Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
File:                     0F9708322570D07CA4BE75EF484B6831664FE864.mft (raw, json)
Hash identifier:          9MYnhPt/gB/EExGrlbOw010uE8DSO+v+X0SYcVHrZQI=
Subject key identifier:   AD:B4:89:89:D2:F9:DA:48:D5:49:5F:2C:0D:8A:72:A4:C2:34:BE:11
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       411BC9872F6F5E8B14A80A4342E9079E3E188618
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
Manifest number:          02AA
Signing time:             Fri 22 Aug 2025 19:15:04 +0000
Manifest this update:     Fri 22 Aug 2025 19:10:04 +0000
Manifest next update:     Sat 23 Aug 2025 19:30:04 +0000
Files and hashes:         1: 323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (hash: 5lvhdKKVxPcZ3/nd628FoXyR2ITdSGX90BwjYAK8rAQ=)
                          2: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (hash: DLXwjCeMLBvIeKOLzFt3HCcPZ+8cjQuMJE3Kyj0FUk0=)
                          3: 3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (hash: 9+ioA8iW3wDN9f27KoCoYuS2Xxc1WiJBzblSsKv38+c=)
                          4: 3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (hash: 1ke442G4sr1gdXVL5S2dIvsAioTdoxCJCdzpNrSzpFk=)
                          5: 3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (hash: fgaktkZvREqEdKxhCwkQM0vrGN+uJ33xvruPLYDVzIA=)
                          6: 3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (hash: IeqfO60APtI/aiujhRBbK+p5lGRCUGsDS7H6b+Gn6jY=)
                          7: 0F9708322570D07CA4BE75EF484B6831664FE864.crl (hash: HCKU0Hc3qXYsjz1p2B8LI7WW3XUyqcOTGRKxL3rSy9I=)
                          8: 3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (hash: Q+6zb8/52SCseUccO/k8n9a/FXB90wWY4SheKioGF5I=)
                          9: 3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (hash: BcM6j+OwDyoPY5saIhljxjNWGNX33CnT7EmA2Ywuaco=)
                          10: 3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (hash: HodIiouYpi5HRYferTFJC9p/9oItbt3HQJ/8I8MD+HI=)
                          11: 323830343a333664303a383030303a3a2f33332d3333203d3e20323636333734.roa (hash: j1Avox9NgQODW3LhBzJuljIRz5meY02BEta5hWYd8Ak=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 19:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1b:c9:87:2f:6f:5e:8b:14:a8:0a:43:42:e9:07:9e:3e:18:86:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Aug 22 19:10:04 2025 GMT
            Not After : Aug 23 19:30:04 2025 GMT
        Subject: CN=ADB48989D2F9DA48D5495F2C0D8A72A4C234BE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:88:6c:ac:da:65:a3:62:75:59:77:af:e4:
                    38:b6:60:3d:47:c4:d5:f6:05:e3:d2:f1:0d:ac:9c:
                    88:b1:65:59:b1:30:64:69:f1:39:c7:b3:60:1f:8f:
                    05:01:ad:16:a3:6a:b3:a7:9a:f3:ea:99:10:8b:90:
                    34:23:08:af:d4:c6:46:1b:da:59:83:52:ac:f9:e3:
                    e0:f1:68:8a:2c:66:a6:98:cd:6b:00:e6:5d:6d:04:
                    eb:73:af:d9:1e:a4:96:24:dd:ad:0a:bd:2b:79:ce:
                    e5:97:f1:ac:37:0e:41:27:06:43:79:b6:ca:96:33:
                    aa:67:cf:e0:e9:b7:55:2f:00:e5:1e:d6:de:e3:c8:
                    d8:86:0e:a5:b7:c1:c7:b9:e0:63:55:c7:e4:88:8d:
                    42:d0:29:67:bb:d5:97:3d:56:39:53:32:ed:a1:6e:
                    af:59:7c:98:39:99:fd:d8:35:7e:13:2f:f4:5d:6a:
                    ee:33:b7:a5:e5:b4:27:7c:64:45:0f:45:1a:d1:9a:
                    d6:01:69:8f:0f:1c:87:cb:e8:a1:bd:76:19:5b:df:
                    9f:f9:5b:98:a9:e3:9b:5c:01:63:04:5e:bd:85:f3:
                    72:39:b1:51:d3:20:ea:c0:d5:7f:e8:5f:09:08:c6:
                    98:be:b3:67:61:bc:eb:ed:c8:b9:b8:44:b4:5d:90:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B4:89:89:D2:F9:DA:48:D5:49:5F:2C:0D:8A:72:A4:C2:34:BE:11
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0f:ea:46:b7:7d:c0:00:7c:8e:1f:4d:6d:7f:47:ee:de:dc:
         96:d7:de:57:8b:15:63:81:5d:7c:87:d9:2e:73:64:8e:f3:63:
         a8:90:a5:27:e9:56:d5:a1:2f:96:e7:cd:10:9b:cc:52:c7:82:
         5b:58:eb:d1:19:e6:d3:f8:22:57:22:65:12:59:d8:d3:61:4e:
         b8:79:20:e0:1b:bc:1f:dd:7a:09:f7:81:fb:88:2e:ef:e3:64:
         cb:f6:a6:7d:35:b9:f5:d8:ed:6d:ed:88:31:90:4e:c0:96:ee:
         97:bb:c6:e4:0e:9d:a1:3e:69:1e:32:2e:30:70:60:6f:3f:b7:
         a8:59:88:2f:84:ed:5e:f0:df:38:74:e4:ff:c8:dd:22:fb:7b:
         c6:70:ab:8f:f0:b7:da:4e:fd:32:69:b5:b7:69:69:26:36:5e:
         f9:c3:80:6c:c9:70:8c:83:50:d7:8a:4e:0d:e4:fd:a7:9f:7a:
         2e:dd:a2:83:f9:36:92:63:d2:39:05:73:ea:09:0b:34:59:a2:
         86:e1:40:91:ed:86:48:21:71:58:4b:60:77:9e:66:81:71:40:
         00:88:6d:c0:a8:f9:69:da:31:4d:e2:6e:86:9b:4a:45:eb:9b:
         e2:5e:79:c3:32:c8:24:c9:c1:37:b7:30:8a:1c:56:39:29:2e:
         2c:56:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:09 2025 by rpki-client