Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
File:                     09B86DF2675EE46F17CF5F43330433E2F22C8432.mft (raw, json)
Hash identifier:          cXIU4nGR8ZatFV3SCCvDA9ggYK2FWnuQ1Q+PWNZYmxU=
Subject key identifier:   3A:1C:E1:64:BF:B2:86:14:0C:18:DC:11:88:DF:97:60:D6:A1:8A:F6
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Certificate issuer:       /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial:       21D3F5ECD2005165368A7BB282328A8BB45E21D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
Manifest number:          0142
Signing time:             Sat 23 Aug 2025 10:10:04 +0000
Manifest this update:     Sat 23 Aug 2025 10:05:04 +0000
Manifest next update:     Sun 24 Aug 2025 12:17:04 +0000
Files and hashes:         1: 09B86DF2675EE46F17CF5F43330433E2F22C8432.crl (hash: BP7KGYDNnG+MRzh8Scpqms+T+oY1dhrs7MnW7u311aI=)
                          2: 3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa (hash: 9cmwa/EjIHXq9mMNpoYQR4n5fw0qKo7hhSMP7U2r66M=)
                          3: 323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (hash: BDbkIOTo1z+rcsqGg8AzmzwEnhj4V4/lYattEazDYSg=)
                          4: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (hash: hsUqcBtrggzHi8XWKiDT4v+VWmLmwqE/MP++GHfCjxs=)
                          5: 3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (hash: eQtF15LjNj6FDZHZkElJh6Yb4+GcGCOJMj782JJ6GaU=)
                          6: 3133382e35392e39322e302f32322d3234203d3e20323632373639.roa (hash: zNH2DTIGS/EMjzSeq1+poV5vX3CbHq/oe6HfJIa6Sww=)
                          7: 3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (hash: okRSgm6tTpjxTkb9wnxtgrY0N5qGE6icPVw38aY+vUE=)
                          8: 3137372e3132342e3136342e302f32322d3234203d3e20323632373639.roa (hash: fIX1rsqkrEcxfwHxtTnwZrhQYl82JOUf5vdma4FSDSQ=)
                          9: 3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (hash: PuvRBmtSfW019bAKsmUe0+rTNxuXw1pFP0looDysGEw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d3:f5:ec:d2:00:51:65:36:8a:7b:b2:82:32:8a:8b:b4:5e:21:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
        Validity
            Not Before: Aug 23 10:05:04 2025 GMT
            Not After : Aug 24 12:17:04 2025 GMT
        Subject: CN=3A1CE164BFB286140C18DC1188DF9760D6A18AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:e7:b6:e7:01:02:b4:a3:b3:c7:2d:46:db:
                    6d:05:9d:dc:29:12:d0:b2:86:de:76:6d:ee:6e:62:
                    25:f8:e3:8b:bf:32:82:a6:f6:35:42:d1:59:49:59:
                    b4:eb:64:cc:1b:af:36:ba:d2:9d:8d:57:5d:46:34:
                    3a:d9:08:38:ed:68:c0:b6:e5:30:59:5d:04:65:50:
                    3e:20:b7:64:a9:60:8b:cf:e6:25:f4:58:6a:f9:59:
                    29:5c:6f:b9:29:c8:3d:45:85:ac:e0:84:3b:6e:1b:
                    26:3c:bc:9f:2b:17:1e:ea:28:f7:05:e6:50:a6:5d:
                    eb:63:da:9c:ab:11:68:4a:73:b0:c7:b2:ba:79:74:
                    93:82:00:94:42:21:7a:61:4c:d0:b2:7f:6d:7a:9e:
                    74:39:ae:9f:6d:dc:4d:fb:c8:10:e2:0f:87:9c:83:
                    0c:9b:04:4a:e0:c0:b2:69:3b:06:80:f2:83:b7:3c:
                    22:8c:62:ae:93:91:2c:b7:ce:75:cd:91:c4:3c:50:
                    6e:e0:0d:6b:83:6a:16:55:a7:6c:b6:8e:f0:31:3c:
                    4c:fc:68:3c:ed:b7:75:ac:8b:38:9c:f1:66:ba:c6:
                    58:dd:eb:24:c1:14:a1:46:69:8c:40:a8:cc:04:11:
                    19:ca:81:4f:17:11:47:b3:f2:41:7e:a2:9c:71:82:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1C:E1:64:BF:B2:86:14:0C:18:DC:11:88:DF:97:60:D6:A1:8A:F6
            X509v3 Authority Key Identifier:
                keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:11:3d:6a:f1:de:bb:19:7b:b8:f2:06:6b:68:43:38:ee:
         3d:ed:2e:4e:46:04:c1:da:63:d1:6c:f2:05:4f:2f:b5:35:3d:
         0c:62:27:dc:ec:2e:59:b1:f2:72:e7:71:8b:7d:f9:96:66:22:
         ee:01:f8:f0:a0:9e:27:a4:62:e2:2a:0e:fa:98:1f:f8:49:d7:
         04:1b:75:f1:64:fc:97:66:4a:3d:cf:27:70:2a:20:f2:06:b4:
         55:ca:56:0f:41:e9:0c:20:9a:3f:71:71:99:fe:73:27:a2:32:
         ea:cb:d9:87:c5:2b:1e:77:74:b7:38:b6:14:1f:89:d3:f8:a8:
         a6:ef:d7:71:c5:99:e3:fb:ea:b2:de:f2:9e:e6:97:9d:e3:bc:
         77:93:7d:eb:b2:5c:71:2b:6a:2b:9d:58:08:c8:85:1a:a9:76:
         76:11:ff:27:63:6a:27:86:79:01:f3:c2:04:c8:a1:8e:ea:ed:
         ed:8f:06:d4:80:4c:af:06:1f:5a:9e:98:03:ec:b9:75:15:d5:
         35:ef:ca:08:34:41:2e:7b:90:18:cd:e4:79:fd:33:5a:d0:79:
         f9:4d:b6:63:4d:c2:23:48:45:33:f6:e6:3b:18:c4:c2:29:8b:
         53:a1:b0:98:66:92:9d:7e:43:9a:e9:54:20:19:1a:86:4d:31:
         35:bc:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:01 2025 by rpki-client