Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
File:                     2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json)
Hash identifier:          1hcCYnH1X660EHPbnKtUf6U2wxNu0e8VaTjO2Ldvb5w=
Subject key identifier:   FE:43:EB:E8:70:0B:F8:74:04:F0:CC:77:48:05:D1:13:3B:14:E2:19
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       638E2008CCD6106D252A6CBB9EE2C125D2836DAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
Manifest number:          0298
Signing time:             Sat 23 Aug 2025 07:26:09 +0000
Manifest this update:     Sat 23 Aug 2025 07:21:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:44:09 +0000
Files and hashes:         1: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: P9JtrAj/Iv8t/ozw5Qf/JloeHMHYd2JiQ8bIckDIsAY=)
                          2: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=)
                          3: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
                          rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8e:20:08:cc:d6:10:6d:25:2a:6c:bb:9e:e2:c1:25:d2:83:6d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Aug 23 07:21:09 2025 GMT
            Not After : Aug 24 10:44:09 2025 GMT
        Subject: CN=FE43EBE8700BF87404F0CC774805D1133B14E219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:4e:c6:08:0b:37:87:d9:0c:07:5f:f2:6b:
                    cc:c6:76:dc:dc:73:19:97:91:66:5d:fb:bd:c1:b9:
                    6b:00:f1:20:8d:66:bd:43:ef:30:04:a8:be:17:47:
                    b4:b3:9f:80:78:7e:95:43:2b:e8:8c:5b:18:a8:6c:
                    96:9d:a2:f7:5d:6b:49:9f:d3:a3:cc:d4:07:1b:10:
                    8d:cf:a7:c4:80:84:93:cb:5a:7d:75:7c:eb:e0:8e:
                    a6:53:08:d7:68:61:64:46:fb:5c:62:6b:c6:e0:da:
                    24:00:11:f5:13:2f:15:eb:ca:42:aa:34:01:67:67:
                    a2:3e:42:5d:c0:d6:0c:54:74:c5:d9:99:b0:80:b5:
                    61:ae:86:1a:09:a1:2d:a9:2d:b6:d2:a7:52:c5:0e:
                    12:6a:b0:b6:18:c5:ac:92:e9:da:0a:c6:67:3e:5a:
                    be:44:3a:6c:74:d4:11:98:38:04:96:09:fb:e7:23:
                    11:88:86:0f:88:0c:4d:8e:51:76:df:89:df:7e:9c:
                    1e:d3:ad:b3:ff:fa:e6:40:ea:a6:be:8c:22:a3:32:
                    e8:9f:ca:d0:c5:a1:5a:18:68:63:68:83:eb:b9:53:
                    a1:cf:f9:14:f8:fd:e3:ee:55:a7:3b:97:cd:a6:f8:
                    ac:61:ab:b1:0b:9d:71:20:07:95:f7:18:c0:37:a5:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:EB:E8:70:0B:F8:74:04:F0:CC:77:48:05:D1:13:3B:14:E2:19
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:96:80:a3:3e:aa:96:7b:76:a2:91:c1:47:dc:df:51:45:03:
         52:74:0f:23:31:45:e0:fc:72:88:7a:67:19:0c:69:32:0f:fb:
         4f:1c:fc:98:8e:64:d1:28:9b:c8:5c:d1:63:56:1e:4f:29:cd:
         12:bf:7d:d7:04:9d:9e:ca:b8:8c:db:7f:e7:1a:04:0f:72:33:
         94:b0:a4:2b:3c:55:aa:d7:20:67:58:72:08:36:4f:aa:35:9d:
         47:bd:cc:a5:27:2e:cb:fe:df:30:68:f7:1a:34:ae:25:82:34:
         43:e4:31:41:ea:4a:6f:67:c3:06:2d:03:85:2e:7e:90:80:14:
         d8:44:21:7c:cf:3a:65:e8:41:70:f7:18:03:dd:63:a6:a3:ce:
         2d:5f:03:f5:66:9b:40:f8:c2:cc:f8:73:07:f8:5a:1c:de:41:
         37:5d:5e:17:6b:c1:fe:79:59:8a:66:58:eb:84:39:1f:3a:c5:
         e0:05:1b:30:57:92:13:9f:34:c5:c7:8b:0a:4e:16:ff:08:bd:
         34:27:e1:44:59:87:25:fc:fa:ce:45:75:d4:1c:44:fb:e5:f7:
         9c:ff:0d:f9:06:37:72:97:99:dd:3f:f9:df:5b:f0:c8:80:ba:
         13:0b:e8:10:61:5c:48:6c:28:b0:94:f4:3b:e9:5e:1d:9c:d9:
         3b:e9:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:44 2025 by rpki-client