Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft
File:                     BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft (raw, json)
Hash identifier:          pBjMLWfzbXpecrrIdwEmqy1r9qWWalDMe5TeLAyy9q4=
Subject key identifier:   8F:43:A6:5B:1C:11:68:81:3C:3E:5E:0B:60:1A:FB:D1:CA:6D:20:B3
Authority key identifier: BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
Certificate issuer:       /CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Certificate serial:       11EA7C7A5105A234FE217983AFE91011F39034D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft
Manifest number:          2D
Signing time:             Sat 23 Aug 2025 03:58:09 +0000
Manifest this update:     Sat 23 Aug 2025 03:53:09 +0000
Manifest next update:     Sun 24 Aug 2025 04:36:09 +0000
Files and hashes:         1: 34352e3136332e3234372e302f32342d3234203d3e20323638353838.roa (hash: c/tNGzOtGZPFnebFIyHd/AAf8reMcIiVLETRkzGvcqk=)
                          2: 323830343a353338303a3a2f33322d3332203d3e20323638353838.roa (hash: 8sEIpHgLX8RtYdwQe6RmxRKOLeZ/NA+qXvuy0z8ip00=)
                          3: 34352e3136332e3234342e302f32332d3233203d3e20323638353838.roa (hash: AdEWKquqDfYgiwVzUoblEi/O35AbAXq9OpzZoH5BOiI=)
                          4: 34352e3136332e3234362e302f32332d3233203d3e20323638353838.roa (hash: ZVOflfbLkTLgn4j0Nhc6PoH6JVztl8RtDRXoW/SEQ+k=)
                          5: BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl (hash: fk6WAVIHhiDc2zNJJFKqVWn2dbqbSQd4U9Yyf525RLY=)
                          6: 34352e3136332e3234352e302f32342d3234203d3e20323638353838.roa (hash: SWojAlWPlrh2br1Os+rdbQtYeZ8ttN8wcykwiUroyZ4=)
                          7: 34352e3136332e3234342e302f32342d3234203d3e20323638353838.roa (hash: nw7VCLvQ1+Eb6e48ImLAGXVqFbng39rHHzpXdy+TGGg=)
                          8: 34352e3136332e3234342e302f32322d3232203d3e20323638353838.roa (hash: ibajYefvs24cWnQcLXdMC3temrIgPpeed/n6aaWFdJg=)
                          9: 34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa (hash: fvtzLdCBFs2uVAcnvsgpWY2KCBITPvGTDivs3ijCHTU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl
                          rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ea:7c:7a:51:05:a2:34:fe:21:79:83:af:e9:10:11:f3:90:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
        Validity
            Not Before: Aug 23 03:53:09 2025 GMT
            Not After : Aug 24 04:36:09 2025 GMT
        Subject: CN=8F43A65B1C1168813C3E5E0B601AFBD1CA6D20B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:44:83:cb:7e:2e:36:ea:95:84:ad:f8:66:
                    dd:1b:fd:19:08:c9:f5:ed:ce:aa:a6:a2:af:5c:27:
                    c6:63:5f:9a:24:fb:bf:2d:66:94:e6:c4:44:51:c5:
                    18:fc:37:8f:46:ed:fd:7c:61:67:c6:96:d3:20:4e:
                    e3:3b:c1:ce:ac:72:4e:25:bb:84:8b:af:be:1f:c1:
                    bf:a6:62:4a:69:00:e9:8e:b6:6e:66:96:79:2d:de:
                    0c:82:e1:dd:db:86:34:b5:c8:2d:a4:55:45:5d:e3:
                    1a:c0:f9:e3:9c:bf:89:a5:fe:11:24:94:a9:a7:a6:
                    08:de:fa:94:95:91:02:53:76:61:45:ac:fa:e5:b6:
                    d1:c8:ab:62:46:25:83:5d:2a:b3:af:d1:c2:2c:de:
                    39:ff:82:19:56:e2:a3:f2:04:85:43:2a:a7:01:ee:
                    63:dc:ee:cf:cd:29:12:d4:e9:21:3d:e0:d6:c0:c8:
                    22:38:ba:4c:34:05:97:d8:22:e7:02:b4:75:8c:95:
                    e4:84:88:55:e0:9d:58:4f:36:98:ba:24:e6:64:47:
                    5a:f8:49:93:9b:35:4c:1f:33:99:45:10:96:cb:d5:
                    c2:94:0f:d9:68:2a:7b:f1:9c:94:7f:0f:83:5e:b2:
                    ee:dc:d2:37:a5:0b:c3:9e:96:31:1d:e0:ec:75:8a:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:43:A6:5B:1C:11:68:81:3C:3E:5E:0B:60:1A:FB:D1:CA:6D:20:B3
            X509v3 Authority Key Identifier:
                keyid:BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:8f:70:f5:fb:c7:cf:2c:ff:47:15:c6:a0:47:4c:48:be:
         1a:82:fb:1f:c5:93:00:eb:b4:36:8f:17:ba:0a:df:05:67:3a:
         71:c2:cd:8d:b8:1c:5e:6b:29:db:ec:e0:73:e8:61:38:d3:40:
         82:86:77:a1:d7:55:d0:48:9e:3c:b8:ff:76:1e:30:6d:72:1f:
         1f:19:ab:94:d2:c2:6a:da:00:1c:73:8a:8b:19:5c:34:75:51:
         13:b4:5c:71:f7:20:69:1a:58:da:27:68:f8:10:69:9b:93:d9:
         fb:d7:51:c3:0b:e7:a9:f6:6d:37:44:02:c9:bc:07:c3:9a:26:
         4a:95:f6:ab:87:9a:c9:83:bd:cf:c8:c3:fb:ea:f9:83:34:e6:
         01:f5:a3:44:85:10:33:a6:84:77:d1:92:fd:4b:38:fb:b3:a1:
         54:0c:cf:b5:4d:90:4d:15:5f:48:08:53:9a:5c:01:c7:7e:4d:
         b9:bc:44:62:f9:72:6f:9d:20:87:7f:9b:1d:f1:6f:95:4b:14:
         67:b4:d9:b7:2a:7a:f9:7b:22:5f:d6:9b:d0:fc:a6:fc:3d:25:
         57:05:92:26:f1:3b:9b:8a:f4:7d:b7:3f:55:0b:79:30:ba:8a:
         5f:cd:4a:e7:82:d1:80:18:31:26:ee:ae:57:d7:0d:48:99:02:
         a4:e4:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:27 2025 by rpki-client