Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
File:                     28C4721E667593A43DA7832F588E6B6B8F57311C.mft (raw, json)
Hash identifier:          ihH427FQU1zUwqITdaUal1XJu9M6NKX2onYiqrD1lEQ=
Subject key identifier:   E8:19:D2:81:0B:64:55:0C:40:DB:3F:A0:40:50:56:16:A7:3D:9B:B5
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       10AFB88C6B85024FA0F07B99F1EC0551B5D9E455
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
Manifest number:          02A9
Signing time:             Fri 22 Aug 2025 19:34:48 +0000
Manifest this update:     Fri 22 Aug 2025 19:29:48 +0000
Manifest next update:     Sat 23 Aug 2025 22:46:48 +0000
Files and hashes:         1: 323830343a356266343a3a2f33332d3333203d3e20323638383739.roa (hash: eNuxh0FA+i3ffFEHKM5RX+VvNqoRG5W9kGPMcJKZ4nQ=)
                          2: 323830343a356266343a633030303a3a2f33342d3334203d3e20323638383739.roa (hash: 0COV7vOtZdgPK2kQW7xLZ6MbZ32aWAqpwH0wOkfzf6o=)
                          3: 323830343a356266343a3a2f33342d3334203d3e20323638383739.roa (hash: yS5epuu0kTOQ+hfUXY+PsX1xwFijGzkaJ1ogGYKiLUo=)
                          4: 34352e3137352e32342e302f32332d3234203d3e20323638383739.roa (hash: NwcGSrpPTlgvRBomA7U3G9uqF5/dhmtT3nLHS4inwYs=)
                          5: 28C4721E667593A43DA7832F588E6B6B8F57311C.crl (hash: /k9U2wDLjP2/2NzAehYw0zMGxotZkFyEP7cKLNgjdmE=)
                          6: 323830343a356266343a3a2f33322d3332203d3e20323638383739.roa (hash: EVa82TOut5bhyMd7GLaEg/VgdZob20eqvkuVXRVI1FY=)
                          7: 34352e3137352e32342e302f32322d3232203d3e20323638383739.roa (hash: u6Owpd2UH2zf00+HgEOmMpgEn9LYoO9cFpXaTqvfqbQ=)
                          8: 323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa (hash: IpnVkhAgUmBhRiQkpwW/64FfC7P4EE6YsX6sQYdrGKM=)
                          9: 34352e3137352e32362e302f32332d3234203d3e20323638383739.roa (hash: KY4G1q4kDwgUSZwyPbeDA+2mjxdpYh2W5FKZVYiacC8=)
                          10: 323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa (hash: vxLC8qKn7Xq7LroxXY7tUXYec/LnOWpHSZXrKhdJk9s=)
                          11: 323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa (hash: U2mW+S5zpfDN3WT2FcreyBH5AF0U5yoq9mrF6FhjZxg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 22:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:af:b8:8c:6b:85:02:4f:a0:f0:7b:99:f1:ec:05:51:b5:d9:e4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Aug 22 19:29:48 2025 GMT
            Not After : Aug 23 22:46:48 2025 GMT
        Subject: CN=E819D2810B64550C40DB3FA040505616A73D9BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:7c:20:a3:a1:cf:25:57:cd:e0:6d:6f:8a:
                    43:6a:36:7d:69:30:1d:f8:f6:86:5f:70:5a:2f:b8:
                    5b:24:41:05:5b:fc:80:a9:77:87:36:10:89:8d:a1:
                    b8:3f:42:bd:7f:fc:57:df:fd:ce:bf:d3:94:bd:a0:
                    e8:63:e4:82:04:2d:79:41:da:6a:d6:eb:63:4a:40:
                    c3:94:da:ed:3f:3e:1a:c5:94:24:d0:78:50:82:0f:
                    da:6d:b7:38:a1:f1:9a:82:c8:23:40:d5:5a:b7:e9:
                    9d:71:29:45:56:3d:9e:12:6b:be:ed:3e:ca:65:93:
                    13:af:39:72:2f:52:5f:95:96:f9:f2:84:c0:a7:26:
                    e7:71:bb:96:d4:26:99:a7:f1:61:69:61:c4:25:18:
                    0b:8f:e4:24:ab:64:4a:f5:14:8b:4e:23:91:89:41:
                    e9:a4:1d:32:82:3f:6d:c8:44:18:99:97:dc:8b:64:
                    7c:01:94:f8:43:8c:76:01:97:45:5f:d4:f4:29:7c:
                    c2:45:82:49:54:ed:e4:05:3d:2c:12:57:80:8a:94:
                    44:08:6f:f4:a0:dc:b5:6b:5e:84:2e:5d:92:38:ab:
                    78:ea:ef:18:3f:56:ef:25:60:a4:9a:0c:d7:3f:7a:
                    2e:43:37:83:5c:e3:ad:5c:34:f1:7f:bd:5f:7e:77:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:19:D2:81:0B:64:55:0C:40:DB:3F:A0:40:50:56:16:A7:3D:9B:B5
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:8d:b2:92:4f:fa:4b:8a:5d:26:dc:59:1f:9b:db:1c:7c:
         e9:71:fe:de:ac:14:b7:1b:60:e7:e4:12:15:fb:97:43:90:e2:
         72:dd:94:c2:91:9c:23:75:41:62:0f:2e:c0:31:a5:6f:0f:0b:
         01:c9:fa:25:6b:df:d3:6a:74:9d:de:7e:df:0a:1b:61:71:e4:
         c0:0f:49:63:ad:f2:94:f6:8c:9b:b1:fb:b4:84:0a:0b:66:9a:
         28:45:84:8f:01:35:6d:3f:22:9d:30:bc:7e:70:61:73:a4:4d:
         b8:cd:e7:5f:53:fa:cc:d9:5d:75:24:e5:54:a5:78:8a:c2:dc:
         0a:d0:47:08:a7:16:15:a4:19:e7:1e:1f:10:1c:1c:13:63:2b:
         b0:1f:37:84:ea:3b:d4:54:5a:e4:a3:39:57:08:46:3b:06:c5:
         1b:df:f0:43:5b:d6:e7:f2:66:57:6f:ee:36:d5:90:4a:e8:85:
         c5:77:95:f9:51:70:5f:92:64:c5:81:43:21:d5:b9:11:5f:60:
         6b:9b:ef:7a:a0:3b:88:5a:a4:35:19:89:27:48:57:58:ce:47:
         8d:7c:4a:31:9f:02:37:a4:c8:eb:fe:4f:c6:47:42:49:23:d3:
         df:aa:76:5d:31:9a:0c:1a:c1:59:45:33:6d:f8:a3:10:68:08:
         2c:1e:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:16 2025 by rpki-client