Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
File:                     217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft (raw, json)
Hash identifier:          0MAcKA+x+j/cZ6I+aUiQuMAk2PRA9Blc34EKWf0vGyo=
Subject key identifier:   20:DF:35:C8:0C:9A:D2:95:1E:BF:F5:EB:BA:79:82:30:C0:80:E3:84
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       28166FB267FEEDB94900C18F3FBF3D4EC72EA48D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
Manifest number:          02A2
Signing time:             Sat 23 Aug 2025 08:21:42 +0000
Manifest this update:     Sat 23 Aug 2025 08:16:42 +0000
Manifest next update:     Sun 24 Aug 2025 11:26:42 +0000
Files and hashes:         1: 323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa (hash: MGiElqaL7xBEzpuZbkoNqfSxLtqkmTwWj52mKDYvjWk=)
                          2: 3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa (hash: KepogA6EqBh4/Mm9ZRketiZxhibc5/sOuerwpLOTr8k=)
                          3: 323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa (hash: 73VxTmrHcDclfyzWD2NvLWhlyqOOmciv8mqD3YTP4Lo=)
                          4: 3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa (hash: C8A1tMc17XPO4sT/75doOEso28/RPHv8x0piivNpqnU=)
                          5: 323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa (hash: IIjOfwScjYzuIW455scPteo+jXiGwymOxdWyMdesCxU=)
                          6: 323830343a3832383a3a2f33322d3332203d3e20323632333534.roa (hash: g8VDWdnoTi89t4VpwlAnfB9n5awIOVyt5yucSqrEYXs=)
                          7: 3137372e3132352e3231322e302f32322d3234203d3e20323632333534.roa (hash: bn8Xe5WrdUt7ICGvKPftHd4DAKOH8yOEmghN62vqAdk=)
                          8: 323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa (hash: 1jilXaroZujU5oaBmP8IdMxhJvWVAv+XVsRwyo4U4Kk=)
                          9: 323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa (hash: jyBzkUb0ZAfBqFaeEplKCUGYFgzfbOL8bBel2PDL7uc=)
                          10: 323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa (hash: 3ATdnwKTcnjJc1thmle9rbBzJ54qo4F2Z6Zt7tF0mOQ=)
                          11: 3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa (hash: 6NwpFJ7gDANE46Jx5vikCbRoBEVySFH3yZyCVhsLd0o=)
                          12: 217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl (hash: jEuCPsLeH2gUg+Ypxjkf4KFnvzax/sffSZH+4nwGdDw=)
                          13: 323830343a3832383a663133303a3a2f34372d3437203d3e20323632333534.roa (hash: KopFg19EShN0UnNLuZcAOoGOfsA+Ip+eckPoai0jD2s=)
                          14: 3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa (hash: q41Kgx7H4qdLGf/v/7Tu8Hjp6Ur6X6B7jCcvMBE3QB0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:16:6f:b2:67:fe:ed:b9:49:00:c1:8f:3f:bf:3d:4e:c7:2e:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Aug 23 08:16:42 2025 GMT
            Not After : Aug 24 11:26:42 2025 GMT
        Subject: CN=20DF35C80C9AD2951EBFF5EBBA798230C080E384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:4d:0d:27:73:7c:35:d2:2d:67:ec:d5:c9:
                    18:61:c4:c2:22:07:5d:c9:90:1d:dd:08:3d:7b:c9:
                    47:6a:28:2d:69:ef:e2:be:85:5a:d7:3b:9e:05:eb:
                    a9:b3:91:8d:67:48:60:bd:de:6a:cf:1d:61:42:e0:
                    c0:77:ff:cd:c7:47:84:23:dc:87:c7:04:f6:ce:55:
                    5b:c1:2e:8c:87:84:b4:23:ff:7b:6d:d5:35:a9:39:
                    cf:c7:7b:38:94:f1:90:a4:48:6d:eb:55:dd:27:13:
                    40:3d:c8:f1:57:1a:86:a9:0f:49:a6:53:67:4b:84:
                    2f:a1:2b:bc:c9:b6:67:48:dd:41:fa:b6:43:5f:50:
                    9e:16:a5:3a:bb:e6:74:28:3c:dd:00:bf:3b:00:b1:
                    9f:b2:68:65:ef:e1:24:bd:68:64:0f:0e:d0:73:50:
                    b7:eb:6e:40:b2:d5:3e:5a:7e:5e:f3:74:4f:46:56:
                    1e:52:d3:b0:5d:e1:18:05:68:7f:a3:dc:60:e3:ff:
                    6b:81:36:c2:b5:f7:e6:93:ba:8e:c7:31:b8:55:c3:
                    3e:cd:45:06:c7:72:e0:90:5a:72:26:8f:50:c5:5d:
                    32:84:86:d2:fc:bd:8b:7b:fa:fa:7c:bf:e3:a4:b1:
                    96:d6:3b:e0:8b:15:20:4b:0d:26:8b:82:1f:1b:13:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DF:35:C8:0C:9A:D2:95:1E:BF:F5:EB:BA:79:82:30:C0:80:E3:84
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:63:59:51:4a:5c:ae:d3:62:e4:0d:d7:4d:95:31:5b:da:
         58:d1:7b:b2:c6:6f:a3:3b:cd:50:0b:ce:db:6e:d9:2d:18:bd:
         21:54:62:a7:9b:46:7c:e6:7b:ed:6c:71:97:66:c1:14:fc:c0:
         50:04:ad:64:5c:b1:91:86:4b:d9:b6:bf:76:f7:e4:79:00:80:
         cc:30:ca:72:d1:e5:c5:4f:76:a9:9f:ed:15:b5:7d:a4:0a:ed:
         c7:c6:32:c3:b7:8e:6c:aa:04:03:46:7c:ce:de:c2:27:cd:16:
         fe:3a:4a:9e:3f:3b:30:1d:5a:04:3e:f3:73:47:00:15:5f:23:
         25:c2:c2:70:39:8b:b8:d6:d9:b0:47:80:3d:6f:83:6f:ed:1b:
         fd:f3:95:08:7e:bd:9e:3c:d1:99:70:e3:ff:eb:1b:88:26:9b:
         4d:24:99:93:82:a3:b4:6e:27:99:6c:60:bf:ff:95:ff:90:38:
         25:16:90:1d:25:88:7e:8e:90:f0:fa:ba:da:71:2a:96:8d:25:
         ab:25:d2:e8:c9:08:1d:aa:dc:8a:93:70:ee:9e:e7:a1:f8:e3:
         74:0b:45:03:40:0f:80:6c:55:b5:7e:8e:a1:e4:9c:f2:15:20:
         03:3d:40:92:f2:e4:01:9c:1f:07:92:6d:9b:c8:a3:56:72:5f:
         bc:0f:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:14 2025 by rpki-client