Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
File:                     FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft (raw, json)
Hash identifier:          Ih3m5rOb0tF2jBgRgrER7t1P00lBZffcdDSELVzqwzs=
Subject key identifier:   48:F8:C6:1E:10:56:E9:7A:7B:2F:04:39:60:07:D0:43:DB:DD:8B:12
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Certificate issuer:       /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial:       78E91C35371697CD0CBB8367E0D070AB047C1A04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
Manifest number:          029A
Signing time:             Fri 22 Aug 2025 21:02:16 +0000
Manifest this update:     Fri 22 Aug 2025 20:57:16 +0000
Manifest next update:     Sat 23 Aug 2025 21:49:16 +0000
Files and hashes:         1: 323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (hash: J+wRwomABKCbVl4EP5JD2Yfly2BPeIoqIkLJ9ZSvj4s=)
                          2: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl (hash: s3vjZ0NESTKi3WBvwab2NVM3XYchRNtRTjUZnHU6RN8=)
                          3: 3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (hash: 64d3manPGgk3wxr3C7+S75h3+f1uoBp0OnH1+QMNePE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
                          rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 21:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e9:1c:35:37:16:97:cd:0c:bb:83:67:e0:d0:70:ab:04:7c:1a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Validity
            Not Before: Aug 22 20:57:16 2025 GMT
            Not After : Aug 23 21:49:16 2025 GMT
        Subject: CN=48F8C61E1056E97A7B2F04396007D043DBDD8B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:39:e9:17:c9:58:7c:14:fe:f3:17:7f:20:5f:
                    0b:2d:e3:fe:09:cd:92:3c:81:1a:b0:94:ca:5f:f6:
                    e8:74:3c:75:4d:5c:93:49:a5:31:c6:77:56:07:3d:
                    16:be:f3:98:52:c5:4b:a9:db:52:8f:a2:1b:f7:19:
                    31:22:b9:69:77:34:58:15:e8:94:24:e6:05:6f:57:
                    6d:3c:f2:9d:17:c7:85:fa:cf:f8:35:07:46:91:58:
                    f5:6c:f5:a9:fc:f3:a5:f0:18:36:e6:66:f2:47:f6:
                    46:b5:20:8d:34:a3:d5:78:c4:af:b9:79:6f:91:30:
                    39:c0:da:5d:6b:6c:43:a0:99:ef:55:cf:44:3d:24:
                    85:a4:26:21:1b:e7:fc:0d:f5:74:3a:b0:f6:34:2e:
                    92:31:b2:f4:f0:89:35:d8:6d:cc:25:fb:03:c3:28:
                    75:f3:4a:b7:53:5d:e2:37:5c:40:31:94:d5:28:a8:
                    73:bb:ce:1f:65:a9:9c:1a:a5:35:15:eb:78:13:ce:
                    c0:60:f8:15:fe:ef:8d:ff:99:38:b3:36:d0:2a:5f:
                    aa:91:0c:37:0a:87:24:fb:15:57:3d:2d:6d:e5:85:
                    31:a7:1b:71:cf:b2:16:f0:53:ea:2d:4a:ed:45:a7:
                    75:d7:20:2e:10:72:9f:89:db:b6:b6:fc:2e:c2:e4:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:C6:1E:10:56:E9:7A:7B:2F:04:39:60:07:D0:43:DB:DD:8B:12
            X509v3 Authority Key Identifier:
                keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:41:61:94:68:bf:ff:e4:31:78:29:62:25:ae:dc:b4:7d:21:
         03:76:7f:bc:89:cd:d1:9d:fe:75:e7:2a:4e:af:bd:d5:2d:f4:
         6d:a8:59:f6:ce:d9:d6:d7:37:c3:60:50:f6:bb:e6:e5:cf:d0:
         9d:aa:a7:ab:55:b8:da:94:29:10:9e:9d:f8:8f:fa:24:e1:e3:
         5d:99:b1:29:47:c3:ee:f2:26:ae:fe:15:fe:84:7a:fd:f5:18:
         59:c4:b1:70:a0:c5:71:64:e0:4a:8c:d1:de:5f:a1:99:a9:ba:
         7c:e4:b0:71:0b:94:4a:18:82:75:a6:eb:06:f9:aa:9d:7a:d2:
         e5:e0:84:46:48:af:b0:e3:1a:3e:38:07:41:67:8b:7d:b8:30:
         ea:62:6f:e0:f4:99:3c:14:56:03:e2:0f:79:ed:04:8c:5d:65:
         ed:6e:6e:09:dd:5a:45:82:0e:34:74:8f:e3:2d:47:c2:82:98:
         b5:64:54:43:35:74:2b:97:60:f8:91:cb:af:70:a8:96:2f:1c:
         e7:44:44:6e:39:e2:eb:cb:4d:d8:a4:d6:7e:2c:fd:ff:13:9a:
         66:7b:0e:5d:ed:66:bf:31:08:92:c0:15:18:77:a4:f1:f8:42:
         fd:41:f2:c1:f4:8f:1e:e7:c6:a8:51:fd:13:d3:2b:5d:bc:83:
         1b:43:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:38 2025 by rpki-client