Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
File:                     424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json)
Hash identifier:          JJSdSKUFpL5JS3DWrFzxmDtlk4SE++9q+3ftHje9WOk=
Subject key identifier:   A9:2B:F9:2D:07:E8:9E:39:6F:FE:9A:3D:FA:44:B0:8B:08:57:00:1C
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       3F668BF2F20E554C85149604ECE0589E93BD724E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
Manifest number:          02A7
Signing time:             Sat 23 Aug 2025 17:17:58 +0000
Manifest this update:     Sat 23 Aug 2025 17:12:58 +0000
Manifest next update:     Sun 24 Aug 2025 19:52:58 +0000
Files and hashes:         1: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: 4KZYxgu/Z/9GgrN8i5YNIsWBd+7nRwF/eann8S1YVGU=)
                          2: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: 7r+Xqx/3Ikt4rtLv83psn8pipT9hrgRG/E5ImfTJ3fQ=)
                          3: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: 5cj96KlJbzJ1TR2L9M79QbupXCkYrhc/qdbHoSfuhP0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:66:8b:f2:f2:0e:55:4c:85:14:96:04:ec:e0:58:9e:93:bd:72:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Aug 23 17:12:58 2025 GMT
            Not After : Aug 24 19:52:58 2025 GMT
        Subject: CN=A92BF92D07E89E396FFE9A3DFA44B08B0857001C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:c5:ae:73:a3:e9:b0:86:04:0c:c2:a1:17:
                    71:24:15:d5:0e:73:e3:05:db:e2:01:6b:67:9a:14:
                    bc:cc:dc:9d:07:e4:cf:41:f9:94:1d:4d:18:cf:1f:
                    22:d7:54:7e:ae:d8:61:8a:95:90:c8:02:c2:77:43:
                    24:34:30:16:73:5c:9c:4d:91:f9:d8:04:bc:1d:0a:
                    6f:f9:da:f1:63:44:65:c7:2d:35:69:2a:0d:9f:26:
                    b6:27:83:5e:7d:f8:c8:16:b3:60:81:e2:24:97:2f:
                    8c:de:c3:d9:15:d8:1a:a8:d7:7a:f7:27:47:55:50:
                    46:64:e6:2a:75:87:5f:06:1e:8c:7e:c6:8f:5f:59:
                    7a:3c:c7:7f:94:7b:74:df:7f:43:e0:21:44:0d:3c:
                    be:67:5b:07:4c:a0:24:be:6b:4f:6c:9e:6e:0c:ae:
                    1e:88:d5:81:22:61:b8:28:a2:13:53:90:60:fb:ae:
                    8e:c4:f9:bb:13:ff:34:bb:0b:52:cf:c0:84:f8:7b:
                    7f:0d:8e:2f:bd:61:d0:55:c3:98:f1:bb:4f:e7:67:
                    8d:60:8e:15:19:40:ac:eb:b1:f1:ce:e3:41:e1:36:
                    a6:54:66:7a:33:c5:25:ed:12:4d:76:e6:66:74:30:
                    96:9a:62:52:16:62:6c:65:22:f5:ae:52:51:94:5a:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2B:F9:2D:07:E8:9E:39:6F:FE:9A:3D:FA:44:B0:8B:08:57:00:1C
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:71:78:5b:7e:89:ed:15:06:65:be:fb:f8:22:13:75:9a:
         ec:2b:5a:fd:c7:7a:3d:8d:c2:df:9c:9d:75:67:e0:f3:6c:1f:
         97:b6:c8:bd:58:e7:8d:f3:af:13:ad:1b:c1:71:af:03:bd:bd:
         36:5a:01:75:74:f7:37:2c:07:ad:6a:f7:bd:30:20:aa:d2:b4:
         a7:b3:ed:79:af:b7:40:f7:a6:9a:4d:91:bb:fb:41:21:28:83:
         26:38:b4:bc:f9:92:70:f8:21:c2:28:83:51:c2:5c:fb:5e:d5:
         2d:08:4c:73:ca:41:9a:02:94:09:99:1a:da:97:41:07:23:6e:
         8d:63:76:cd:91:d6:2d:e5:04:b3:0d:1b:de:e9:6d:70:c7:78:
         0a:b3:6d:37:44:f2:9e:84:dc:aa:6c:62:d0:ce:b0:50:d7:e8:
         94:52:e5:2a:80:e8:b2:dc:af:5b:9f:0d:06:63:99:32:ed:7f:
         d9:85:d4:59:d2:ed:0d:5c:28:51:20:fe:43:b1:54:65:3a:2b:
         75:e4:6e:f4:51:bb:69:42:37:ad:79:2e:68:ee:fa:89:0d:61:
         26:2f:a2:be:c9:98:9c:18:55:bc:1e:8d:fd:97:7e:48:54:f6:
         83:62:5e:4d:af:3c:03:f1:71:c4:ae:3b:a3:ab:19:76:9e:d3:
         87:ca:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:33 2025 by rpki-client