Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
File:                     29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft (raw, json)
Hash identifier:          70OSmue477fJ/0Snw2+qQHlE8QTUEvYfye6/cQqvO9M=
Subject key identifier:   1C:FB:F9:2D:D7:69:27:41:34:4A:79:BC:A0:0D:42:CB:FE:A9:23:DB
Authority key identifier: 29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17
Certificate issuer:       /CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
Certificate serial:       66A55153A758A1558D04FC2AAAFF2B0848108613
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
Manifest number:          0228
Signing time:             Sat 23 Aug 2025 06:33:35 +0000
Manifest this update:     Sat 23 Aug 2025 06:28:35 +0000
Manifest next update:     Sun 24 Aug 2025 06:33:35 +0000
Files and hashes:         1: 323830343a383130303a3a2f33322d313238203d3e20323632333036.roa (hash: TCyWKf/BDcRR8Y0zNUFswoE290bm1AWCSOCK4VOwur4=)
                          2: 29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl (hash: HXAYnihQvdfOx8Jfdf2QpU0I+XBbXW1Hjv+za7ga/18=)
                          3: 3137372e38372e3137362e302f32322d3234203d3e20323632333036.roa (hash: zcYvFZqaM/zJwyycevqv6brJ7OZc3i/sdsYw9voNEeE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl
                          rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a5:51:53:a7:58:a1:55:8d:04:fc:2a:aa:ff:2b:08:48:10:86:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
        Validity
            Not Before: Aug 23 06:28:35 2025 GMT
            Not After : Aug 24 06:33:35 2025 GMT
        Subject: CN=1CFBF92DD7692741344A79BCA00D42CBFEA923DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:ab:88:6d:db:fa:59:61:4f:09:b7:c5:8c:
                    95:1a:88:ec:40:24:dd:71:b0:dc:2a:cf:63:58:b3:
                    d8:b9:9c:45:bd:f5:ad:c1:75:68:fc:43:b2:7d:63:
                    67:60:b1:8d:89:45:cd:f2:f7:1f:e9:17:15:c8:c0:
                    2c:c9:78:44:3b:58:86:a3:e3:2f:86:6d:97:f7:a5:
                    45:b9:5b:15:1e:c3:49:d5:d9:1b:ea:2d:b4:15:86:
                    25:00:61:72:be:ce:41:cc:dd:5d:3c:be:6a:9d:43:
                    fc:51:30:66:be:d5:9f:bd:ab:b8:93:29:f5:0a:ce:
                    6b:2c:53:4d:40:ae:34:e6:34:cd:37:22:84:cf:9d:
                    73:ac:d6:d4:45:97:4e:1a:af:0e:b3:7e:f6:a3:1a:
                    03:4a:03:5c:1a:95:91:20:60:2e:b1:8e:7b:85:37:
                    55:4a:3f:1a:f5:f1:1e:55:d9:f9:a3:e6:44:e7:cd:
                    05:a8:d1:19:5e:7c:2a:ad:7f:f9:ed:b4:8e:a8:9c:
                    1d:86:33:37:d0:c9:fe:26:51:0e:70:87:1d:76:41:
                    fd:a3:f2:7e:8a:d2:da:a2:f8:d6:a9:7d:88:ea:53:
                    9a:b4:97:07:4b:94:2a:24:b0:e0:27:af:fd:72:64:
                    61:b6:dd:15:e1:03:b0:35:b6:90:91:15:ca:c1:3e:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FB:F9:2D:D7:69:27:41:34:4A:79:BC:A0:0D:42:CB:FE:A9:23:DB
            X509v3 Authority Key Identifier:
                keyid:29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:25:03:d6:cc:bb:43:a5:b8:77:65:c4:04:93:c8:40:36:66:
         06:74:e1:a6:a3:a5:8a:e2:a3:59:c8:7f:06:8a:95:c4:5b:38:
         f5:7a:a4:18:71:06:9c:ce:87:bb:83:d3:ba:e7:3a:01:fd:98:
         cd:44:c0:1b:b9:24:69:e7:01:37:37:f0:cb:c5:f7:db:da:00:
         86:05:ff:92:db:b4:30:20:f3:de:4a:d0:60:69:62:00:e0:1f:
         26:ab:fc:04:e1:8b:ea:ee:77:50:eb:38:00:d0:5d:41:eb:c8:
         ff:a0:16:8f:36:06:b7:34:75:cb:d2:d9:e9:4b:a5:7a:1b:ae:
         b2:b2:81:bc:5b:ac:54:a0:04:2f:52:dd:ee:0d:41:37:0f:81:
         b9:de:be:bc:e4:b2:9c:1d:b3:4d:8b:7d:c9:75:bf:63:0a:26:
         aa:02:c3:40:d6:82:2c:d1:78:bf:d2:9d:b5:da:b8:f8:de:7b:
         8d:44:af:e0:46:26:7a:1d:cc:5f:ba:20:52:b3:58:43:07:86:
         36:53:05:9a:04:19:6d:9d:05:18:24:a4:8a:5b:91:e8:be:9f:
         b0:9c:24:c7:2e:92:72:4d:7a:d9:2d:df:8f:06:f5:2b:79:9e:
         99:79:94:a9:ff:bb:76:63:31:4c:ab:2b:00:46:c4:23:cc:a8:
         de:20:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:19 2025 by rpki-client