Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
File:                     DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json)
Hash identifier:          1654NH8ZgHrCA6NexA/m24mt6uZXNR5qdsLM8+cqNPc=
Subject key identifier:   CA:D6:83:94:A2:9E:42:3D:FA:44:8A:BA:5D:F2:0A:37:7A:9F:82:7E
Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
Certificate issuer:       /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
Certificate serial:       7EEF4B3FE8EECDA52B6B3EE429F2D0FB72D94B46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
Manifest number:          45
Signing time:             Sat 23 Aug 2025 18:10:31 +0000
Manifest this update:     Sat 23 Aug 2025 18:05:31 +0000
Manifest next update:     Sun 24 Aug 2025 18:35:31 +0000
Files and hashes:         1: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: TruFHhIhbVoIrQ2Usufo0jScemgOIzvDgHsQ6IrgKrE=)
                          2: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl
                          rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ef:4b:3f:e8:ee:cd:a5:2b:6b:3e:e4:29:f2:d0:fb:72:d9:4b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
        Validity
            Not Before: Aug 23 18:05:31 2025 GMT
            Not After : Aug 24 18:35:31 2025 GMT
        Subject: CN=CAD68394A29E423DFA448ABA5DF20A377A9F827E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:9b:e5:9e:53:6b:1d:7b:bb:c2:3d:38:c1:
                    c9:3e:d3:e3:9b:1b:48:bc:88:3e:61:da:94:8e:80:
                    90:af:60:44:2c:57:ce:d2:19:2b:84:d6:94:65:f1:
                    57:bb:58:0b:4f:0a:d4:e7:c7:1c:cd:f5:66:ab:1e:
                    5f:e4:4b:fb:c9:77:37:53:37:34:15:c6:66:04:d3:
                    e7:38:43:46:94:cc:50:7d:53:02:9e:5a:3f:b1:25:
                    98:89:36:11:a8:1c:3c:c5:18:52:2b:ca:00:2b:d1:
                    b7:af:78:5f:0f:bf:24:2f:4b:3c:ba:ae:25:97:c3:
                    db:70:a4:f4:c7:b1:7a:cf:93:98:dc:ea:78:8f:4d:
                    1e:83:27:26:1f:81:a9:2e:12:6f:af:41:f1:09:be:
                    b7:c3:0a:37:e3:b3:17:d9:8b:15:f8:59:ff:b4:27:
                    69:05:a9:f5:48:12:f1:69:44:7d:92:13:2f:f5:b6:
                    ea:c8:ab:95:13:56:24:29:18:0e:7a:32:79:e5:26:
                    5e:68:0e:38:c0:c8:3c:3a:d3:3c:21:d3:61:6e:84:
                    16:01:c9:b8:85:dc:bd:a2:57:6a:27:51:2a:05:ff:
                    8b:5f:b4:ec:94:ec:7d:d8:fd:a0:03:36:bd:66:4e:
                    f3:d2:09:28:a7:bd:d6:48:bf:f8:5a:8d:5b:a5:e4:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D6:83:94:A2:9E:42:3D:FA:44:8A:BA:5D:F2:0A:37:7A:9F:82:7E
            X509v3 Authority Key Identifier:
                keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:ed:2c:ee:30:83:dc:59:fc:2f:5e:85:d9:0c:35:45:45:
         c9:e6:c3:94:2d:9c:a1:06:11:0e:87:7a:03:a2:8a:26:ba:a6:
         1b:13:bc:1d:10:f8:5a:ae:54:0e:cd:59:3c:bd:b5:61:ab:b6:
         d3:bb:79:9f:9f:e6:c4:d8:39:f1:4b:66:a4:c7:38:b4:80:0d:
         8c:3a:d5:8c:f7:35:8b:34:a4:79:ca:24:3b:13:9a:44:6d:47:
         5a:70:d1:63:75:6f:27:ed:40:15:83:2f:df:ae:6f:79:7a:e4:
         3f:53:98:eb:53:46:83:fa:82:18:da:41:9d:70:df:0a:b0:83:
         b1:a3:1c:81:b9:b3:78:d5:6b:d6:fc:bb:a3:f7:51:c7:7b:ea:
         40:72:8d:9c:77:04:d6:b3:0b:6f:d1:d1:77:ef:77:0e:e5:b1:
         b5:f9:72:be:47:38:5f:e0:67:d6:a9:28:ef:7d:19:3b:2a:a8:
         e6:5c:fc:ab:5f:74:a1:55:fc:72:d7:37:56:91:3d:a8:d1:26:
         8f:6b:79:b1:08:3a:96:0f:b2:ce:2d:27:8e:bc:e8:35:87:27:
         de:61:a7:ff:91:21:e0:06:6b:6d:ef:57:d1:5b:21:e4:4f:97:
         c0:50:f3:2f:99:39:b5:58:e2:46:da:47:29:d1:1b:b5:bf:7f:
         1e:2d:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:35 2025 by rpki-client