Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
File:                     D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft (raw, json)
Hash identifier:          F9ngv3rFjGFp5uLkW0EDqSCT4G2u+zE1bD73aicpQgs=
Subject key identifier:   1B:AF:3D:A6:22:7A:A1:F7:88:11:FF:FE:D5:75:71:5B:CA:FC:EE:18
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       014426D364B802B8DB90094BE463A31D485B0B55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
Manifest number:          028D
Signing time:             Fri 22 Aug 2025 19:17:36 +0000
Manifest this update:     Fri 22 Aug 2025 19:12:36 +0000
Manifest next update:     Sat 23 Aug 2025 20:12:36 +0000
Files and hashes:         1: D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl (hash: ogfuiFYklPqBQKEjA0IOrwQEkDZ532xKePDkgvCVGfM=)
                          2: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (hash: 7GQpIb7eN0gEhjMCm8bJJo8/053mAvBMK769o/t1ImA=)
                          3: 323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (hash: 19YYElrSUoCNGtrtG01beRgcwWRs9m7ywAl7Jl+phzY=)
                          4: 323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (hash: qIqXFF+EFAPY9WZVD0mrTRtSZpbvEDWHAOrmv/e83ZA=)
                          5: 3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (hash: 1EPG9j2IFN7RdrK+OBQg1vA1qlOU4uWKrh0eWi6f4z0=)
                          6: 3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (hash: QsO1DL8JBb7HVDv32XyDE5mIRhLWooOEuQSlsQhv0nA=)
                          7: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (hash: l+1vkNbJX9FznsoCq04IQdf645yMO+XY7naPC5k2nAc=)
                          8: 3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (hash: jjJjT28GywBLjygGVXWL4ZlLuMuD46UXs8EBIkhnFL8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 20:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:44:26:d3:64:b8:02:b8:db:90:09:4b:e4:63:a3:1d:48:5b:0b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Aug 22 19:12:36 2025 GMT
            Not After : Aug 23 20:12:36 2025 GMT
        Subject: CN=1BAF3DA6227AA1F78811FFFED575715BCAFCEE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:ff:a4:b4:71:41:fd:9a:c8:8c:29:bc:62:
                    73:06:65:64:c5:52:ac:ff:dd:f5:8d:8c:f5:73:ce:
                    70:4e:12:e5:9b:3a:11:47:5b:65:e8:ba:8e:10:6b:
                    1b:35:ce:96:fa:28:0d:6a:9b:7a:c1:1a:5b:9e:a0:
                    6b:17:d9:8c:d7:db:42:be:76:7c:df:f6:bf:1e:1f:
                    e3:5f:f9:ab:68:5a:8b:14:c5:61:68:90:ad:3c:b9:
                    fa:db:69:0d:c7:bd:26:a2:81:92:c4:83:37:d1:f3:
                    c7:bf:89:fb:b1:ca:a4:7a:8c:4a:91:82:24:e9:59:
                    37:60:aa:9d:d0:96:5b:ce:d5:ab:7f:b4:4f:d5:b0:
                    d3:4f:cd:d6:71:ce:3e:e5:0b:dc:76:59:62:91:b6:
                    61:ff:63:4c:e0:0e:5b:cb:e2:e2:99:d5:85:53:e2:
                    cf:60:6b:41:f7:7d:f5:e0:37:44:f8:a1:7d:44:2e:
                    b2:e2:5d:a6:cc:a3:20:0a:82:c9:32:81:15:4f:9b:
