Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft
File:                     31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft (raw, json)
Hash identifier:          q21EC6RsUNEWxgPMG03XnNgLh8yysiXb2yX/d3DrHD0=
Subject key identifier:   86:4B:E0:5F:D9:83:C4:23:AD:C7:CF:26:EB:FA:7A:B8:16:03:2E:D8
Authority key identifier: 31:B5:F9:6F:3B:91:91:25:6E:66:6B:EB:1B:1F:AD:77:B3:63:E2:0A
Certificate issuer:       /CN=31B5F96F3B9191256E666BEB1B1FAD77B363E20A
Certificate serial:       0B5E8B8800AE3740F692E6807D263971CFBE1827
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft
Manifest number:          D2
Signing time:             Sat 23 Aug 2025 08:15:06 +0000
Manifest this update:     Sat 23 Aug 2025 08:10:06 +0000
Manifest next update:     Sun 24 Aug 2025 10:34:06 +0000
Files and hashes:         1: 3139302e3131352e38382e302f32322d3332203d3e20323730343437.roa (hash: YDJJYAlcpeXdKh3/U6MEx2jUv/4DwQcLdf0Z+WaQyNA=)
                          2: 31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl (hash: SKzQpJhI1PuluBkBnx2waf5JQX1FGri6Q+DNOwmms0s=)
                          3: 323830343a366332303a3a2f33322d313238203d3e20323730343437.roa (hash: DorTwbUOLwkTWSbCegTSzzNUUDo09uyffkNjsAxZEm0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl
                          rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5e:8b:88:00:ae:37:40:f6:92:e6:80:7d:26:39:71:cf:be:18:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31B5F96F3B9191256E666BEB1B1FAD77B363E20A
        Validity
            Not Before: Aug 23 08:10:06 2025 GMT
            Not After : Aug 24 10:34:06 2025 GMT
        Subject: CN=864BE05FD983C423ADC7CF26EBFA7AB816032ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:83:f8:25:0e:ce:42:c3:46:56:27:a4:ce:
                    4f:a5:d8:35:ff:f8:b9:9c:6a:b2:2e:22:44:87:9e:
                    cd:2d:5e:69:7c:26:c5:bb:ab:40:dd:6f:50:30:7d:
                    6d:b6:d3:2a:a7:23:f1:af:26:93:97:c2:ce:0b:2c:
                    9b:0b:1b:0f:22:01:75:99:ba:be:ce:64:d2:f4:06:
                    c2:88:e2:c7:a7:c3:f3:bd:77:67:21:cd:fc:e2:86:
                    f1:6f:42:af:4d:41:27:18:2e:00:7a:2e:89:67:36:
                    4c:89:2c:91:47:c4:e0:51:01:f9:ce:7f:8e:b1:63:
                    cf:a0:a1:d2:ef:85:a2:52:a2:7c:f8:08:7b:3c:f9:
                    e8:35:f9:a6:b6:2d:a4:8d:ad:a8:6e:71:5f:db:b3:
                    44:00:02:27:4f:f5:2f:c0:5a:57:ba:6e:9d:44:17:
                    5f:a3:1b:e1:40:76:6e:7e:64:38:ed:7d:f8:e3:6a:
                    bf:76:87:f7:32:b3:6b:7a:fd:e2:09:eb:2e:bb:fb:
                    a5:dc:15:80:d5:f2:c4:f3:9a:34:9c:9a:cd:ab:13:
                    d1:51:4b:96:8c:11:3c:4a:ce:31:5a:a2:b2:13:4d:
                    1b:e0:37:03:a3:95:e7:1c:dc:ff:61:d7:92:0b:0c:
                    9f:fe:ac:0a:2b:dd:69:86:10:72:0b:4c:e1:18:4c:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:E0:5F:D9:83:C4:23:AD:C7:CF:26:EB:FA:7A:B8:16:03:2E:D8
            X509v3 Authority Key Identifier:
                keyid:31:B5:F9:6F:3B:91:91:25:6E:66:6B:EB:1B:1F:AD:77:B3:63:E2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:25:f8:30:b8:b3:f3:de:43:e8:c2:89:95:0a:26:80:b2:e8:
         42:6c:59:a7:48:b5:f3:8b:44:44:58:51:49:a0:88:28:69:36:
         02:36:89:bc:a0:eb:8c:8d:1f:cb:63:c6:b2:13:1a:63:8e:75:
         0e:94:94:a0:ad:40:34:28:38:a5:16:52:9c:ab:b9:25:8d:83:
         4b:2c:fe:11:a6:47:62:89:16:59:63:22:41:50:c0:a1:15:04:
         41:06:f5:ff:d6:2a:af:14:4c:c2:61:d9:22:01:f9:db:28:45:
         25:54:4a:b8:6f:36:37:7a:bc:53:8f:04:b4:bb:b4:e3:14:9f:
         de:2a:07:3a:33:01:d6:10:c1:66:5b:8a:f1:db:c6:2f:44:70:
         dd:4f:9b:8c:7c:6f:6e:38:64:f0:8b:2e:a0:37:af:e6:b2:98:
         c3:6a:75:d4:ab:51:29:d9:35:96:6a:5f:89:3d:c5:18:56:a4:
         67:1e:21:d0:4c:5d:6f:e0:a2:59:7c:7d:bf:e9:64:e1:e7:6f:
         35:22:22:67:85:be:8b:fc:26:92:db:43:26:a5:10:07:20:bc:
         9f:25:c2:dd:48:c4:bb:3d:ea:b9:2f:ed:56:51:a3:00:be:ab:
         f9:b8:b8:a8:65:c8:92:95:7e:60:ca:e1:3a:7c:f7:ca:d0:16:
         52:c1:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:21 2025 by rpki-client