Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          8DsEiXbg2BkHgWw7QHxCFl8DZl3M2b1mbvl9YZtHOrE=
Subject key identifier:   AF:FC:94:81:33:D6:D0:46:75:3A:3A:21:CC:04:71:C7:56:76:3F:D7
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       350888CBAE6DB43B6B909EE3EA2768774EFDD02C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          02A3
Signing time:             Sat 23 Aug 2025 15:23:05 +0000
Manifest this update:     Sat 23 Aug 2025 15:18:05 +0000
Manifest next update:     Sun 24 Aug 2025 19:06:05 +0000
Files and hashes:         1: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          2: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          3: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: eMrxCHXNxhlctg/ipvALSSynTVLKnXZTMfeirqPX124=)
                          4: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          5: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
                          6: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          7: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:08:88:cb:ae:6d:b4:3b:6b:90:9e:e3:ea:27:68:77:4e:fd:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Aug 23 15:18:05 2025 GMT
            Not After : Aug 24 19:06:05 2025 GMT
        Subject: CN=AFFC948133D6D046753A3A21CC0471C756763FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:83:4d:2d:55:28:31:d6:99:9a:c2:92:81:
                    06:e7:d4:70:44:7e:fe:78:50:84:43:d1:ef:f2:dd:
                    71:c5:c8:10:a2:c9:6a:89:5d:bb:60:cf:3d:64:0e:
                    b4:92:60:d8:5f:20:1c:7d:37:2a:b7:c9:50:57:e7:
                    92:78:2f:36:65:41:c1:3a:96:8d:7e:01:e5:70:b9:
                    4d:49:99:7f:87:26:ba:f6:f2:2a:11:1c:b1:30:53:
                    ad:f1:c2:7e:dd:3a:74:03:ce:21:6d:dd:24:9e:6f:
                    fb:0f:7f:7b:04:24:3e:95:3b:0d:74:ff:9d:fc:22:
                    08:01:55:dc:28:66:b4:d9:c2:a7:35:05:48:a1:c1:
                    bc:25:53:23:70:e0:2a:f7:b9:60:1e:f3:c9:a7:d7:
                    f3:b5:77:ea:34:ba:09:d9:82:c1:c5:17:9e:5d:16:
                    e2:a1:b2:a9:25:59:38:37:2b:ea:94:e3:c4:df:b8:
                    66:3d:96:52:1b:9d:63:00:ab:8e:98:76:1f:19:0e:
                    a9:ab:97:2f:79:94:b3:0b:53:7b:df:79:8d:65:47:
                    60:63:ba:6f:73:76:6d:2b:a0:36:25:12:0c:69:31:
                    a4:e3:6b:cd:77:40:43:1a:c5:2c:25:eb:9e:8f:f5:
                    9e:3c:89:b8:42:7e:69:c8:ba:24:c3:c7:d6:39:f3:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FC:94:81:33:D6:D0:46:75:3A:3A:21:CC:04:71:C7:56:76:3F:D7
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:1b:e8:a9:f8:66:3e:f6:84:a6:04:53:2d:d5:e7:0c:df:
         35:fc:b7:c2:a5:62:48:60:a9:d6:b9:d3:41:77:a9:35:69:78:
         69:d6:5d:8a:73:d0:16:83:81:53:6f:7f:5b:e8:46:7f:51:52:
         53:82:8c:d9:64:76:75:82:4c:61:37:89:85:11:32:cf:bc:9b:
         90:5b:65:80:e6:39:7f:3a:e5:3c:77:e9:eb:eb:fd:06:10:65:
         af:7a:69:c1:3a:c0:64:77:7b:b8:69:1e:0d:f1:b8:ad:ff:bb:
         65:77:90:d7:7e:ab:13:97:bf:f9:a4:21:7b:ec:f3:42:02:fe:
         00:2c:d4:b3:57:f6:3d:b4:6f:00:21:0b:87:7c:b9:ba:3b:8a:
         bb:f5:8b:17:71:fa:b9:b8:3e:03:50:25:97:e0:ea:63:1b:93:
         97:0f:19:5c:9a:c2:84:7f:1d:d7:3d:b4:be:e8:3a:33:33:2b:
         d3:c4:38:b2:fd:f7:6e:74:93:b3:02:03:be:3c:58:4a:1f:32:
         91:40:1e:d8:a9:c7:5f:4d:83:fc:be:45:86:ee:d4:b2:d2:a6:
         60:82:a1:eb:1a:11:79:00:2f:86:d4:c7:0f:18:63:55:b5:0d:
         e5:00:c8:6e:f7:b5:f6:4e:f9:c7:b2:32:98:e2:ce:75:b7:45:
         13:d8:1e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:15:43 2025 by rpki-client