Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
File:                     DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json)
Hash identifier:          uMlhbEz2YJ/m7ObvZAp+cABRi9E0EnSXpmZUy3MrMq8=
Subject key identifier:   72:35:45:40:D2:2A:CF:EF:CA:24:40:D7:77:89:6F:07:36:6C:65:B0
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       01BFBE75F475B06E84A6034675930F5C04D17282
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
Manifest number:          02D7
Signing time:             Sat 23 Aug 2025 18:00:00 +0000
Manifest this update:     Sat 23 Aug 2025 17:55:00 +0000
Manifest next update:     Sun 24 Aug 2025 18:00:00 +0000
Files and hashes:         1: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: i06R7ZftAjC7a/YY6upqVlOH5minL/+0Kvab9Pct10w=)
                          2: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: GNc+F6TbWukKN0XhMsWv/rTN8LWtZejuTElEGxMA+Og=)
                          3: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: EiFbXmNwfUfEkSI4qCqsU5jU8ePYLs88ZEXUItBxJT0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bf:be:75:f4:75:b0:6e:84:a6:03:46:75:93:0f:5c:04:d1:72:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Aug 23 17:55:00 2025 GMT
            Not After : Aug 30 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:7f:6f:fb:69:62:b5:ec:24:66:06:ec:23:
                    3d:2d:d1:f9:3f:56:48:07:c5:41:30:4a:d6:e7:0f:
                    be:53:93:4a:f1:17:81:21:d7:29:8d:ab:f3:74:67:
                    74:a4:11:7d:92:e1:5e:f9:99:31:76:84:2a:85:30:
                    86:bc:88:3f:06:b5:f3:9a:25:18:7b:06:92:d3:78:
                    78:b0:f6:8d:cd:63:fd:d1:c4:3e:2e:e7:74:49:4a:
                    ab:75:aa:a3:87:26:fa:23:c1:a6:37:3e:5e:5f:57:
                    c9:eb:69:0b:ef:c8:a8:2b:66:50:dc:7d:31:d0:0d:
                    3a:b9:cb:dd:e0:26:0a:9d:b5:9a:34:b8:59:b8:c1:
                    8d:9f:a2:77:6c:46:98:a8:b5:a3:19:2c:27:b8:46:
                    bd:d2:40:58:5a:01:e6:51:a3:c7:48:b9:68:7c:31:
                    f4:c7:79:97:76:3d:8a:22:77:9b:08:95:a5:5d:1a:
                    97:18:cd:50:70:94:77:52:c9:a0:f1:62:0e:d0:41:
                    4f:9e:f1:28:82:f7:47:13:3c:75:ff:66:af:a9:f3:
                    c0:b5:b5:b5:0d:20:cf:c5:5c:51:d0:dc:c8:1e:5f:
                    ac:c6:b0:ab:81:ad:cb:42:02:32:c5:dd:67:36:38:
                    fe:ea:ca:c8:f6:87:51:43:67:9b:ad:b0:c3:14:9e:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:45:40:D2:2A:CF:EF:CA:24:40:D7:77:89:6F:07:36:6C:65:B0
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:70:22:b8:11:00:2d:73:a8:d1:d3:e6:4f:ae:21:4b:2f:
         41:3b:bb:3f:c8:7a:ea:6e:bc:91:4b:72:37:a4:68:8d:bd:2c:
         1b:a6:bb:92:7f:39:98:fd:33:ec:29:e7:55:24:08:8a:c2:5b:
         8f:c1:2a:fa:4c:ea:8a:f4:28:1a:53:91:fc:ee:b7:c2:76:a4:
         a4:a7:d1:ba:35:b6:b7:f0:62:b4:e7:af:6a:92:99:2e:38:df:
         be:cc:b2:13:88:90:bc:9e:1d:53:b2:44:99:ff:67:2f:45:a5:
         01:3c:5a:e7:dd:e3:68:78:6b:11:a3:75:dd:e5:3f:32:f0:3d:
         03:f6:f1:fc:9a:46:fc:14:87:9a:0a:ea:9f:12:ab:35:5a:75:
         8d:80:8a:e3:63:4d:79:fa:d8:65:76:2c:6e:05:f6:0e:25:05:
         ad:d0:23:bc:d9:f0:be:18:74:06:8a:19:0d:0b:c1:20:4f:3f:
         9d:d2:4a:55:f8:d6:84:c0:c8:86:b5:58:32:f9:2d:91:b6:bd:
         ca:fe:1c:7a:93:fe:a7:6e:88:fa:3b:de:17:d3:da:fc:49:5b:
         ef:f2:87:57:54:98:b3:11:8b:17:35:a5:03:ae:6f:d2:52:8b:
         95:f6:3a:c3:f3:19:f6:ba:4e:91:42:16:4a:85:41:40:ca:b8:
         c0:1b:16:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:23 2025 by rpki-client