Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft
File:                     97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft (raw, json)
Hash identifier:          60j17t+Mk+aDPC98tVvO7Y48sz12bXpaRcVrMEQO0GU=
Subject key identifier:   1C:2E:3D:C0:E0:DE:32:95:BB:9D:BD:28:E6:F6:C4:6C:1E:5A:67:A4
Authority key identifier: 97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58
Certificate issuer:       /CN=97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958
Certificate serial:       12224EDF48FD2CB3EB2562A2FEB65F741485E84A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft
Manifest number:          28
Signing time:             Sat 23 Aug 2025 08:14:00 +0000
Manifest this update:     Sat 23 Aug 2025 08:09:00 +0000
Manifest next update:     Sun 24 Aug 2025 11:45:00 +0000
Files and hashes:         1: 97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl (hash: SXzvLkUAlTyBxMcBhh45wFQJW+nDrymHGQr21QiHbe4=)
                          2: 323830343a393462383a3a2f33322d3438203d3e20323734343736.roa (hash: nxxaSm6ijnAlHiDlW+pF2qez4T+Ed89O37FeulJZ94w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl
                          rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:22:4e:df:48:fd:2c:b3:eb:25:62:a2:fe:b6:5f:74:14:85:e8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958
        Validity
            Not Before: Aug 23 08:09:00 2025 GMT
            Not After : Aug 24 11:45:00 2025 GMT
        Subject: CN=1C2E3DC0E0DE3295BB9DBD28E6F6C46C1E5A67A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:db:6c:0e:61:6f:17:0a:73:fb:3d:6e:83:
                    e5:06:e6:7b:9d:b8:fb:23:a3:5e:79:c6:ed:26:5d:
                    a2:9c:fb:52:9b:c5:fd:a3:67:fe:15:47:76:e2:70:
                    9d:60:bf:aa:93:93:bd:5d:a8:3e:c1:35:16:2a:42:
                    76:4b:cd:53:f5:d5:27:ab:cc:0f:19:d4:50:e6:5c:
                    9e:e3:fa:93:ac:07:c3:96:6c:7c:cb:48:5e:5a:50:
                    de:da:8c:cb:8f:4e:12:d2:65:5c:16:1f:5f:c2:bf:
                    f9:53:aa:01:23:3c:6a:3d:f8:28:ad:e4:ac:af:72:
                    25:55:7f:25:21:db:62:31:3e:53:b8:8e:79:4a:27:
                    83:73:cc:84:6f:f4:f6:7b:bd:a9:28:00:97:e7:c3:
                    93:20:da:68:0f:92:2f:e8:b2:e2:2d:50:3c:75:d2:
                    d6:7d:7c:96:e8:f7:23:43:3e:2d:8e:7b:42:a2:c9:
                    74:37:3b:a5:a8:c6:0f:48:f3:3a:2a:f8:cd:0c:a5:
                    67:9e:a0:ba:7f:be:48:0e:80:50:e1:7c:a5:6f:70:
                    7a:b6:af:a9:eb:e5:d8:4d:19:d7:ab:8a:32:b6:2f:
                    44:99:da:b8:42:1a:60:12:f1:4b:47:ae:04:18:4b:
                    bb:50:24:80:68:f3:46:ad:9c:6d:cf:64:69:a0:a3:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:3D:C0:E0:DE:32:95:BB:9D:BD:28:E6:F6:C4:6C:1E:5A:67:A4
            X509v3 Authority Key Identifier:
                keyid:97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:a3:8c:2e:e4:fd:6b:09:3d:f7:20:77:0f:d8:13:3f:07:
         98:fe:98:ec:69:fd:1a:a0:94:1f:d3:2e:f6:85:4b:dd:84:99:
         87:15:fb:4d:b2:1f:69:7c:4c:c3:41:4a:8a:f2:57:4c:1b:38:
         8b:7d:fc:6e:e2:65:37:db:cc:39:49:5a:4b:62:ea:30:61:79:
         b7:6d:a6:ba:c7:3f:dc:7f:b6:fb:33:86:e1:37:61:19:e8:10:
         8b:ea:c0:07:57:70:a4:3d:79:95:b0:cb:54:c3:37:9a:49:a3:
         de:0a:8f:25:0b:4f:1c:e3:70:4e:76:ee:5e:77:fc:4e:fe:38:
         e4:f5:5c:49:9f:e6:05:a5:7e:5f:12:ff:68:d4:84:b7:e4:d0:
         45:f8:32:9b:38:df:bb:3f:0a:0f:74:9c:5d:19:89:a4:da:a2:
         ba:48:7a:06:6c:82:b0:64:e9:f4:ec:19:e8:aa:20:89:0c:db:
         54:0a:b3:d7:95:fa:63:25:c1:9e:85:97:37:72:bf:a6:75:f0:
         cb:2f:f0:95:dd:f5:6d:d8:42:e0:c0:e6:bf:82:15:ef:64:66:
         4f:a3:73:dc:1d:20:54:99:8c:8b:ae:a9:7c:86:56:07:c5:2d:
         19:d0:5f:56:c4:31:fb:77:d9:d0:9a:dd:dc:2d:4f:00:12:12:
         9f:31:df:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:29 2025 by rpki-client