Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
File:                     CD474EAA2CD8D52421F339174CBFE8D756A44685.mft (raw, json)
Hash identifier:          /XN7wFkONGUYRQIB2yHBxOsGs/4bFyA+jBcAa4RMIOA=
Subject key identifier:   8C:5C:08:C1:1D:92:03:0E:A4:80:B7:68:EC:C9:B0:4E:21:CE:CB:80
Authority key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
Certificate issuer:       /CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Certificate serial:       17BCE37A1D0C3F1C74F73A8C26D2363E2679CB77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
Manifest number:          028D
Signing time:             Sat 23 Aug 2025 02:09:54 +0000
Manifest this update:     Sat 23 Aug 2025 02:04:54 +0000
Manifest next update:     Sun 24 Aug 2025 03:22:54 +0000
Files and hashes:         1: 3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (hash: qsmdYLqqE+QpqwIwlqhFUWeaadqymEYPxDfMA75+ank=)
                          2: CD474EAA2CD8D52421F339174CBFE8D756A44685.crl (hash: TagvXONpVgs4jez7D1Juxb57lNLaho6muudfWETfV/Q=)
                          3: 3137372e36362e33322e302f32312d3234203d3e203532393939.roa (hash: EkyUQtUq8ZwCnFXCndOL37rwpzQMGbrVReyyMnswO8g=)
                          4: 323830343a3530383a3a2f33322d3438203d3e203532393939.roa (hash: L2+XaIEkygw5y/1KsdDixOZ1BeoOiNJomxlX0Q3Na9k=)
                          5: 3136382e3139352e36382e302f32322d3234203d3e203532393939.roa (hash: AY6Vd3Nv7x4AtBQqy2GsNC9oQaiTU/aw1T14h+rG1DA=)
                          6: 3138362e3232362e39362e302f32302d3234203d3e203532393939.roa (hash: QqKI63mBNvlFpuiZObn3plPHeWhdbsqcXsxnU2fT8Jw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bc:e3:7a:1d:0c:3f:1c:74:f7:3a:8c:26:d2:36:3e:26:79:cb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
        Validity
            Not Before: Aug 23 02:04:54 2025 GMT
            Not After : Aug 24 03:22:54 2025 GMT
        Subject: CN=8C5C08C11D92030EA480B768ECC9B04E21CECB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:e3:8b:b1:f2:1a:f2:42:41:4a:f7:f0:c9:
                    17:f2:3c:bf:55:a7:15:11:3f:ae:ec:17:f0:2c:50:
                    cb:f4:6d:f0:64:3c:5e:50:3a:c4:6e:04:1a:ca:93:
                    24:aa:e5:d1:1c:f7:27:f8:18:cf:c0:ae:f2:d7:08:
                    c0:8a:c0:14:87:2c:98:b8:fb:61:16:f0:76:09:c4:
                    ed:e3:29:21:4c:04:37:9b:f6:73:73:15:5b:56:c1:
                    44:eb:70:30:45:22:71:46:1d:07:fa:18:a6:fb:cd:
                    93:19:22:81:88:e2:a2:ea:a9:2f:bb:a6:cf:21:7f:
                    ce:5b:ff:52:31:45:8c:37:76:44:52:ca:a3:b8:de:
                    f4:a3:27:af:f8:a5:b4:da:c4:4c:2a:76:f5:95:3b:
                    71:4f:de:3b:95:4d:48:fe:00:eb:13:3d:db:a6:37:
                    49:09:6e:19:76:2c:2c:0d:16:91:de:a3:cb:6e:e6:
                    fb:a4:31:71:29:2d:c8:82:ed:9e:1a:1d:8e:8d:9c:
                    30:da:46:4d:16:3a:4c:6f:25:2e:3f:f0:de:c4:9c:
                    14:9e:98:7b:17:8c:0e:dc:02:7e:52:f2:86:4e:2f:
                    bb:1d:67:81:d8:f5:51:da:0a:7b:8a:c4:8f:d7:eb:
                    60:3e:f6:2b:44:1d:1d:3c:58:8e:85:30:af:b8:b7:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5C:08:C1:1D:92:03:0E:A4:80:B7:68:EC:C9:B0:4E:21:CE:CB:80
            X509v3 Authority Key Identifier:
                keyid:CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:38:3b:8f:99:18:01:f9:d2:26:28:4c:b3:07:90:12:9b:f0:
         7b:ae:35:88:49:81:05:d1:f3:48:f9:08:69:de:2a:55:00:7d:
         54:14:9f:e4:bc:29:b3:30:df:ef:41:3e:c1:d0:d0:19:cb:d7:
         a7:05:01:ab:74:f1:f3:ea:38:60:2d:cd:20:52:a7:91:d7:e0:
         fd:3f:1b:d0:c0:0f:ea:04:a9:a7:4e:77:df:e8:27:2b:75:36:
         9e:cb:3a:be:69:fa:70:7d:60:f0:95:05:85:36:6f:8e:1f:71:
         62:2c:38:94:4e:b0:42:ed:9c:a6:30:aa:4c:a4:cd:5d:83:8f:
         2a:15:39:25:6c:79:01:0d:5d:78:fd:0d:e7:32:94:27:ad:23:
         b9:97:26:f6:9c:f3:b1:a7:56:ae:9d:7e:b0:df:5d:09:f7:ba:
         a7:cd:e7:b5:ce:b3:b9:cc:e2:f0:ea:00:84:d4:da:54:43:41:
         13:b3:f9:88:15:d7:d9:18:10:89:98:06:64:15:74:d2:b4:c5:
         4e:a8:6a:b6:32:24:c9:fa:5b:84:5d:28:23:b2:13:62:2f:f8:
         1b:c9:a7:eb:5b:87:70:34:a8:7b:89:7f:00:f1:e4:a5:42:24:
         3c:ba:bf:e3:60:71:01:a5:6f:04:3c:39:ff:48:a8:e1:3e:87:
         40:f5:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:04 2025 by rpki-client