Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
File:                     CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json)
Hash identifier:          hsNCUwd01IyLqTSnBDyzIHfQPY+gysklcxNEvbDrtPY=
Subject key identifier:   36:0F:C4:D9:8D:83:94:B4:00:CC:00:76:BF:4D:10:F1:25:99:A1:21
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       3A9B78424955A6A78D99121A1CE2474887FD3E4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
Manifest number:          B9
Signing time:             Sat 23 Aug 2025 05:50:00 +0000
Manifest this update:     Sat 23 Aug 2025 05:45:00 +0000
Manifest next update:     Sun 24 Aug 2025 07:36:00 +0000
Files and hashes:         1: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: amDeMX/BZEdOLpiY5eI+Syvf2w+HOessOzMCfITuWvo=)
                          2: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: JMEwMrWxYvrjjSc/z/xadE+1pbnYkxYcsbeXvFkwF4A=)
                          3: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: mgsYCCjJSoJmcEEh/9mNABYK1PuWrIpDzusmWD7BpKk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9b:78:42:49:55:a6:a7:8d:99:12:1a:1c:e2:47:48:87:fd:3e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Aug 23 05:45:00 2025 GMT
            Not After : Aug 24 07:36:00 2025 GMT
        Subject: CN=360FC4D98D8394B400CC0076BF4D10F12599A121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:c0:68:1c:a1:d6:f1:b3:c2:e7:20:bf:0c:
                    40:e8:11:93:8c:cd:5e:77:7b:68:81:37:33:b8:87:
                    cd:88:92:ba:f7:88:10:d6:40:1d:ae:4f:2b:2b:1f:
                    8f:1d:02:47:bc:4c:0d:b2:39:3c:2a:72:03:04:4b:
                    ff:48:48:18:fd:9e:84:78:64:c5:47:11:c6:d5:1f:
                    17:36:61:5e:3a:99:ae:e8:10:78:9b:92:e7:89:7b:
                    60:8a:d2:3c:ae:3a:5c:91:f9:b2:ff:92:ad:6a:36:
                    02:23:54:ae:26:4d:b7:a9:ba:7f:e6:70:ee:1f:24:
                    97:a4:2c:e4:f7:6a:5e:2c:00:ff:a9:77:a1:ee:d4:
                    6d:63:ea:c0:68:60:c7:4e:4c:8d:3a:a6:22:31:8e:
                    55:e7:d0:73:02:9c:0e:d0:6c:96:32:b0:41:36:fd:
                    b8:07:3c:31:00:78:14:ae:f9:0c:cf:77:08:40:93:
                    c4:25:16:af:90:88:0a:93:dc:6a:6d:ab:0d:f0:9d:
                    a2:44:e4:17:c5:c6:fc:a3:5b:bf:55:65:29:b2:36:
                    5a:b9:71:28:75:c1:61:68:1f:c5:3c:82:e0:b2:72:
                    1e:26:8f:62:fd:9b:0b:83:9a:3c:cb:43:bb:e7:8c:
                    f1:8f:8e:d4:76:d0:d5:b7:95:c5:86:02:41:bd:6d:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0F:C4:D9:8D:83:94:B4:00:CC:00:76:BF:4D:10:F1:25:99:A1:21
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:2b:08:39:e3:b0:0d:c5:0a:39:92:76:f7:80:b8:91:54:
         df:e8:fa:70:07:4c:98:a4:25:21:e0:5b:a7:6a:ce:63:a7:47:
         d5:e5:f8:08:b7:7d:e3:41:89:37:55:62:58:31:33:9b:1d:87:
         91:f1:d3:13:31:55:72:54:ca:6e:44:2a:e3:aa:af:10:4e:1b:
         8a:f4:99:c5:2c:10:7c:e1:aa:73:b2:06:df:f5:34:f5:73:61:
         57:fe:13:37:db:71:5d:99:02:89:4c:b2:d4:5c:31:c3:a2:0c:
         c7:dc:36:b5:7f:92:a4:bb:b3:9b:45:9c:e2:e2:ed:a7:72:79:
         cd:1c:3f:35:aa:b4:e5:00:7b:94:71:23:97:91:60:7c:95:d9:
         6d:c8:76:42:1d:6e:5b:38:33:a6:64:97:9f:d3:3f:6d:e8:fd:
         ea:85:ec:46:b5:2b:db:9e:10:da:dd:68:44:71:43:9a:b2:c7:
         a2:ba:39:e8:5d:f3:54:fd:f5:83:18:3c:cf:5f:93:be:b5:29:
         4c:d8:14:2e:1b:b7:3d:94:ca:d0:76:4e:cb:0e:f2:0e:60:32:
         99:29:b0:6b:39:9b:c0:c4:a7:2f:35:38:cf:a2:65:60:c7:68:
         13:42:64:90:08:54:ea:b3:93:6c:8c:08:ca:da:eb:ec:d4:16:
         a4:c6:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:11 2025 by rpki-client