Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
File:                     406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json)
Hash identifier:          yTBGsdZRIwpgeTlkRe7b5w23CCwJG3n3Y8JnGEy1aBI=
Subject key identifier:   65:7A:7A:42:21:BF:B0:C3:CB:1B:B6:8A:09:E0:1C:7B:64:8A:02:D6
Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3
Certificate issuer:       /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
Certificate serial:       3A64853849D97B9DDC94143DB695B1EB3AED0D63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
Manifest number:          02A2
Signing time:             Sat 23 Aug 2025 01:11:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:06:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:59:59 +0000
Files and hashes:         1: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: F1xad1LYf/+/EEsVq7mXWjr5pwfrgF2X/boK7qJP3xI=)
                          2: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: cijZiORTQj8pw+Vial1gPDZ9Wbm7UefB7xwRnVBMG3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl
                          rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:64:85:38:49:d9:7b:9d:dc:94:14:3d:b6:95:b1:eb:3a:ed:0d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
        Validity
            Not Before: Aug 23 01:06:59 2025 GMT
            Not After : Aug 24 01:59:59 2025 GMT
        Subject: CN=657A7A4221BFB0C3CB1BB68A09E01C7B648A02D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:e2:05:77:5d:0b:35:8e:b3:1c:14:93:51:
                    c7:c9:a8:5b:68:19:92:7f:f8:40:d2:68:dc:60:27:
                    9c:d3:84:5e:cd:53:0e:c2:aa:eb:cf:d5:66:00:bf:
                    d8:e3:b4:40:18:d4:3d:f8:03:9e:76:5b:c7:dc:c8:
                    75:a4:5e:d2:9d:4d:01:ff:b9:f0:e0:f4:dd:6d:89:
                    95:8d:24:75:cd:5f:4a:11:ba:45:f0:d0:92:8c:65:
                    c2:d6:15:57:44:ed:eb:9f:ef:5a:54:ed:ba:ba:66:
                    81:5c:0a:9c:20:e2:55:7f:55:fc:bb:c8:5a:53:e8:
                    0f:f5:19:62:86:5b:4c:c7:cc:48:83:4c:52:74:4a:
                    de:11:26:f4:89:af:82:e0:1c:2c:d9:8e:30:b5:c4:
                    c2:83:4e:6a:79:df:03:7a:e0:aa:43:f6:41:b8:66:
                    98:31:ef:95:32:51:5c:3e:00:18:67:b1:0b:48:9b:
                    e1:ef:80:25:91:a6:11:6f:9f:0c:da:56:d4:1e:bd:
                    03:9b:05:0e:c1:58:b8:15:57:04:56:ef:1a:74:74:
                    ad:ec:a8:1c:44:6b:f1:d1:61:ae:78:5d:36:ce:8c:
                    1e:c5:ef:b8:ab:67:4b:6c:4b:87:71:9d:52:ab:6a:
                    60:60:e7:65:04:cf:1a:ff:c7:37:bd:29:61:e5:10:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:7A:42:21:BF:B0:C3:CB:1B:B6:8A:09:E0:1C:7B:64:8A:02:D6
            X509v3 Authority Key Identifier:
                keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:35:89:e7:3b:5f:09:b4:03:16:e0:dc:42:ce:64:11:40:b7:
         c6:a4:a5:2a:e0:e4:c1:d6:a0:54:43:19:50:69:e7:2d:75:8e:
         be:39:80:33:f2:7e:16:f7:c6:86:c9:38:66:d9:e1:24:76:81:
         6b:54:98:42:28:12:99:12:3a:01:70:45:34:0c:6e:43:76:d0:
         8f:28:93:52:94:04:9b:34:4a:05:ee:c2:f4:99:90:e5:61:5f:
         09:c0:8b:e7:bc:cb:dc:46:ab:2e:c3:a7:9a:dc:99:cb:fc:ae:
         73:8d:99:e3:4e:28:c5:cb:a3:f5:ff:72:27:ae:bf:b6:15:5e:
         d0:11:8a:e9:58:4b:0d:95:5b:ec:e3:c4:f3:54:1f:58:46:fb:
         38:c2:92:7b:71:93:78:20:f9:93:59:6d:6c:85:aa:d9:b2:40:
         7e:b6:ae:7c:fa:e8:7f:2f:b1:76:b5:ca:75:23:15:df:c6:7c:
         ff:b0:64:05:9f:d1:24:05:26:97:46:0d:8e:e8:bf:46:2f:6a:
         fe:36:4e:e0:f3:a6:58:c2:fc:4d:29:f2:83:8e:75:a2:a9:11:
         9c:45:8f:d9:b1:2e:7c:f8:c5:ce:0e:1a:6d:a6:5f:27:2c:c5:
         fd:58:ab:c4:69:a3:77:e7:39:40:2e:4c:ea:98:d1:67:29:e8:
         37:9e:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:18 2025 by rpki-client