Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
File:                     4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft (raw, json)
Hash identifier:          XRaR1CyyKieAEEjqqRiUo6wRRQNSsPVsrgXS1hdx0gc=
Subject key identifier:   32:EC:B4:45:5D:6E:9B:79:8D:58:48:14:7F:F3:BD:5A:6B:CF:96:98
Authority key identifier: 4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E
Certificate issuer:       /CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
Certificate serial:       322B6F9CBC7493729AF2DD06F4E486B4B1B963AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
Manifest number:          02AF
Signing time:             Sat 23 Aug 2025 09:07:37 +0000
Manifest this update:     Sat 23 Aug 2025 09:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 10:04:37 +0000
Files and hashes:         1: 4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl (hash: qhGpRC0qBm7ut839BztYN10Yu+Yc78YTybxpodC7RV0=)
                          2: 323830343a346431633a3a2f33322d3332203d3e20323637343133.roa (hash: D5QGKKfElJYVWBOCYUJCv9JhggD/WvjNZBt8TBd4dP8=)
                          3: 34352e3233352e3130342e302f32322d3234203d3e20323637343133.roa (hash: 6SeAbkNemwP010cu5gR/6OZKqhlpAPh/l9YNdiykink=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl
                          rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2b:6f:9c:bc:74:93:72:9a:f2:dd:06:f4:e4:86:b4:b1:b9:63:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
        Validity
            Not Before: Aug 23 09:02:37 2025 GMT
            Not After : Aug 24 10:04:37 2025 GMT
        Subject: CN=32ECB4455D6E9B798D5848147FF3BD5A6BCF9698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:24:fd:3b:07:ac:18:b3:2a:10:0b:ab:7b:
                    e2:39:ea:c5:4d:0b:54:fa:43:e3:f1:f4:39:17:70:
                    a8:23:08:27:43:98:fb:96:fe:3e:7e:f7:3c:42:b8:
                    d1:bc:bc:43:15:a0:23:74:84:37:4f:4a:3d:12:e6:
                    a5:b7:dc:e6:a7:c2:3e:fc:c2:38:51:4a:02:da:a1:
                    3f:36:82:c5:67:ca:ce:23:56:1e:89:7a:f3:ec:e9:
                    66:25:c0:16:c7:18:1c:f6:f0:33:48:49:d6:82:80:
                    6c:24:c3:0c:6e:dd:02:c5:a3:f1:27:d3:38:5c:6f:
                    3f:60:11:bd:fa:8e:68:a1:d4:36:d5:17:73:1c:41:
                    51:03:cf:d1:80:aa:47:3f:d4:01:95:59:39:53:d4:
                    97:cb:c7:06:56:43:62:8f:a1:c8:7f:f6:6b:bb:52:
                    f7:4a:0c:0f:40:6a:78:5c:3c:0d:8a:9d:59:a9:53:
                    5a:c1:7e:41:ce:9f:01:d0:ab:45:39:f1:9d:80:f2:
                    54:5f:c0:8a:8e:0c:79:f1:4d:67:ed:95:75:16:35:
                    d3:85:a1:68:d8:07:08:c5:1c:89:65:33:2c:00:dd:
                    54:1f:c7:44:3d:84:cc:ad:90:30:d4:c6:26:97:19:
                    8b:b2:34:3b:51:46:25:ad:41:b5:fe:b7:6f:c0:c2:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EC:B4:45:5D:6E:9B:79:8D:58:48:14:7F:F3:BD:5A:6B:CF:96:98
