Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
File:                     66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft (raw, json)
Hash identifier:          AB/t7kN1vXdZkCljx9XuvtWa+Ae4yzoWk8SFufWz7F8=
Subject key identifier:   2E:B1:63:F7:84:9C:B9:05:53:A6:5E:42:4B:3F:3D:88:3F:8B:19:DA
Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A
Certificate issuer:       /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
Certificate serial:       7FA057D9545C8EE09741D21FF53641BDF5458632
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
Manifest number:          C3
Signing time:             Sat 23 Aug 2025 19:25:36 +0000
Manifest this update:     Sat 23 Aug 2025 19:20:36 +0000
Manifest next update:     Sun 24 Aug 2025 20:48:36 +0000
Files and hashes:         1: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl (hash: MqvUPzoePsYhKb5z1+9dbj6luC9N6xcXRYMnrTSKQkY=)
                          2: 34352e37312e3233392e302f32342d3234203d3e20323637363235.roa (hash: hPSaKo57ySusHDN0f4CdKQ0QS4fQ2++vIqAa8DQVylk=)
                          3: 34352e37312e3233362e302f32342d3234203d3e20323637363235.roa (hash: VUTn+Y8YyzHneDvvRQcoyorG1q5ZDQSxPkSxk5vT2hY=)
                          4: 34352e37312e3233372e302f32342d3234203d3e20323637363235.roa (hash: iUnbmlTouB10xnx8TOK+EWUlJuN+cWOIF6iqgO4OrK4=)
                          5: 34352e37312e3233362e302f32322d3233203d3e20323637363235.roa (hash: 9Ayla/+sosVGnmtIxYAHJNLCvzWyM6XzIGWav1hvbBg=)
                          6: 323830343a343435343a3a2f33322d3438203d3e20323637363235.roa (hash: /WjYyisieWtzaIuL75i3lmBc4NoZr/0fgfXNHo2u2Is=)
                          7: 34352e37312e3233382e302f32342d3234203d3e20323637363235.roa (hash: usuDM2FAYkWoIM3CCbZCOoUM273ijs0GyzSA6Jp+vII=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl
                          rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a0:57:d9:54:5c:8e:e0:97:41:d2:1f:f5:36:41:bd:f5:45:86:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
        Validity
            Not Before: Aug 23 19:20:36 2025 GMT
            Not After : Aug 24 20:48:36 2025 GMT
        Subject: CN=2EB163F7849CB90553A65E424B3F3D883F8B19DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:4f:b3:e7:3e:1b:3f:f3:b6:67:d0:d8:d3:
                    97:28:7a:52:08:10:db:60:65:05:ce:e1:f8:c4:e2:
                    11:63:b1:cb:02:a2:3f:55:66:e9:a7:61:24:a0:dd:
                    0a:b9:7c:6b:a9:61:41:17:b4:8a:d5:f7:93:3a:46:
                    0e:d3:c8:ff:d4:32:97:02:c4:22:ef:c4:de:1c:f1:
                    4c:13:14:4b:31:68:4c:08:31:5f:d1:76:a2:20:07:
                    da:3e:f1:f4:7a:ed:a7:ca:02:b8:37:48:3b:d0:f2:
                    f8:92:55:5d:e0:75:6a:9c:25:23:5d:2f:bb:d9:b6:
                    b3:b6:66:10:46:9a:c8:6c:d0:e2:e7:4c:1a:f1:01:
                    0d:12:cc:da:c0:c8:09:d5:f8:44:92:95:d4:b0:0c:
                    cd:e0:81:77:e5:d0:6a:f0:b5:04:f6:c3:f3:85:18:
                    cf:1b:4f:c3:76:80:dc:30:fa:92:c1:12:05:9a:7e:
                    13:34:d8:1b:af:36:7b:a0:94:63:b3:29:2e:29:72:
                    f9:b2:69:77:33:9b:66:9e:f7:48:ba:a8:ba:74:9a:
                    d4:54:3b:6e:be:ae:9a:a3:0f:92:22:aa:4e:1e:5f:
                    76:f3:9f:61:32:a1:e2:43:b5:43:39:4f:42:d4:4c:
                    4d:58:3b:d4:9e:63:65:55:13:8f:c4:fc:34:6a:ed:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B1:63:F7:84:9C:B9:05:53:A6:5E:42:4B:3F:3D:88:3F:8B:19:DA
            X509v3 Authority Key Identifier:
                keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2b:f4:54:df:4f:55:94:a9:3b:ae:a0:0c:52:e2:62:c0:a2:
         ce:8f:9b:46:6e:d3:7e:fa:63:b0:83:9e:5e:99:99:bc:e6:e2:
         3d:7a:3a:10:a1:bd:74:1c:00:19:b5:96:58:83:8d:a5:b7:a3:
         7f:9a:05:0c:23:22:1a:94:74:e2:6a:dd:15:e7:79:b3:1c:60:
         56:10:b5:1d:c2:c6:b6:9c:d0:c7:d1:6f:d0:c1:80:5d:cd:b5:
         1a:06:92:4f:07:f8:12:94:9e:7d:6e:70:92:0b:7f:49:ce:f9:
         bb:98:c4:4e:b7:6c:d8:a7:3d:39:fc:9b:39:58:fd:19:86:d3:
         0c:be:59:a5:fc:3e:4c:16:41:22:4a:16:54:5a:16:c5:fd:64:
         ee:c2:7f:13:76:b6:74:82:4b:58:ce:9a:4f:5e:cb:b4:cf:f4:
         2e:d5:6b:7b:d0:ba:c5:89:19:2e:0c:1f:2c:85:ee:05:33:94:
         10:0b:2a:22:4d:a7:20:90:fc:88:9f:ee:a7:27:83:d5:5a:9e:
         65:c1:03:86:60:06:a5:41:90:aa:8a:18:80:66:7e:07:72:83:
         1f:8f:fa:f4:c3:09:38:63:f3:8c:68:e4:ed:cd:c5:73:f9:13:
         62:c3:23:a9:f5:91:28:58:8c:ab:4c:68:39:cf:80:7d:23:46:
         2e:94:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:44 2025 by rpki-client