Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.mft
File:                     DB8BD219C29445B02790E754D58EDF10C636BDFE.mft (raw, json)
Hash identifier:          2NdE6k/aJmp38Wae3oSDqXqhbb+YeWYCRnDggNPFFPA=
Subject key identifier:   B4:2A:67:96:13:21:9C:6F:08:4E:8F:74:9E:1A:A8:4E:E2:2F:2F:5A
Authority key identifier: DB:8B:D2:19:C2:94:45:B0:27:90:E7:54:D5:8E:DF:10:C6:36:BD:FE
Certificate issuer:       /CN=DB8BD219C29445B02790E754D58EDF10C636BDFE
Certificate serial:       5F35714938ABAFADA52A84C286E328EEBFBB6774
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8BD219C29445B02790E754D58EDF10C636BDFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.mft
Manifest number:          0152
Signing time:             Fri 22 Aug 2025 22:26:41 +0000
Manifest this update:     Fri 22 Aug 2025 22:21:41 +0000
Manifest next update:     Sun 24 Aug 2025 01:18:41 +0000
Files and hashes:         1: DB8BD219C29445B02790E754D58EDF10C636BDFE.crl (hash: rX38WndwSrz1IS5ESytMfSXQf1BWjnpk+C+cFKywlYg=)
                          2: 323830343a373537303a3a2f33322d313238203d3e20323731303436.roa (hash: Z9dSqUiLwwXNzt0jcXpB/bCFYDWjRx8mC0tBvDoxHwA=)
                          3: 3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa (hash: dbQvZLI6ion21v8Ai9M15C4QrwZcoFN4P2bF0EXp+nc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.crl
                          rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8BD219C29445B02790E754D58EDF10C636BDFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:35:71:49:38:ab:af:ad:a5:2a:84:c2:86:e3:28:ee:bf:bb:67:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB8BD219C29445B02790E754D58EDF10C636BDFE
        Validity
            Not Before: Aug 22 22:21:41 2025 GMT
            Not After : Aug 24 01:18:41 2025 GMT
        Subject: CN=B42A679613219C6F084E8F749E1AA84EE22F2F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:d3:f8:cb:ae:25:1f:b1:6d:e9:f3:bc:73:
                    8a:2c:31:fd:dd:80:9d:dd:dc:39:24:1b:a9:15:fe:
                    95:70:1b:05:0e:97:5c:6a:b7:36:e4:90:11:78:92:
                    e1:a8:25:5e:be:5a:fe:1c:18:c5:9c:27:b6:4c:d6:
                    b1:21:70:ac:7e:42:07:04:c5:e5:d6:2c:3b:ae:18:
                    83:67:25:8c:15:bc:d0:1b:d4:1f:0a:6f:9e:82:3a:
                    8a:e5:18:77:d0:67:28:2c:d9:47:4e:4d:d7:0e:c7:
                    5d:62:c1:40:ee:7e:b7:6d:ed:13:a7:cf:d9:3d:5f:
                    a1:fa:22:a7:c4:98:78:ca:51:19:9d:9a:4c:3c:0a:
                    3a:16:6e:09:a0:ee:93:4a:86:bb:61:1a:31:23:03:
                    81:7a:5f:7a:82:1e:de:80:4d:eb:fe:c9:6e:a6:27:
                    1e:b2:f3:d2:15:67:98:de:98:9b:09:52:87:20:30:
                    e0:32:c5:a2:f4:cc:c6:fa:19:47:66:92:43:5f:4b:
                    42:e4:82:ea:6c:2c:c7:0b:3b:f6:e1:bd:4b:4f:8b:
                    e4:ae:0b:85:33:84:8e:88:44:a3:42:62:db:6a:ca:
                    6a:17:14:88:05:13:37:9f:d3:82:e8:6e:dc:da:a4:
                    71:47:fa:48:74:d1:8c:88:2d:b3:a1:70:66:e2:5f:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2A:67:96:13:21:9C:6F:08:4E:8F:74:9E:1A:A8:4E:E2:2F:2F:5A
            X509v3 Authority Key Identifier:
                keyid:DB:8B:D2:19:C2:94:45:B0:27:90:E7:54:D5:8E:DF:10:C6:36:BD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8BD219C29445B02790E754D58EDF10C636BDFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DB8BD219C29445B02790E754D58EDF10C636BDFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:16:53:1e:9e:e7:66:34:4f:3a:1e:4d:94:b9:90:bb:7d:
         5d:72:b9:f6:9a:bd:50:70:b1:1f:76:44:48:fd:15:63:37:47:
         08:7a:ea:41:21:5d:aa:f7:4c:91:29:70:e5:f7:f6:08:3a:fe:
         52:e1:b3:6b:a4:c3:f0:13:a6:4d:aa:63:ea:62:ca:25:f7:f5:
         b4:4a:25:03:bb:cc:05:ee:23:e3:d4:dc:0f:1a:cb:23:62:cc:
         3c:72:98:a1:8b:7c:90:0b:3f:49:1f:91:35:af:94:ed:b9:a0:
         36:5d:e7:8a:fd:10:5f:0c:63:fe:df:56:ad:af:b5:46:a0:d8:
         37:1d:09:3f:92:94:8c:a6:b6:d5:3b:a3:39:a3:7d:ce:2b:b2:
         7b:90:10:04:1c:b9:68:5d:79:b6:f7:d5:f7:e9:b7:4e:65:aa:
         57:fd:98:f1:4a:a8:ec:40:81:c5:8e:9e:a9:be:3d:37:78:0e:
         35:f8:a0:47:34:18:58:ff:8e:f2:67:ff:d0:53:fd:2d:53:84:
         02:37:72:9b:f3:54:69:83:af:ee:72:22:6f:f6:3f:30:87:a8:
         1f:e5:a3:34:cf:07:ea:06:8c:d8:e2:49:e9:bc:2f:5a:3b:e0:
         ba:e0:11:7c:65:6f:f8:3c:8b:17:9a:06:5a:37:ca:15:d1:03:
         21:9e:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:12 2025 by rpki-client