Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
File:                     3170E59F647D12F2C01381F789FEA19B94A7EA94.mft (raw, json)
Hash identifier:          ftNSqSzM5ukbplfBaWL8/LPmlXtjPYyNHFiXQsV+4DE=
Subject key identifier:   CA:9D:EA:34:C6:89:0B:19:51:59:9A:DE:61:59:CD:87:A6:D7:0A:EA
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       360998C8DE5947CB7E5B2D60FD2A5C67189C44D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
Manifest number:          018C
Signing time:             Fri 22 Aug 2025 18:25:18 +0000
Manifest this update:     Fri 22 Aug 2025 18:20:18 +0000
Manifest next update:     Sat 23 Aug 2025 22:22:18 +0000
Files and hashes:         1: 3170E59F647D12F2C01381F789FEA19B94A7EA94.crl (hash: cCweXpwbsQSjTYYCndlEwz1yoMjsYcMaNIuppR/p8nQ=)
                          2: 323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (hash: VHbLnBh+MIcqX2rOknoM+7yXE3n3B6fYN0D/ZGd03VM=)
                          3: 323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (hash: lgKZpEMQXJgbbGxAppKdGMzEqXxmi5YjRfS1hmqnWqk=)
                          4: 323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (hash: Bm9Kcd02phGiG7AWOn0ma8NcB+QmfSZ46IQIKek0iV4=)
                          5: 323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (hash: dg++jRiYgNDqqn7koG7VCPM8YtEa8GnVfBh/0VMl//I=)
                          6: 323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (hash: p8mxdsJqd7Z6f1JB1QLr6T+6+Rpg0LQLBtyRI4domro=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 22:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:09:98:c8:de:59:47:cb:7e:5b:2d:60:fd:2a:5c:67:18:9c:44:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Aug 22 18:20:18 2025 GMT
            Not After : Aug 23 22:22:18 2025 GMT
        Subject: CN=CA9DEA34C6890B1951599ADE6159CD87A6D70AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0d:8f:74:82:fb:a1:8d:ff:d5:da:11:62:89:
                    0e:26:94:2c:f2:e3:fc:84:07:b7:8d:5d:e2:31:52:
                    dc:de:e8:a0:80:32:21:8f:99:90:1a:ff:4e:17:92:
                    aa:59:68:77:ea:4f:17:26:41:4e:d3:3b:ea:04:16:
                    77:76:48:48:fc:f4:b9:40:c7:8e:aa:a4:15:7d:28:
                    56:af:04:5d:e5:0d:aa:35:f8:4f:22:16:4b:e2:22:
                    08:5f:2f:c0:b4:da:8a:53:06:d9:e5:8d:4f:76:46:
                    ac:5a:7a:9c:3e:9c:0b:18:c2:59:26:b6:a6:6a:33:
                    f8:29:a6:37:b5:fa:36:79:db:40:5f:08:3d:06:67:
                    a5:12:35:b6:3c:4c:b3:05:d4:59:a8:dc:71:eb:7b:
                    33:72:3f:27:17:76:53:5e:b6:86:73:c1:ef:35:88:
                    c8:79:93:07:ad:7f:6e:b6:1a:95:be:bc:a3:fa:24:
                    0c:9b:07:f6:94:50:f0:12:50:ee:bc:f6:17:ea:a6:
                    87:3c:16:1c:c0:c7:ce:90:f6:c5:34:ae:c0:73:dc:
                    67:ba:d7:79:ab:2b:c8:2c:94:4f:4f:34:06:33:bb:
                    94:c7:11:a2:5a:0c:c2:08:08:bb:a7:31:20:4c:43:
                    16:3f:bf:87:e2:c4:2f:68:aa:5f:39:f5:82:95:7f:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:EA:34:C6:89:0B:19:51:59:9A:DE:61:59:CD:87:A6:D7:0A:EA
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:fe:a6:80:ff:fc:3f:31:6b:43:c9:f3:96:83:5f:2b:07:
         2a:16:ed:a6:52:c7:d2:66:01:2f:d9:13:d6:65:0f:11:02:13:
         79:ce:f9:30:e4:fb:b0:8d:c4:c8:d7:39:06:aa:9a:2c:a1:bb:
         cc:b7:19:45:39:35:cf:77:eb:ef:25:26:5c:54:41:3a:3b:9c:
         52:f3:ba:b5:17:9a:19:28:c7:50:b7:b6:ff:9e:51:55:41:57:
         29:9b:9f:15:53:2f:3b:cf:f2:c1:05:6d:59:52:48:ad:02:f2:
         d4:34:85:4b:35:24:b0:e6:f2:8f:f5:0f:4e:a1:4d:d1:dd:82:
         3e:30:39:cb:e5:a9:e1:f1:ec:4c:d9:12:8d:61:4f:55:70:8d:
         a9:62:8c:af:7f:a0:00:ef:0f:b8:10:c1:05:6d:5e:2c:7d:4a:
         5a:c2:c0:2e:12:e8:7a:14:12:9f:23:b5:93:6e:9f:36:7b:63:
         96:7d:20:5b:b6:b5:d8:fb:e4:3d:14:da:ef:4f:3f:4e:54:55:
         2b:17:83:5a:a9:78:61:44:7f:f6:da:e4:03:e0:6c:1b:2d:37:
         a4:52:92:bc:c3:c1:d9:34:25:2b:c7:04:75:b0:22:72:72:e1:
         20:47:a6:7d:9b:56:a5:ff:6d:85:8c:75:e9:eb:fc:60:9e:71:
         26:09:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:27 2025 by rpki-client