Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          UkrS3U79T2wIxQ2+VDDJ1WzoOGSPnyiwwuLEVKm3zUM=
Subject key identifier:   BE:16:08:7B:01:9E:38:F9:65:A5:8A:30:23:5A:A2:B4:AA:B8:B0:D7
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       6A7787D5441259ADFD633183FFDB5D3DC8B8FC58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          029E
Signing time:             Sat 23 Aug 2025 16:17:11 +0000
Manifest this update:     Sat 23 Aug 2025 16:12:11 +0000
Manifest next update:     Sun 24 Aug 2025 18:56:11 +0000
Files and hashes:         1: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
                          2: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          3: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
                          4: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: A43UjEDT9Enro5UFe4en8sfZrwpcBn7p4igKKywzlGM=)
                          5: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
                          6: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          7: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
                          8: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:77:87:d5:44:12:59:ad:fd:63:31:83:ff:db:5d:3d:c8:b8:fc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Aug 23 16:12:11 2025 GMT
            Not After : Aug 24 18:56:11 2025 GMT
        Subject: CN=BE16087B019E38F965A58A30235AA2B4AAB8B0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:36:83:d9:4a:27:97:be:fc:eb:73:97:f7:
                    31:e4:93:34:79:49:a9:81:ad:ff:d5:c8:c5:c5:04:
                    f9:ab:93:c0:9b:38:41:39:e4:f6:5d:4f:13:74:0d:
                    41:6c:04:d3:05:7b:b3:bb:4c:b7:7f:99:08:57:92:
                    64:55:b4:3d:89:23:df:ce:57:ec:08:f3:0e:e1:55:
                    f1:54:3a:72:7e:98:87:ae:f0:96:43:5e:b2:48:bd:
                    6f:35:be:b5:d1:12:f0:34:fd:9e:cc:48:0f:0c:58:
                    9d:dd:66:5c:f0:ec:1a:8e:70:ba:09:6b:8c:0e:51:
                    be:0c:2c:e0:88:3b:16:d3:29:84:b7:f0:6a:ff:68:
                    9a:04:eb:cc:6f:c9:93:30:b4:c8:ed:04:8c:66:5a:
                    77:95:66:64:a0:93:4d:a6:ec:73:f3:77:bf:a4:80:
                    ec:8b:09:a5:bf:6a:d8:69:68:e6:57:38:d8:e4:21:
                    f5:09:13:c0:07:04:c4:f4:1e:1e:13:f6:4d:7b:7f:
                    09:27:a6:b2:4b:b6:69:6c:e1:69:0d:3f:fd:29:bc:
                    22:26:8a:45:f4:82:c6:7a:b7:45:52:e8:3a:fb:10:
                    18:ee:39:8e:fe:c8:01:be:ca:f4:97:43:81:50:4a:
                    b2:22:41:84:a2:35:72:b1:f9:d7:4f:c1:91:d0:ec:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:08:7B:01:9E:38:F9:65:A5:8A:30:23:5A:A2:B4:AA:B8:B0:D7
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e0:20:e5:e2:f3:bd:f9:85:4c:7a:db:46:b3:30:2c:65:00:
         61:60:b6:8f:dd:cf:74:82:75:61:09:31:00:eb:89:78:fc:09:
         4b:d9:21:03:b0:be:71:91:0f:fb:e9:50:58:23:8d:9c:03:50:
         f1:23:ad:09:60:68:5f:e2:69:d2:a8:1a:99:3b:f7:b3:7b:41:
         e2:f8:3b:b8:33:fe:41:ac:3c:8a:2a:33:6e:3a:62:5a:39:aa:
         2d:03:27:94:ab:d4:64:e2:ba:6b:3d:5b:f7:84:f9:50:d9:9c:
         b1:aa:ad:90:74:55:bb:c1:45:ba:20:e8:22:a0:87:6c:a7:0d:
         c1:e0:55:4b:53:a1:58:15:e7:7a:c5:32:3a:6c:65:10:5a:14:
         29:e0:d3:5a:35:d9:ed:98:52:48:90:27:8b:b2:35:b7:e5:e6:
         5e:3e:9f:8f:e2:50:0b:53:e7:fa:1b:7c:c8:17:f3:dd:a6:ad:
         f2:63:bf:8e:45:2e:90:ee:28:d8:a9:9f:e8:9f:d1:0a:0e:4d:
         af:c3:dc:a9:b3:53:3e:cb:3a:c6:21:7e:8a:cd:68:72:6a:18:
         49:aa:5c:93:f8:c0:64:99:43:81:77:32:3c:0b:55:c3:1d:2a:
         59:4b:4c:0d:8f:6c:b3:e2:7f:bd:3a:cb:81:4b:ce:a6:f8:d3:
         1c:93:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:59:36 2025 by rpki-client