                    44:8d:75:c0:42:9c:51:e2:a9:96:e2:58:0f:9c:6a:
                    a6:97:88:2e:c1:14:d1:ec:18:3f:86:82:f3:2d:74:
                    03:b5:e9:55:d1:a4:a4:9f:1f:0c:a3:8d:e0:6a:36:
                    79:2c:de:ae:41:4e:5d:bc:bb:32:b5:c6:64:74:f8:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AF:3D:A6:22:7A:A1:F7:88:11:FF:FE:D5:75:71:5B:CA:FC:EE:18
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:9f:06:5e:15:96:cd:f4:a1:35:51:c2:b6:32:7e:15:8e:
         54:9b:b0:ee:9d:a5:3e:f3:01:8b:dc:91:ae:61:5d:80:51:85:
         f6:62:86:dd:fa:13:08:bb:74:30:96:4a:8e:86:bd:c5:be:ee:
         57:08:69:f5:fd:20:e6:31:68:a5:10:fb:1d:12:91:8c:17:78:
         05:06:05:14:ea:6a:1f:ae:56:9d:20:3d:92:e1:60:09:86:9e:
         68:8d:0f:ca:21:1e:24:d1:9a:6d:19:f6:dd:ba:43:53:c0:de:
         78:12:08:62:91:99:a8:8b:6a:68:06:cd:2b:75:15:73:b4:08:
         4e:ae:48:9c:ec:98:a5:7f:47:b9:33:c9:83:fe:18:a4:68:d2:
         fd:af:74:eb:c8:83:17:db:94:2b:34:45:8d:ef:83:fe:13:8d:
         ae:6d:2d:59:16:86:d5:2f:73:80:2f:d0:02:78:df:79:4e:bf:
         d9:e7:14:ff:94:16:e9:22:9e:d6:da:58:a2:c2:a2:a3:98:d7:
         e9:1c:58:19:14:38:ec:7e:01:c6:3d:e9:e0:e4:b3:a2:0c:87:
         55:7c:af:bc:5d:15:60:14:2d:39:c1:8d:ed:dc:66:cd:da:df:
         a5:54:4a:96:08:e2:1e:a4:81:21:c8:4a:b0:a5:a7:8b:31:be:
         e3:cb:bc:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAUQm02S4ArjbkAlL5GOjHUhbC1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNDQjA1MTk2NDdGOUQzQzE0NUUzMUU4MUU3NzlFQTlD
M0QyQzI3NDAeFw0yNTA4MjIxOTEyMzZaFw0yNTA4MjMyMDEyMzZaMDMxMTAvBgNV
BAMTKDFCQUYzREE2MjI3QUExRjc4ODExRkZGRUQ1NzU3MTVCQ0FGQ0VFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IP+ktHFB/ZrIjCm8YnMGZWTF
Uqz/3fWNjPVzznBOEuWbOhFHW2Xouo4Qaxs1zpb6KA1qm3rBGlueoGsX2YzX20K+
dnzf9r8eH+Nf+atoWosUxWFokK08ufrbaQ3HvSaigZLEgzfR88e/ifuxyqR6jEqR
giTpWTdgqp3QllvO1at/tE/VsNNPzdZxzj7lC9x2WWKRtmH/Y0zgDlvL4uKZ1YVT
4s9ga0H3ffXgN0T4oX1ELrLiXabMoyAKgskygRVPm0SNdcBCnFHiqZbiWA+caqaX
iC7BFNHsGD+GgvMtdAO16VXRpKSfHwyjjeBqNnks3q5BTl28uzK1xmR0+DpbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUG689piJ6ofeIEf/+1XVxW8r87hgwHwYDVR0j
BBgwFoAU08sFGWR/nTwUXjHoHneeqcPSwnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV
SFMvMC9EM0NCMDUxOTY0N0Y5RDNDMTQ1RTMxRTgxRTc3OUVBOUMzRDJDMjc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQ0IwNTE5NjQ3RjlEM0Mx
NDVFMzFFODFFNzc5RUE5QzNEMkMyNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNVSFMvMC9E
M0NCMDUxOTY0N0Y5RDNDMTQ1RTMxRTgxRTc3OUVBOUMzRDJDMjc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeE+fBl4Vls30oTVRwrYyfhWOVJuw7p2lPvMBi9yRrmFdgFGF9mKG3foTCLt0
MJZKjoa9xb7uVwhp9f0g5jFopRD7HRKRjBd4BQYFFOpqH65WnSA9kuFgCYaeaI0P
yiEeJNGabRn23bpDU8DeeBIIYpGZqItqaAbNK3UVc7QITq5InOyYpX9HuTPJg/4Y
pGjS/a9068iDF9uUKzRFje+D/hONrm0tWRaG1S9zgC/QAnjfeU6/2ecU/5QW6SKe
1tpYosKio5jX6RxYGRQ47H4Bxj3p4OSzogyHVXyvvF0VYBQtOcGN7dxmzdrfpVRK
lgjiHqSBIchKsKWnizG+48u8Ww==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:23 2025 by rpki-client