Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
File:                     AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft (raw, json)
Hash identifier:          LcqdbmMKcab16swwVC2M8JQBZpmqk2KQcOnFVTagzBQ=
Subject key identifier:   97:1F:67:3F:7E:75:60:D2:1F:7D:41:A2:08:2D:A6:4E:B2:5C:66:7E
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       225E1B93CF6C17A0967268F757FE77E76D476E52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
Manifest number:          0291
Signing time:             Sat 23 Aug 2025 08:09:21 +0000
Manifest this update:     Sat 23 Aug 2025 08:04:21 +0000
Manifest next update:     Sun 24 Aug 2025 08:38:21 +0000
Files and hashes:         1: 3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (hash: UvH9nIlLV7MTTlk+ySp3aQIuOQfzxZDqD2RXeggUE+U=)
                          2: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (hash: +vkDLgW06ADX84gA1CLRdVqziUPHQH1KnbJn/VuJnSU=)
                          3: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (hash: JEf8pXy01p6LMl3AMIH7leZQ45M0qwFi0UCbJ3ks1zQ=)
                          4: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl (hash: arsMdtjhG8/XzZRKdWZem+mGCILyL57xE/j/wa0lZGw=)
                          5: 323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (hash: NiYQ1Oj4jlQxAf7CG9stE44f6zRfyXp+SMr92oO0Sk4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5e:1b:93:cf:6c:17:a0:96:72:68:f7:57:fe:77:e7:6d:47:6e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Aug 23 08:04:21 2025 GMT
            Not After : Aug 24 08:38:21 2025 GMT
        Subject: CN=971F673F7E7560D21F7D41A2082DA64EB25C667E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:a6:15:52:aa:be:4a:84:9e:00:7d:b0:8f:
                    ce:e3:6c:7d:79:8b:80:ed:9b:09:7d:2e:b4:24:48:
                    a4:58:07:03:d8:da:ae:2a:78:6b:bc:d7:22:3a:4e:
                    ce:18:4b:b7:14:01:d1:8f:7d:1b:bd:2a:5f:97:a7:
                    01:cb:d4:9c:6b:58:5f:a3:c4:ae:73:fd:df:68:ef:
                    ae:c7:d7:60:e1:6f:29:59:af:2d:5c:4c:37:c0:67:
                    ac:3e:a9:26:cc:bb:35:6a:99:26:6c:1a:07:8c:48:
                    80:f6:d1:ec:90:77:e8:30:82:f0:e6:77:bd:93:19:
                    da:ad:7d:ae:0e:3a:10:c6:63:cf:98:12:e9:14:0a:
                    c8:50:68:12:ba:b8:87:dc:1d:01:19:e8:a2:e0:6c:
                    07:94:dd:d7:47:b1:62:b4:b6:25:fd:2f:35:5a:95:
                    8a:36:63:8f:9c:27:5a:56:78:71:2b:b5:41:19:39:
                    b8:bb:e9:3f:e8:6a:cd:55:1d:8a:a6:5f:5d:50:e2:
                    cd:c2:01:95:cb:b4:e3:f9:55:8d:34:7a:e1:54:5b:
                    c9:ef:53:d7:b3:62:b1:66:01:2f:80:3a:85:36:62:
                    de:0d:54:cc:9e:e3:08:0c:a9:b6:49:ed:81:84:bb:
                    ea:22:53:0e:9b:51:ec:cc:7e:db:99:fc:aa:3b:ae:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1F:67:3F:7E:75:60:D2:1F:7D:41:A2:08:2D:A6:4E:B2:5C:66:7E
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:68:8d:6e:c0:06:ff:30:69:83:68:6e:7e:00:77:22:40:
         bd:68:50:ef:9a:24:3c:2b:d5:9d:76:97:05:fd:12:6a:80:03:
         8a:83:39:14:e0:9c:76:4c:10:7a:43:73:d0:7d:36:30:88:20:
         55:ea:e5:04:a7:bc:fb:ee:d3:6c:19:31:32:54:93:de:18:8f:
         c0:85:b9:0f:aa:aa:08:37:1e:86:81:05:ab:66:4e:76:7e:6a:
         38:a4:83:1e:6e:91:39:64:e7:99:5a:20:93:08:44:86:39:6a:
         44:70:64:25:c7:ce:cb:f5:cc:26:ed:55:83:5b:84:6c:2e:55:
         81:ed:e0:25:d3:38:5c:59:9e:02:63:d7:77:ea:39:45:c3:93:
         27:12:eb:58:f2:7e:98:6c:0b:a0:67:54:8c:0c:ad:1b:65:c3:
         36:4f:fd:bb:65:85:5c:98:1d:26:8d:a7:43:5e:29:42:55:49:
         74:b8:a4:3a:83:ca:53:ac:39:ea:8d:28:59:76:79:52:34:71:
         22:76:1b:7b:35:27:11:26:2a:54:92:c2:7d:64:da:1c:67:e4:
         8a:ab:fe:70:1b:f9:f3:bb:4d:71:ff:54:9d:10:40:5b:93:71:
         cb:c4:6b:80:bb:78:5d:bc:9c:2a:90:8c:91:d6:e5:ff:e9:6d:
         f3:a6:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:36 2025 by rpki-client