:86:7c:
                    29:7f:4f:02:ee:2d:6f:f8:cf:cc:b4:db:37:73:da:
                    a4:41:99:8b:d2:8f:0e:7f:79:38:44:5b:a8:f4:e1:
                    5d:bf:1b:46:e0:44:9a:1e:4a:58:70:d5:6b:3b:cb:
                    2b:72:66:46:79:71:ad:3f:93:8b:5f:58:96:34:0b:
                    2a:a2:b9:90:ca:f6:d8:b4:49:09:0a:39:d3:8f:de:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C0:2E:A8:A4:DE:05:3D:57:40:8C:59:4D:20:1B:89:47:9C:F1:98
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:45:89:a7:2f:ea:0d:29:4e:0d:ab:f0:7a:fd:61:f3:bf:90:
         2c:c9:37:38:a4:40:e1:70:be:e9:86:ca:96:e3:bc:9d:dd:a8:
         01:75:5b:1a:45:76:cf:01:c9:e8:9a:9d:60:1f:1b:b7:af:24:
         22:f7:e6:75:bb:ce:40:12:af:e9:bf:28:10:c0:eb:1e:3e:1d:
         a2:86:de:21:11:d5:97:99:58:25:15:a5:f4:c5:62:99:1a:59:
         22:45:55:52:74:7a:54:b8:7f:7e:45:51:91:36:8d:84:71:94:
         6f:30:0b:e2:79:13:85:43:37:2a:ae:4b:a7:5a:0b:ee:25:27:
         e6:02:04:5e:14:8d:f2:70:74:e1:0c:de:d2:3f:8b:bf:ca:fa:
         04:c0:a4:b7:e7:16:73:67:f4:1d:57:31:d4:cb:41:64:41:30:
         53:0e:01:f9:e3:01:d5:1a:04:22:b8:5a:f0:73:96:ca:5a:a1:
         a5:a1:5e:62:86:d5:93:2b:a8:13:ee:50:41:1b:05:4c:71:e6:
         ef:90:76:72:12:0b:e4:de:6d:32:c8:d1:36:c6:56:a7:d9:18:
         3f:4b:4d:03:da:d0:45:a6:0b:34:ee:0c:ce:f7:66:0a:3e:f6:
         43:59:91:ad:ca:41:9c:1f:70:da:16:d1:79:16:e3:59:71:a2:
         db:ec:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:58 2025 by rpki-client