Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          adukgUdXCP7tHLr+/QZUbI/XfwjwC+iQquM+MOUEz/A=
Subject key identifier:   B9:BE:81:A4:63:2D:D6:12:C3:99:2C:9B:6B:F1:5E:F5:E5:C0:D5:AD
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       24C4E9C0EFC87896C44357FFC2536407D5165CB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          02A1
Signing time:             Sat 23 Aug 2025 02:40:02 +0000
Manifest this update:     Sat 23 Aug 2025 02:35:02 +0000
Manifest next update:     Sun 24 Aug 2025 04:50:02 +0000
Files and hashes:         1: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=)
                          2: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: DVRW50QGSfKkCx0M1+VA9DFoSNRjF7ldfT0pmPw8n2A=)
                          3: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: 3KJaKxQH8BfvmqPdr0f3pk4VVvf9POaN3twm4TXLa3A=)
                          4: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lMncz++kvT6MHNunBcJ6oHQBvWwWSBFElu5ZGi2kkO0=)
                          5: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: n00V/6BD07J5vldoyo4A9fQ7Snmd9/NM9tK5/CL8+qQ=)
                          6: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: Em9nIZXC1XnJHHkeLO0Am9KIh2IHxIcFrayfBCdDiB4=)
                          7: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=)
                          8: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: 40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:e9:c0:ef:c8:78:96:c4:43:57:ff:c2:53:64:07:d5:16:5c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Aug 23 02:35:02 2025 GMT
            Not After : Aug 24 04:50:02 2025 GMT
        Subject: CN=B9BE81A4632DD612C3992C9B6BF15EF5E5C0D5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:9b:bb:65:fc:5c:54:24:aa:84:2b:0c:25:
                    b6:38:d6:16:91:13:19:f0:ee:09:85:bb:9e:aa:87:
                    1d:7a:30:42:59:d1:f0:fa:0e:a3:ba:8d:a3:d2:c6:
                    08:1a:88:a4:de:31:f0:ff:79:32:57:ae:e6:27:bf:
                    c2:43:5d:e2:9d:a2:a6:94:3e:e5:d8:5b:9a:5f:72:
                    5a:6f:9f:14:32:a3:f8:27:e9:12:74:36:29:6c:40:
                    df:07:04:81:ed:45:6e:49:41:38:18:ff:c9:0d:61:
                    b2:fb:a1:2e:25:64:9f:e9:7c:a4:80:ef:c2:cd:d6:
                    a4:cc:17:37:d1:79:1a:e5:59:14:08:b0:64:9e:ca:
                    c8:f5:42:3e:84:b6:cf:aa:2b:b1:22:e8:57:d8:70:
                    a8:0c:d0:5d:c7:2d:10:d7:5d:19:68:94:98:bf:c7:
                    9d:b9:d2:ee:89:c9:29:26:de:13:7c:5a:44:4e:62:
                    ef:d0:d7:be:0b:1f:6c:3a:57:a0:37:e5:23:a2:85:
                    38:04:a7:09:a8:4c:dc:ed:3e:fc:de:e5:ce:86:d0:
                    26:86:e9:9e:46:f6:d7:98:83:1a:0b:90:de:9c:c1:
                    ab:36:f6:f4:11:f8:e6:2a:91:40:bd:d2:bf:6e:b3:
                    04:42:a4:b8:b2:a6:2a:b6:df:30:e0:87:2a:d3:0d:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:81:A4:63:2D:D6:12:C3:99:2C:9B:6B:F1:5E:F5:E5:C0:D5:AD
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:8d:47:c7:5b:16:54:36:57:7b:27:55:22:bf:a3:e9:64:
         96:76:a0:e7:1c:a1:09:6d:b5:ac:87:14:05:38:54:a6:17:b7:
         d9:58:9f:27:c3:c9:21:34:8d:29:b5:c9:62:d1:ef:21:42:db:
         52:fe:dc:83:b0:87:80:93:b5:95:df:85:61:3b:60:4d:3c:cb:
         30:b8:02:c5:8c:ae:7a:75:2e:c4:68:30:b8:2b:e0:1a:06:8e:
         51:5d:99:e3:12:1b:61:d0:43:49:b5:69:c9:5b:6d:26:37:bc:
         9c:99:0f:1e:64:41:11:93:6e:ad:71:fe:ea:23:f0:6c:b6:fe:
         3b:a2:dc:66:38:c8:7c:69:a1:fd:9c:8c:bc:89:a9:97:3c:b9:
         ec:48:ca:d7:c7:99:95:4e:aa:e8:f4:01:07:92:6b:aa:18:c8:
         89:27:5b:2a:a7:a3:6e:54:c0:bf:bc:a3:4b:c6:10:8d:04:25:
         6c:30:0f:54:4d:80:fa:e4:e3:cb:20:a5:3e:82:dc:68:cb:76:
         2e:58:ed:bf:a0:4b:65:ce:13:df:88:0f:e5:55:be:44:7a:4d:
         76:e0:59:84:03:c2:c5:7f:ee:dc:80:f9:e3:98:f2:ff:ac:7b:
         e8:fa:18:43:4f:0a:30:1d:9d:90:a6:ce:d9:96:01:af:fc:cb:
         36:f9:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:51 2025 by rpki-client