Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft
File:                     71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft (raw, json)
Hash identifier:          xJb2usVd8d1NNg43IYyelOuUis1owuMh0n8yAhJrZb4=
Subject key identifier:   74:36:71:86:75:D5:6A:EF:87:64:43:5F:4E:01:E4:E1:F0:B1:85:F2
Authority key identifier: 71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9
Certificate issuer:       /CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9
Certificate serial:       287A9BD7F0C8620E3388DA8B854D478FD0216D1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft
Manifest number:          35
Signing time:             Sat 23 Aug 2025 10:27:57 +0000
Manifest this update:     Sat 23 Aug 2025 10:22:57 +0000
Manifest next update:     Sun 24 Aug 2025 12:07:57 +0000
Files and hashes:         1: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl (hash: oS2vB9mJ9KvkOqYwFC9SMWdwXZSFvgQ5B0hYpzg1CYg=)
                          2: 323830343a393363343a3a2f33322d3332203d3e20323734373939.roa (hash: Lg2xMCDUflfzYLEqDuILPmwVidL9vHQP1G7+KLc+SfE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl
                          rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7a:9b:d7:f0:c8:62:0e:33:88:da:8b:85:4d:47:8f:d0:21:6d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9
        Validity
            Not Before: Aug 23 10:22:57 2025 GMT
            Not After : Aug 24 12:07:57 2025 GMT
        Subject: CN=7436718675D56AEF8764435F4E01E4E1F0B185F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:b1:90:a3:ae:c2:d1:e2:19:f5:be:16:53:
                    03:ad:1c:e7:b2:b4:ea:20:15:41:23:e5:24:ec:28:
                    10:a5:7d:59:8d:2d:a3:38:7c:50:dd:9c:8f:5e:70:
                    b3:90:b6:db:4e:70:ac:f5:81:6c:d0:1a:06:31:53:
                    d5:7f:a6:48:3f:b8:47:62:26:ac:7a:e8:39:31:be:
                    d8:de:65:82:ef:9e:3f:0b:59:ec:f2:e2:e9:20:13:
                    d0:b8:14:ce:b6:09:f5:e6:6e:0f:0f:27:e3:66:2c:
                    26:2a:29:22:82:e7:c2:0a:ad:3b:38:bd:45:ea:4b:
                    0c:c9:ae:90:0a:a6:ce:16:e1:40:80:ec:7d:a5:ba:
                    00:14:b7:13:eb:7a:47:84:2b:5c:a0:64:49:e8:f7:
                    cc:9b:19:64:65:68:2b:25:42:96:af:86:e9:11:35:
                    d9:c1:e9:17:1f:d2:2f:e0:5c:ec:00:f6:cf:d1:98:
                    69:fc:64:9d:77:a3:f4:c7:3f:55:1e:08:f7:c9:83:
                    79:0b:49:7d:56:da:3d:3d:db:6e:6c:6c:30:a6:00:
                    f0:8c:1e:e6:7d:c2:be:64:ac:0b:d0:ac:24:98:fa:
                    dd:c3:ca:7b:b6:2b:1a:86:79:75:dc:78:43:9e:f8:
                    6e:00:c2:04:88:17:7a:dd:b6:91:d4:cb:79:3a:6c:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:36:71:86:75:D5:6A:EF:87:64:43:5F:4E:01:E4:E1:F0:B1:85:F2
            X509v3 Authority Key Identifier:
                keyid:71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:c6:28:4c:11:41:66:2f:13:10:0e:7d:4e:1c:b8:b3:ba:
         04:27:c4:4f:b2:f9:98:d9:8a:21:61:2c:50:ab:c1:94:bc:73:
         00:8b:b2:34:14:10:92:0d:5f:b5:dd:3f:bb:8a:ad:a2:5f:14:
         73:2b:fb:20:f1:15:c5:ac:3a:d8:dd:69:3f:57:81:d1:b6:10:
         c8:47:c0:b8:4f:19:80:28:0c:4c:a6:6e:2e:58:8f:63:66:98:
         39:d9:bf:66:10:c0:9c:2e:1f:ab:5a:d8:58:d4:98:d1:60:a8:
         19:e4:92:66:61:27:a0:4c:06:f2:31:c8:8e:17:44:0e:fb:b6:
         49:49:4b:33:01:b7:3b:0a:2d:87:fe:45:b7:a2:39:3d:71:e9:
         17:e8:44:f7:cb:68:83:ba:74:f8:c6:d0:dd:26:f9:79:35:7d:
         f1:98:22:f8:6e:e5:d0:2b:8a:db:d7:19:f8:9d:5c:48:53:b7:
         87:b6:63:fe:75:2d:6b:7e:d3:4b:af:b2:e6:72:b8:51:b8:4e:
         34:17:c3:29:15:2d:ab:f0:af:79:ce:15:e0:a9:3d:22:9c:43:
         90:46:cb:12:7b:ba:5b:0e:d9:d4:b1:92:92:d1:28:65:33:6c:
         91:9c:1b:e6:c2:2c:14:a6:25:b7:8a:09:5f:e4:d6:19:63:78:
         b3:01:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:51 2025 by rpki-client