            X509v3 Authority Key Identifier:
                keyid:4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:ff:f4:31:9b:69:86:52:3a:e0:50:5f:4a:7b:c7:b7:dd:
         df:39:dd:9d:43:fc:a3:87:87:9a:d3:c1:68:b8:7b:2e:18:dc:
         19:fd:ec:5b:5a:7c:a8:6f:6d:f1:47:68:eb:3d:55:7e:5d:6d:
         cb:60:9d:5f:3d:81:de:be:90:6c:1b:91:73:22:33:e1:61:d6:
         e5:8a:88:3c:0e:7a:c7:cb:a2:09:a4:d3:33:cd:ab:2c:f5:ff:
         0d:ac:1e:c0:ff:99:e3:4b:df:a4:c3:3c:2c:2e:a5:e5:dc:05:
         c1:32:cd:f9:ea:9d:00:f8:e0:55:7c:c1:56:a1:5c:9d:c9:33:
         70:eb:92:b9:f0:34:f5:5f:89:88:56:a9:7d:7a:83:ba:06:f6:
         31:91:c7:85:6c:34:14:4f:90:ee:8f:3c:ea:a1:ca:bd:e1:1f:
         e0:3b:da:a1:1a:5c:fa:d8:3d:8a:15:ac:6e:c4:78:b9:8f:88:
         6d:03:5e:0f:dc:66:4d:16:9f:62:57:35:7d:a5:95:5f:02:d2:
         27:ff:2d:18:ff:b5:63:30:20:d2:d8:95:1d:38:40:11:29:0d:
         49:b8:b6:56:01:41:40:b8:16:ab:b2:44:97:06:64:39:82:73:
         79:70:28:29:f0:b2:27:67:e9:b6:81:6f:70:b8:f0:31:df:a5:
         cc:16:7a:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMitvnLx0k3Ka8t0G9OSGtLG5Y64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1QkMzMzM4REMyQ0FCQjIxQTBBQTU1QTI5M0ZFNjJC
Rjc4MzgzRTAeFw0yNTA4MjMwOTAyMzdaFw0yNTA4MjQxMDA0MzdaMDMxMTAvBgNV
BAMTKDMyRUNCNDQ1NUQ2RTlCNzk4RDU4NDgxNDdGRjNCRDVBNkJDRjk2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXiT9OwesGLMqEAure+I56sVN
C1T6Q+Px9DkXcKgjCCdDmPuW/j5+9zxCuNG8vEMVoCN0hDdPSj0S5qW33Oanwj78
wjhRSgLaoT82gsVnys4jVh6JevPs6WYlwBbHGBz28DNISdaCgGwkwwxu3QLFo/En
0zhcbz9gEb36jmih1DbVF3McQVEDz9GAqkc/1AGVWTlT1JfLxwZWQ2KPoch/9mu7
UvdKDA9AanhcPA2KnVmpU1rBfkHOnwHQq0U58Z2A8lRfwIqODHnxTWftlXUWNdOF
oWjYBwjFHIllMywA3VQfx0Q9hMytkDDUxiaXGYuyNDtRRiWtQbX+t2/AwpfZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMuy0RV1um3mNWEgUf/O9WmvPlpgwHwYDVR0j
BBgwFoAUS1vDM43CyrshoKpVopP+Yr94OD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTV4bUE1eUhLbllMYUFQOHBBWldLRXZncTI2Z1lOaDlZS1BWcExLUDFI
c0MvMS80QjVCQzMzMzhEQzJDQUJCMjFBMEFBNTVBMjkzRkU2MkJGNzgzODNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCNUJDMzMzOERDMkNBQkIy
MUEwQUE1NUEyOTNGRTYyQkY3ODM4M0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTV4bUE1eUhLbllMYUFQOHBBWldLRXZncTI2Z1lOaDlZS1BWcExLUDFIc0MvMS80
QjVCQzMzMzhEQzJDQUJCMjFBMEFBNTVBMjkzRkU2MkJGNzgzODNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF63/9DGbaYZSOuBQX0p7x7fd3zndnUP8o4eHmtPBaLh7LhjcGf3sW1p8qG9t
8Udo6z1Vfl1ty2CdXz2B3r6QbBuRcyIz4WHW5YqIPA56x8uiCaTTM82rLPX/Dawe
wP+Z40vfpMM8LC6l5dwFwTLN+eqdAPjgVXzBVqFcnckzcOuSufA09V+JiFapfXqD
ugb2MZHHhWw0FE+Q7o886qHKveEf4DvaoRpc+tg9ihWsbsR4uY+IbQNeD9xmTRaf
Ylc1faWVXwLSJ/8tGP+1YzAg0tiVHThAESkNSbi2VgFBQLgWq7JElwZkOYJzeXAo
KfCyJ2fptoFvcLjwMd+lzBZ6Kg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:13 2025 by rpki-client