Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
File:                     AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft (raw, json)
Hash identifier:          Daho7FDPj68lAe4gtujOVzp/8QT5GmXPMJtuBLBOAnQ=
Subject key identifier:   4D:AD:84:C2:73:1D:1B:84:20:A0:4F:DD:CE:62:AC:3C:4E:C2:5F:56
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Certificate issuer:       /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial:       4ECB7D5515570D2DBA81CFB2D69B3CCD1732C9F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
Manifest number:          02B5
Signing time:             Sat 23 Aug 2025 05:53:51 +0000
Manifest this update:     Sat 23 Aug 2025 05:48:51 +0000
Manifest next update:     Sun 24 Aug 2025 09:14:51 +0000
Files and hashes:         1: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: 8Gs+UV6nO+bLlDoxgdD+eVl74rMk1Zi2fSdRQ1UAf1M=)
                          2: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: 2p6uFFtOxrFLgwvk+5zkCXG63pr08f9yEGYoLV1hAJY=)
                          3: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl (hash: NUqj11WFQzLMa5XI8tUQaX9qar/FPiRax1tN8gsG7lo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
                          rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cb:7d:55:15:57:0d:2d:ba:81:cf:b2:d6:9b:3c:cd:17:32:c9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
        Validity
            Not Before: Aug 23 05:48:51 2025 GMT
            Not After : Aug 24 09:14:51 2025 GMT
        Subject: CN=4DAD84C2731D1B8420A04FDDCE62AC3C4EC25F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:36:a9:8f:8f:22:01:f3:4c:d8:3e:d0:a5:
                    bb:93:af:4a:09:cd:90:be:fd:22:88:15:83:b9:a6:
                    3c:9f:d6:18:ee:4e:8d:60:2c:73:38:c4:e4:8c:45:
                    81:f6:cb:37:31:44:17:93:09:48:65:10:b0:71:a4:
                    51:17:d8:ba:06:4b:a1:04:67:50:1c:2c:4c:18:30:
                    02:d9:37:74:22:49:9a:ba:c3:e3:9e:11:7f:9b:57:
                    4c:b5:9a:76:3f:80:f7:75:aa:c8:44:c0:3b:ea:d5:
                    f5:1c:26:5c:6a:d9:40:0a:a9:b0:7f:63:04:2a:60:
                    e2:12:91:96:8b:d9:46:05:8b:f0:76:23:97:1c:fa:
                    e3:b8:0d:22:20:e8:4c:f2:12:dc:8c:9f:8a:a1:10:
                    70:d4:51:8f:fe:ff:21:84:02:bf:72:9c:46:1d:a9:
                    c8:b4:32:51:c8:ee:49:d6:e6:4d:f2:77:50:19:8a:
                    f1:54:6b:a4:be:9e:0c:12:8b:4a:b5:83:d0:12:9a:
                    f8:02:b9:af:ce:1d:53:d0:69:ec:82:c8:b2:88:0b:
                    77:cd:5a:5b:57:3c:84:1b:11:08:3a:03:9d:3f:15:
                    40:8e:49:d1:78:de:97:af:fb:dd:65:a9:b9:d8:06:
                    93:7c:38:39:33:ee:98:08:49:62:8f:48:eb:fd:a3:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:84:C2:73:1D:1B:84:20:A0:4F:DD:CE:62:AC:3C:4E:C2:5F:56
            X509v3 Authority Key Identifier:
                keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:29:fe:67:95:af:0c:47:8f:77:b7:f8:17:71:7b:87:87:f6:
         10:f7:e8:28:89:cc:8a:30:39:25:d6:67:53:ee:f7:ac:11:fc:
         87:74:dd:3f:a8:7f:24:cd:33:53:bc:1d:3f:db:48:9b:4c:bf:
         cd:be:05:a5:7a:6b:38:13:47:3d:6f:29:fc:81:89:f5:3d:fa:
         78:49:bb:20:0f:89:23:0e:1e:e1:3a:49:6f:2b:fc:9f:4e:0e:
         1c:b7:06:00:8e:6d:81:c0:01:25:7e:91:76:b9:43:61:c3:dc:
         28:99:e5:80:54:51:e9:47:16:51:c4:2d:80:6d:26:26:04:70:
         6f:1b:9c:6f:c2:b1:d2:5f:8f:cb:74:0d:e9:61:86:76:d1:05:
         d2:9d:38:96:39:e9:9e:e2:5f:fd:aa:05:d4:59:e3:f6:58:0d:
         bf:d1:55:4c:63:f3:97:5d:6b:66:7d:4d:93:0f:30:fd:ae:35:
         2c:f5:ce:9c:bb:d3:e9:21:c1:83:8f:0c:0e:ef:8f:c8:cf:57:
         21:85:e5:d7:b1:95:44:e1:6e:0c:2f:87:96:7a:95:29:6e:dc:
         0b:73:d5:ec:a6:91:19:e2:07:ae:b2:ed:a1:11:ff:89:85:5b:
         15:70:2f:94:02:01:05:ce:3c:69:b6:c1:f3:c7:36:15:b7:26:
         de:b4:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:29 2025 by rpki-client