Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
File:                     421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json)
Hash identifier:          zeKOslBEnh/h4I6nqhcZJYjiH3tt5VUZ1tSknlw9vUE=
Subject key identifier:   A5:5A:F4:0C:F1:3C:34:25:39:6A:2A:AA:C5:D6:3A:CE:37:9B:4D:1F
Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
Certificate issuer:       /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Certificate serial:       41F596DD07CCA27BEF22AFDF456E453AADBFD5EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
Manifest number:          DA
Signing time:             Sat 23 Aug 2025 05:51:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:46:49 +0000
Manifest next update:     Sun 24 Aug 2025 08:01:49 +0000
Files and hashes:         1: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: ef+T7fD61YRIwrxg14rcNsgr5m6NNPLpyPE9tOYhXaw=)
                          2: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
                          rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:96:dd:07:cc:a2:7b:ef:22:af:df:45:6e:45:3a:ad:bf:d5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
        Validity
            Not Before: Aug 23 05:46:49 2025 GMT
            Not After : Aug 24 08:01:49 2025 GMT
        Subject: CN=A55AF40CF13C3425396A2AAAC5D63ACE379B4D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:28:2e:07:26:13:fb:21:31:e4:6b:c2:9d:
                    57:5c:47:ed:cd:22:dd:11:3f:dd:4e:54:0b:9e:c5:
                    55:bd:ba:d1:d7:1e:b9:1a:1e:4a:fa:ee:c8:ff:a5:
                    c4:d7:ff:ac:bd:a7:b1:80:3d:aa:7a:14:45:36:12:
                    76:50:2b:5d:d7:2d:ab:db:71:d6:e7:49:53:8f:0d:
                    4d:f7:fe:70:88:6d:b5:d1:13:39:89:bc:cd:59:1d:
                    b6:f5:eb:d3:64:ee:de:35:d1:09:93:70:44:be:55:
                    aa:dc:3c:bd:4d:79:9c:33:b1:60:7d:d8:f4:92:c0:
                    af:5e:54:c8:71:0e:c8:41:a0:0c:f4:f1:cc:c0:34:
                    b7:ac:fc:0d:55:86:d3:1f:95:05:3f:37:47:5c:ee:
                    4e:aa:0e:84:e8:93:23:e1:82:0c:8b:80:c1:36:0c:
                    79:dd:42:63:e4:bd:84:2c:83:28:2b:1a:ad:e2:31:
                    43:58:c5:71:0f:8b:75:e2:af:60:e2:d9:fa:0d:7b:
                    1e:2a:e8:c2:1a:43:da:07:e2:8a:d3:5f:f5:a2:90:
                    fc:5b:2d:91:db:21:a9:41:81:1c:d5:bd:55:2b:34:
                    66:93:09:ba:85:80:d4:6f:61:16:a3:fe:a2:bd:7c:
                    80:29:20:43:66:cc:87:a5:ac:d5:73:7e:fd:29:b1:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:F4:0C:F1:3C:34:25:39:6A:2A:AA:C5:D6:3A:CE:37:9B:4D:1F
            X509v3 Authority Key Identifier:
                keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:5f:83:db:0d:3a:5a:b4:5e:dd:61:98:c5:df:ca:20:dd:
         7e:dd:fd:b2:0a:e0:f5:4a:05:32:34:3d:72:8d:73:98:b8:61:
         6a:d4:c6:92:ef:26:31:31:7c:48:19:3e:7a:c0:00:0f:7f:cf:
         74:4b:8e:f3:28:4f:89:3a:0a:ca:73:a2:70:c6:5c:e5:68:6f:
         67:1f:c0:90:91:e2:31:39:aa:56:be:52:3c:5a:5e:7f:13:54:
         93:ee:b6:b8:59:d9:4e:72:a1:6e:53:f4:1a:e6:e7:cc:19:80:
         ca:c5:6a:4d:f8:dc:bd:18:72:7d:b9:3a:6f:94:a3:0a:71:48:
         b8:9c:62:3f:a2:00:3a:10:55:6f:d0:a0:9d:7e:b3:45:c9:e0:
         13:05:94:bb:14:04:b2:19:df:41:9d:04:0d:fa:f7:d7:7a:30:
         b3:9e:8b:2a:3a:a1:30:24:06:4e:46:fc:3f:40:7b:85:ce:e2:
         33:0e:3f:dd:88:bc:59:76:7b:17:40:09:45:2c:31:89:a7:76:
         c1:a3:27:8b:bd:e3:e5:30:c3:57:e9:01:da:39:88:58:5c:83:
         5d:e4:2d:4f:48:5c:2b:e5:b6:d0:1c:26:05:b2:c8:06:f8:ca:
         fe:0a:82:33:f0:6e:14:30:59:08:79:46:73:d6:ee:18:5b:f1:
         5d:57:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:32 2025 by rpki-client