Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft
File:                     D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft (raw, json)
Hash identifier:          N0Y4qylIejAztvxdvrBkkt/ZGge/a6+MvTWiOHA1ro4=
Subject key identifier:   20:C8:66:1F:17:F6:84:4F:24:76:FD:60:16:F9:3F:5D:BD:78:D6:7F
Authority key identifier: D3:4D:FC:74:62:B9:6F:AC:5C:3E:2C:31:EB:ED:B3:9F:17:F4:B1:40
Certificate issuer:       /CN=D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140
Certificate serial:       3C257BC04457177F898BA6998D858B16A4E841C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft
Manifest number:          02F8
Signing time:             Sat 23 Aug 2025 08:52:00 +0000
Manifest this update:     Sat 23 Aug 2025 08:47:00 +0000
Manifest next update:     Sun 24 Aug 2025 08:52:00 +0000
Files and hashes:         1: D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.crl (hash: LR3/5oYendpKFym+I+ScobajDQGXPntFsJ10XRuy4R0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.crl
                          rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:25:7b:c0:44:57:17:7f:89:8b:a6:99:8d:85:8b:16:a4:e8:41:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140
        Validity
            Not Before: Aug 23 08:47:00 2025 GMT
            Not After : Aug 30 08:52:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:6a:da:8a:60:a2:8a:64:f3:6e:19:f5:e1:
                    ea:f7:04:10:ab:a2:44:9d:28:95:6b:53:04:49:e7:
                    b2:dd:c0:c6:ff:db:88:38:f5:8e:b6:a9:11:e9:36:
                    ec:31:21:03:19:d5:07:cf:7f:eb:60:b6:47:ce:9e:
                    32:a0:3f:f1:1f:db:73:55:3d:a9:50:86:c0:90:13:
                    a9:b5:8f:c4:2b:d2:90:eb:30:e6:06:f7:84:e0:90:
                    cd:57:c4:e5:f3:6c:8d:f9:ed:8d:9a:d6:a0:22:38:
                    21:4f:a7:69:83:6e:a5:e0:17:37:4c:75:2c:65:04:
                    79:e1:9b:6a:45:34:70:66:6c:b0:33:05:e3:5b:f0:
                    17:9f:bb:fd:a9:db:ac:67:29:e7:67:f1:12:79:78:
                    38:4a:2f:2c:c1:b0:04:87:f5:3e:5c:f8:a1:e1:3a:
                    83:0e:fb:7e:5d:23:a0:7a:c8:cf:93:d0:0d:de:01:
                    c5:58:c6:ea:45:ad:ec:00:13:a7:28:bd:5b:d1:08:
                    36:48:fb:90:a2:e9:15:d2:e0:b1:46:d1:cc:18:63:
                    c3:50:06:b2:9e:d6:27:c5:d1:02:27:ff:bf:64:2f:
                    b3:59:36:d6:14:5c:e0:8f:93:51:fe:fa:d6:6e:10:
                    35:e1:22:f6:88:91:92:81:9f:56:4b:19:f2:0f:42:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:66:1F:17:F6:84:4F:24:76:FD:60:16:F9:3F:5D:BD:78:D6:7F
            X509v3 Authority Key Identifier:
                keyid:D3:4D:FC:74:62:B9:6F:AC:5C:3E:2C:31:EB:ED:B3:9F:17:F4:B1:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:5a:0a:e0:38:24:9c:73:ce:6e:3b:1d:d9:17:a9:a7:46:
         53:e3:8d:99:cb:5e:d9:3d:f4:dc:02:4f:02:62:e9:e3:1a:66:
         03:56:f3:c0:e4:75:fd:85:2c:df:35:50:3c:50:66:db:1f:ee:
         ed:00:4c:07:3d:36:7e:cf:de:65:4a:1d:e9:dd:dc:60:2b:a4:
         0b:11:72:9c:42:e5:50:4d:91:ea:d8:c5:04:9f:cd:e5:38:8b:
         bc:8b:38:45:d2:16:92:ae:31:e4:a4:52:f1:a0:4d:2e:27:d0:
         ce:92:47:78:c8:c2:fd:6f:1a:79:8a:07:17:9c:86:c5:6c:d7:
         71:0f:4c:90:9e:41:04:5b:c9:5b:d2:58:22:82:b1:f8:c3:de:
         f1:a5:d5:da:d8:8d:44:ef:db:61:6a:09:1f:e4:0c:ab:0e:c0:
         4c:53:2c:81:07:69:37:bc:f0:c6:ed:e1:00:44:06:d4:4b:48:
         ef:a1:79:d5:59:b1:92:b5:58:61:19:df:78:63:96:4a:02:8b:
         2c:74:e3:67:23:db:19:a8:51:2c:f6:e0:2f:f7:96:99:95:83:
         c6:4e:36:34:2d:97:58:2e:b7:5d:cb:67:53:45:e1:7e:d8:9e:
         df:31:be:27:7b:23:6d:7c:f4:27:1b:8c:62:1c:b1:af:fd:3c:
         5f:4e:a6:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:22 2025 by rpki-client