Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft
File:                     B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft (raw, json)
Hash identifier:          mGujuGXIW+w10PdicCDWPOSms3kayATRk8NvjMUxDNM=
Subject key identifier:   43:29:33:C7:5C:2D:4C:BB:F8:63:83:1E:30:0B:06:11:4C:4B:B3:72
Authority key identifier: B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
Certificate issuer:       /CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Certificate serial:       573F89B1AB2283C4D975395AB05A54BC80CAF275
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft
Manifest number:          02A4
Signing time:             Sat 23 Aug 2025 13:42:16 +0000
Manifest this update:     Sat 23 Aug 2025 13:37:16 +0000
Manifest next update:     Sun 24 Aug 2025 13:59:16 +0000
Files and hashes:         1: 3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa (hash: 3bmEBpuiUnKim8NmMh/PgUVQqKur+c74VzBnlVaevm0=)
                          2: B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl (hash: rb/E7KYFhYaOilTarf+8kj1Yr8ErUssC1n6h1Gmvkco=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl
                          rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3f:89:b1:ab:22:83:c4:d9:75:39:5a:b0:5a:54:bc:80:ca:f2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
        Validity
            Not Before: Aug 23 13:37:16 2025 GMT
            Not After : Aug 24 13:59:16 2025 GMT
        Subject: CN=432933C75C2D4CBBF863831E300B06114C4BB372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c9:97:61:44:6d:d9:56:cb:e4:0f:47:05:4e:
                    4b:b5:ac:c8:77:29:df:6d:9e:52:ee:60:e4:8e:3b:
                    55:08:c7:a0:fb:fb:a1:7b:b9:0c:ae:90:90:25:e4:
                    57:e1:a5:4c:b6:fd:a7:83:62:b2:66:99:c0:1c:2c:
                    7e:14:73:58:3c:58:98:93:ae:22:ea:70:e7:3b:b7:
                    b9:8a:34:7f:03:41:42:04:a2:83:38:01:36:cc:62:
                    54:09:f6:d5:66:f0:2d:e8:8d:a5:18:f9:ac:8f:e5:
                    9d:34:75:e8:19:88:a3:38:d8:bd:6b:3a:81:78:d8:
                    5b:c4:c8:7d:83:0b:5a:ee:f4:49:c5:50:dc:60:f3:
                    0d:e8:37:e6:6e:a6:5d:3d:4f:4c:a3:61:29:17:46:
                    19:2c:97:34:60:f1:8c:67:04:e5:2a:02:e6:70:3b:
                    68:41:a1:58:36:ee:d8:c4:19:7e:72:34:b2:a3:4f:
                    6c:28:96:b1:29:61:e2:d3:bf:12:df:2f:ac:60:59:
                    b8:dc:fb:53:c4:ef:15:4b:5e:63:13:36:03:9e:7b:
                    60:4e:19:4d:b0:88:cf:ae:5e:ed:61:1a:c3:8a:c5:
                    dd:e9:12:b6:5f:0c:2a:0f:2a:4c:9f:d0:58:a4:0d:
                    9c:5c:fe:15:60:28:8b:ee:51:ca:0e:e2:46:ce:6f:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:29:33:C7:5C:2D:4C:BB:F8:63:83:1E:30:0B:06:11:4C:4B:B3:72
            X509v3 Authority Key Identifier:
                keyid:B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:28:c3:76:10:3c:9f:27:bd:66:21:6c:b9:17:58:7c:14:
         0c:b9:71:4c:c8:97:6a:7a:bf:6a:11:a3:c4:d3:be:7c:e2:01:
         f2:94:45:6d:a5:66:f3:91:82:b4:f1:da:5c:c7:8b:94:d2:3a:
         c2:cb:d1:37:fb:2d:c1:f1:6a:e8:6c:2a:ce:b2:14:3b:b3:b4:
         72:a0:dd:60:60:0a:3d:b2:fe:b5:c7:fb:93:ea:e6:46:6a:e0:
         0d:2a:3a:ee:55:f7:7d:47:78:15:51:d4:08:c8:96:7f:08:6a:
         a9:f3:53:80:b8:2e:15:ef:5c:25:b1:bf:96:07:e7:ff:eb:38:
         f2:09:73:9d:67:c5:93:04:15:08:94:15:62:b5:bd:1b:ad:45:
         3a:ef:46:6a:08:a4:78:49:8c:d5:38:49:42:c6:ad:23:be:9d:
         03:07:87:cd:6a:60:5c:5e:62:ff:28:6d:c7:5c:2b:d3:b2:cc:
         43:bd:62:b6:70:64:b2:61:8b:1d:ed:b3:41:84:54:0e:57:8c:
         ba:c1:8d:78:07:48:be:df:d0:78:2c:f6:b1:79:c9:49:7c:8a:
         a7:73:2e:31:5f:24:08:82:d8:74:2a:81:3e:61:f3:cc:23:a4:
         8f:d7:23:c4:11:54:87:2b:8e:dc:86:63:f4:4c:45:fb:b6:e6:
         71:97:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:05 2025 by rpki-client