Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.mft
File:                     85AA1AADB861F5B21F30CB23D64C7291D94EA277.mft (raw, json)
Hash identifier:          lqi8P/ZaBHESnbV1lGHq9oR4pU/mZZGWbvGZUByX3Fk=
Subject key identifier:   47:96:C1:A5:50:B5:77:C8:D7:B4:A7:72:D1:B8:60:77:49:C2:EA:23
Authority key identifier: 85:AA:1A:AD:B8:61:F5:B2:1F:30:CB:23:D6:4C:72:91:D9:4E:A2:77
Certificate issuer:       /CN=85AA1AADB861F5B21F30CB23D64C7291D94EA277
Certificate serial:       548CE6541477E7CD193006BE027299355F570C6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.mft
Manifest number:          46
Signing time:             Sat 23 Aug 2025 02:00:00 +0000
Manifest this update:     Sat 23 Aug 2025 01:55:00 +0000
Manifest next update:     Sun 24 Aug 2025 04:05:00 +0000
Files and hashes:         1: 85AA1AADB861F5B21F30CB23D64C7291D94EA277.crl (hash: dfI74z4US3nUWf8zr7+nYxxP40XZRZ8l5kUHHyrFj/w=)
                          2: 323830343a383030383a3a2f33322d313238203d3e20323731373235.roa (hash: mDkyoTvChvLyd1Wqb2ug3HgYmc4bk8uIvvXY7Hyan8E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.crl
                          rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8c:e6:54:14:77:e7:cd:19:30:06:be:02:72:99:35:5f:57:0c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85AA1AADB861F5B21F30CB23D64C7291D94EA277
        Validity
            Not Before: Aug 23 01:55:00 2025 GMT
            Not After : Aug 24 04:05:00 2025 GMT
        Subject: CN=4796C1A550B577C8D7B4A772D1B8607749C2EA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:ad:0d:d7:a2:74:fc:89:1b:25:51:7c:82:
                    8d:d0:32:a1:51:47:8b:2d:24:63:ad:83:d8:9f:a7:
                    aa:16:93:60:f3:94:74:69:b5:8d:d3:8c:c9:15:6c:
                    c8:d7:be:1e:2a:3c:24:8a:8f:3b:ee:f4:ae:20:d8:
                    24:ba:3d:7a:e6:17:3f:36:69:9a:19:e9:41:9e:b9:
                    e8:9e:32:86:7a:b0:7b:a4:01:d7:1a:29:1d:12:f9:
                    68:e7:2e:9a:81:64:d5:fa:67:fc:cd:b2:48:24:fd:
                    bf:92:e5:a3:9d:4a:db:72:85:c5:20:9e:46:1a:56:
                    fa:bb:b1:d0:ab:67:ff:2c:09:f0:1d:bd:9c:c3:99:
                    f4:cb:81:ef:1d:64:87:b7:4b:ee:ec:96:a7:83:b8:
                    ae:7d:c7:9e:a3:47:89:ec:91:43:f8:e6:8e:25:6a:
                    1b:f3:9f:86:be:49:2a:a6:26:a9:0c:0a:c7:80:12:
                    e0:55:c8:a7:91:a8:07:b6:8d:e2:f4:8c:9d:7a:16:
                    fd:bc:65:20:e5:12:24:d0:9c:cc:40:56:c7:eb:d8:
                    03:66:64:8a:10:a0:d3:f2:8a:99:a2:bf:75:29:d9:
                    32:d8:d2:78:71:3a:85:8c:11:20:5c:98:5d:1f:74:
                    14:04:88:a6:95:86:b0:96:e8:83:37:a3:ef:af:37:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:C1:A5:50:B5:77:C8:D7:B4:A7:72:D1:B8:60:77:49:C2:EA:23
            X509v3 Authority Key Identifier:
                keyid:85:AA:1A:AD:B8:61:F5:B2:1F:30:CB:23:D6:4C:72:91:D9:4E:A2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:17:a6:00:8b:46:08:a4:4f:b8:3c:46:54:69:5f:43:5f:
         35:2f:1f:de:a9:78:a3:9c:27:bb:89:46:59:76:4c:a1:24:d0:
         5d:96:d8:9d:10:72:77:08:94:0c:57:a2:11:21:38:28:05:d1:
         c2:99:8f:78:7e:7b:45:fa:10:d6:56:7a:6b:bf:37:43:12:b5:
         78:95:ce:c6:9c:dc:3e:97:f5:3e:55:5c:2f:93:9a:46:f9:27:
         b7:14:d5:3a:09:f6:1b:b9:c2:00:12:23:b6:9f:3d:c4:39:50:
         55:4f:42:b2:f2:46:e4:3f:b5:4a:e5:93:8e:42:4b:a0:4f:4f:
         97:53:c1:1e:b6:89:a9:ad:5d:3b:cd:d2:ee:d2:2b:16:95:55:
         68:d4:fe:1e:58:b5:e7:c3:24:7f:5a:ba:f5:5e:c0:cd:5f:6d:
         b1:7b:e5:d8:80:7e:04:d4:7b:39:f1:67:47:a4:fe:a9:fe:78:
         56:ec:a1:7f:d3:06:02:25:82:0c:21:ad:75:21:12:29:92:04:
         42:73:55:ba:d9:83:15:2b:8d:e3:78:e2:c9:98:d0:2f:e1:1a:
         8b:6b:c7:d3:8b:f6:63:95:0c:9d:e3:0e:ac:af:39:d6:b5:f0:
         9b:8e:ca:bf:22:82:61:fe:6b:1a:8f:97:a1:66:14:7d:67:63:
         8b:7f:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:07 2025 by rpki-client