Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
File:                     CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json)
Hash identifier:          UCNZSo5YE7E5qI++lQRlupe1vTjSZ0+UCPJIlrVmI0M=
Subject key identifier:   34:06:DF:0F:51:47:D9:61:79:62:EF:AF:4D:00:7A:51:84:DF:68:72
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       3FF68DBB6D531945965987E7D9C839B2FA9E3CB7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
Manifest number:          02A6
Signing time:             Sat 23 Aug 2025 22:50:01 +0000
Manifest this update:     Sat 23 Aug 2025 22:45:01 +0000
Manifest next update:     Mon 25 Aug 2025 01:11:01 +0000
Files and hashes:         1: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=)
                          2: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=)
                          3: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: umyz0GN3zrhzkOnCCZ8/+pvaLONRrD4Ufhi2WWH90oQ=)
                          4: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=)
                          5: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=)
                          6: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=)
                          7: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=)
                          8: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=)
                          9: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 01:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f6:8d:bb:6d:53:19:45:96:59:87:e7:d9:c8:39:b2:fa:9e:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Aug 23 22:45:01 2025 GMT
            Not After : Aug 25 01:11:01 2025 GMT
        Subject: CN=3406DF0F5147D9617962EFAF4D007A5184DF6872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:8b:64:87:73:60:39:86:87:07:17:70:5b:
                    00:56:2b:51:19:91:6c:e6:84:05:75:0a:26:aa:af:
                    d2:8c:72:08:80:8c:2e:b2:60:ff:7f:b0:7a:f2:95:
                    86:78:c0:fd:7d:a4:72:33:3b:db:b0:58:5e:b5:c2:
                    c3:4f:41:5c:60:41:7b:16:a6:67:e1:b1:fb:02:e4:
                    9f:52:61:2a:5a:ed:fa:6f:0c:ed:dd:af:f4:32:e2:
                    0e:7e:30:a8:12:d5:a9:57:da:ac:22:25:ad:cc:4e:
                    67:f5:15:e7:d0:37:bf:3c:14:d0:28:ef:31:67:d2:
                    13:c3:9e:a5:9f:03:c5:e2:f1:0b:56:e4:0e:60:40:
                    ab:72:ce:cb:16:4f:c8:e7:a6:02:9f:af:f4:b0:de:
                    1d:94:fd:b6:4d:dc:e1:a0:1f:dc:43:20:10:11:4d:
                    bf:f3:6e:22:05:84:40:9e:f5:fa:a1:4c:ba:0e:57:
                    54:65:ba:1c:90:69:e0:3e:48:fe:f5:67:9c:75:b9:
                    38:6d:60:7d:57:5e:4b:b3:6e:90:cf:be:8e:7f:eb:
                    34:03:89:28:a0:08:e7:a4:e3:6d:c1:fc:0a:1c:38:
                    bf:46:f6:7b:b5:2e:be:b2:ae:eb:5e:ba:37:ca:c3:
                    dc:20:6b:6f:49:44:78:fd:77:ce:93:db:99:76:77:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:DF:0F:51:47:D9:61:79:62:EF:AF:4D:00:7A:51:84:DF:68:72
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:aa:70:b4:d6:e0:e4:79:28:aa:a7:97:a2:e9:2d:dd:04:
         74:4f:27:f5:dc:87:07:b9:03:07:20:2f:e2:9d:97:f1:29:29:
         60:07:ae:2e:1c:28:0d:e5:13:1b:c7:f2:29:0b:68:d7:f6:24:
         4f:bc:96:e2:98:23:da:20:0e:65:78:3e:13:fd:4b:dd:a4:b4:
         09:09:d3:54:3b:9d:74:84:cb:29:c5:df:f0:95:b7:9e:2b:73:
         39:cd:9a:fa:9c:4c:a7:fa:83:13:57:33:53:89:71:2d:17:fc:
         01:cb:5b:b1:00:58:6d:52:68:bb:ad:bc:0e:dc:94:8e:6a:ab:
         2f:fe:a1:95:f2:12:a0:4b:13:65:61:5f:49:47:cc:ec:33:34:
         a1:6d:82:c9:69:02:a1:b7:ea:b7:41:89:31:56:a0:b4:fb:3c:
         ca:8a:a5:36:d0:40:0e:e3:b0:f6:03:ef:e6:2c:24:8c:a5:e3:
         ca:47:d4:11:8a:30:43:5d:e7:c5:b3:a3:2a:f3:9d:6d:d8:dc:
         aa:0f:5b:36:fc:d1:66:19:2a:a7:69:4f:dc:c0:64:71:49:6c:
         ca:29:54:6e:13:3b:64:8b:00:75:96:05:22:6a:6a:77:32:21:
         47:ab:51:46:26:36:55:cb:64:3a:ea:7d:b3:14:e9:15:4d:e7:
         b0:af:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:22:35 2025 by rpki-client