Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
File:                     0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json)
Hash identifier:          T17xINyAy1iynILZgStszVBK5ugBExZLTwc27pA9oOk=
Subject key identifier:   E6:F1:64:1C:44:47:A9:00:E7:B5:3F:92:BF:98:1E:34:61:7F:DB:40
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       3A40BCB8B5E829445583E3BA34B2A38352CFEB12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
Manifest number:          02AB
Signing time:             Sat 23 Aug 2025 03:53:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:48:33 +0000
Manifest next update:     Sun 24 Aug 2025 07:16:33 +0000
Files and hashes:         1: 34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (hash: BXBMdFx7otSxHTwUNboayShinyzfM90Ba7+cGRAazlA=)
                          2: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: 5XOTWWmy4psWBNsUfQGNFdGBe1u1yYmjlsEVuD+DXYA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:40:bc:b8:b5:e8:29:44:55:83:e3:ba:34:b2:a3:83:52:cf:eb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Aug 23 03:48:33 2025 GMT
            Not After : Aug 24 07:16:33 2025 GMT
        Subject: CN=E6F1641C4447A900E7B53F92BF981E34617FDB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:ae:0a:29:44:33:96:e0:7d:9b:82:12:a3:
                    f6:b6:46:94:28:15:76:56:ec:2e:90:92:97:97:e0:
                    ad:79:5f:7e:79:1d:14:27:68:59:f3:76:a5:67:88:
                    ec:80:eb:61:d1:38:11:dc:9f:ad:23:f8:70:f6:15:
                    31:af:c4:1a:63:3e:c4:1a:fe:c8:22:68:3e:46:84:
                    10:22:4f:09:be:7c:12:85:84:10:17:01:1d:63:b3:
                    e4:e3:61:e3:ce:c0:6a:ea:e6:0c:f9:62:b2:5c:b8:
                    37:be:fa:ee:2b:54:2f:4a:0b:a9:8e:4f:b7:a7:eb:
                    d7:c1:91:c0:3c:db:1d:22:32:ec:e0:02:95:48:dd:
                    dc:e9:8b:21:30:70:27:7a:2b:c6:18:38:88:9e:9a:
                    c5:16:cf:77:ae:27:eb:f1:7b:92:7c:6c:13:cd:51:
                    0b:3a:6a:61:86:ec:ff:58:3a:fe:db:53:fd:38:19:
                    53:b9:91:c0:72:78:9a:5a:04:d1:da:03:25:a4:43:
                    01:74:92:41:4d:d5:7f:ce:86:12:83:d7:02:c7:f5:
                    ee:ec:70:e2:a7:d8:e7:2e:2f:cf:0e:a7:e7:51:46:
                    2c:7b:c0:e6:cf:1e:db:60:ba:6a:c8:0e:5e:71:05:
                    bc:80:2b:4b:bd:5c:39:c5:f7:d6:25:b9:b1:72:8f:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:64:1C:44:47:A9:00:E7:B5:3F:92:BF:98:1E:34:61:7F:DB:40
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:78:c0:0c:59:7a:d8:38:52:f3:de:e4:76:1b:78:7f:e8:42:
         74:cf:03:6d:3d:9a:90:3e:ca:2f:69:03:3a:f9:f4:74:6c:a7:
         c7:d7:0c:75:09:ff:db:6f:33:91:34:70:10:d7:99:e6:e2:f1:
         51:4c:65:dc:51:8d:9c:fd:bf:3a:4e:c1:63:ae:72:23:c4:8f:
         70:ad:5a:a1:16:78:a6:87:25:49:43:88:f3:43:f7:25:0c:f1:
         d5:a8:03:df:78:ae:51:16:3a:55:51:47:47:67:e4:c8:c5:75:
         b5:ce:eb:9e:34:85:68:17:5d:71:ab:e7:42:39:7f:37:f1:2a:
         aa:87:8a:32:2e:9e:82:fd:0b:25:5b:3a:c5:8c:7e:a2:bd:6d:
         39:fa:e4:12:88:e9:1f:17:73:41:e6:f1:55:c5:bc:44:9c:a1:
         4e:41:d9:69:6f:8e:76:94:e9:89:7f:e2:d2:b2:89:97:7e:b8:
         c0:00:ec:20:3a:b0:6b:03:4f:80:78:dd:09:d4:79:ef:3a:4a:
         de:dd:e9:61:49:94:41:4c:56:75:81:47:07:54:6e:71:24:15:
         a4:05:dc:a7:11:c9:83:7f:4f:42:0a:cd:49:3b:88:ec:f7:df:
         01:a0:cb:58:7f:cf:6f:63:da:97:e2:4d:db:e6:4b:50:b9:2e:
         50:37:2b:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOkC8uLXoKURVg+O6NLKjg1LP6xIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY4NUJCNjM3N0U0MzgyM0Y2RUFGN0NEMEVFMDRCN0I1
MDhCQjQzQTAeFw0yNTA4MjMwMzQ4MzNaFw0yNTA4MjQwNzE2MzNaMDMxMTAvBgNV
BAMTKEU2RjE2NDFDNDQ0N0E5MDBFN0I1M0Y5MkJGOTgxRTM0NjE3RkRCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0264KKUQzluB9m4ISo/a2RpQo
FXZW7C6QkpeX4K15X355HRQnaFnzdqVniOyA62HROBHcn60j+HD2FTGvxBpjPsQa
/sgiaD5GhBAiTwm+fBKFhBAXAR1js+TjYePOwGrq5gz5YrJcuDe++u4rVC9KC6mO
T7en69fBkcA82x0iMuzgApVI3dzpiyEwcCd6K8YYOIiemsUWz3euJ+vxe5J8bBPN
UQs6amGG7P9YOv7bU/04GVO5kcByeJpaBNHaAyWkQwF0kkFN1X/OhhKD1wLH9e7s
cOKn2OcuL88Op+dRRix7wObPHttgumrIDl5xBbyAK0u9XDnF99YlubFyj8YXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5vFkHERHqQDntT+Sv5geNGF/20AwHwYDVR0j
BBgwFoAUBoW7Y3fkOCP26vfNDuBLe1CLtDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVG
SFMvMS8wNjg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODVCQjYzNzdFNDM4MjNG
NkVBRjdDRDBFRTA0QjdCNTA4QkI0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVGSFMvMS8w
Njg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHXjADFl62DhS897kdht4f+hCdM8DbT2akD7KL2kDOvn0dGynx9cMdQn/228z
kTRwENeZ5uLxUUxl3FGNnP2/Ok7BY65yI8SPcK1aoRZ4poclSUOI80P3JQzx1agD
33iuURY6VVFHR2fkyMV1tc7rnjSFaBddcavnQjl/N/EqqoeKMi6egv0LJVs6xYx+
or1tOfrkEojpHxdzQebxVcW8RJyhTkHZaW+OdpTpiX/i0rKJl364wADsIDqwawNP
gHjdCdR57zpK3t3pYUmUQUxWdYFHB1RucSQVpAXcpxHJg39PQgrNSTuI7PffAaDL
WH/Pb2Pal+JN2+ZLULkuUDcrnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:34 2025 by rpki-client