Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.mft
File:                     933BCEC9EF3E6838B525214C2D8A2C537C80D35C.mft (raw, json)
Hash identifier:          KOAav8r/MZqGGdCt2EyeZXDtPE4KAnQCww2DeXNaG14=
Subject key identifier:   7B:49:AC:B7:C3:DE:B9:B5:EF:54:CF:3C:26:25:A0:0B:F9:C8:A9:03
Authority key identifier: 93:3B:CE:C9:EF:3E:68:38:B5:25:21:4C:2D:8A:2C:53:7C:80:D3:5C
Certificate issuer:       /CN=933BCEC9EF3E6838B525214C2D8A2C537C80D35C
Certificate serial:       4AE505A030D9A127AF408834365A40768E452BA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.mft
Manifest number:          A2
Signing time:             Sat 23 Aug 2025 02:06:06 +0000
Manifest this update:     Sat 23 Aug 2025 02:01:06 +0000
Manifest next update:     Sun 24 Aug 2025 05:58:06 +0000
Files and hashes:         1: 933BCEC9EF3E6838B525214C2D8A2C537C80D35C.crl (hash: wV+wKXOuinx6wkfxoazVUbQ2Lmv0boHhBroVbmjpI9k=)
                          2: 3137372e32332e302e302f32312d3332203d3e20323632383836.roa (hash: oA2zq7g6at9WgH4f7Ys2Cqjhh1uigdwYTWrefaCcyAA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.crl
                          rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 05:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:05:a0:30:d9:a1:27:af:40:88:34:36:5a:40:76:8e:45:2b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933BCEC9EF3E6838B525214C2D8A2C537C80D35C
        Validity
            Not Before: Aug 23 02:01:06 2025 GMT
            Not After : Aug 24 05:58:06 2025 GMT
        Subject: CN=7B49ACB7C3DEB9B5EF54CF3C2625A00BF9C8A903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:b0:53:1f:b3:68:ef:d3:16:88:f5:f4:25:
                    50:01:f0:7a:65:15:ac:9a:96:6d:23:fc:91:97:74:
                    4f:66:d9:7f:ff:ff:81:57:4a:60:09:71:62:f1:79:
                    d3:c7:2e:07:53:7e:f9:5d:1e:28:6e:28:4e:bd:d0:
                    00:fe:6c:c4:5b:23:fc:5b:b5:78:5c:9c:54:5f:12:
                    56:50:90:db:30:be:ba:a5:c1:4b:77:ae:81:38:35:
                    6f:f6:ca:0e:7c:31:10:6d:ce:a0:51:74:fc:f2:ac:
                    ea:42:26:81:d6:26:e4:c3:91:b1:bd:2e:12:71:74:
                    40:50:15:4e:c4:7e:6b:41:e7:d7:a0:25:75:da:e5:
                    58:8b:ec:0b:b6:b7:61:4e:e9:a1:ea:3f:ac:bb:f1:
                    3a:d7:b6:b4:97:17:c4:61:59:94:ea:44:80:18:fe:
                    b9:ec:10:ad:10:4f:ad:69:f9:1e:0d:82:b8:e6:ff:
                    0c:28:35:b4:d9:91:be:86:52:a0:6f:83:08:b7:06:
                    e3:ed:f4:e8:07:4c:e5:e8:55:49:44:dc:8a:57:6f:
                    f3:d5:99:49:0c:9b:73:f7:e4:ad:08:e6:de:d1:6b:
                    c3:9e:42:27:54:9a:9a:01:76:51:3c:f8:ac:92:ab:
                    45:a7:f6:c4:53:e7:38:06:b5:b7:67:b8:36:3e:0d:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:49:AC:B7:C3:DE:B9:B5:EF:54:CF:3C:26:25:A0:0B:F9:C8:A9:03
            X509v3 Authority Key Identifier:
                keyid:93:3B:CE:C9:EF:3E:68:38:B5:25:21:4C:2D:8A:2C:53:7C:80:D3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:54:95:a4:ce:18:b0:95:4e:69:95:2f:56:04:61:9f:cb:5b:
         4f:1c:7e:d8:8c:66:2f:70:4e:68:44:7e:88:1c:0b:f6:9a:e3:
         33:5d:c9:27:57:fe:e4:1d:a4:e3:20:6f:59:74:90:4b:2a:bc:
         3d:f5:aa:66:5c:93:59:fa:38:96:23:17:70:61:1d:5f:00:bd:
         d3:28:65:8f:bf:46:79:73:71:01:6a:25:ba:7a:20:8d:d7:82:
         fa:08:09:34:4d:f0:08:c3:38:62:14:ad:2b:dc:f7:c5:ab:9a:
         10:de:85:ec:41:7f:7f:c2:82:50:76:2e:87:da:be:d5:39:eb:
         ee:f3:02:8d:64:e0:a8:bf:c7:67:a5:0c:7c:21:5e:bc:05:2a:
         36:f0:a6:b2:bf:fe:b2:24:6f:09:30:80:13:af:cf:f2:a8:1d:
         bb:81:6b:fe:ac:56:02:9b:b9:bb:b9:b8:6b:ad:4c:2c:88:bc:
         05:a4:00:9e:e3:b9:e5:a3:0b:ea:cc:da:00:1b:cb:09:c1:64:
         0e:d5:5f:b8:16:2e:f3:0f:69:5e:10:6f:29:b5:49:54:3d:7d:
         3c:9d:54:cc:62:45:df:eb:33:24:6e:f2:60:c3:48:8a:15:4a:
         0c:0d:63:aa:65:a1:59:a6:c2:10:7f:b9:97:9c:bb:df:dd:08:
         a5:06:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:38 2025 by rpki-client