Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
File:                     24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft (raw, json)
Hash identifier:          P/Fccdi84GrZc/3aCVyCnstDcOgCnFDaHkWshRtm9G8=
Subject key identifier:   E1:E5:48:0D:EF:56:A9:20:0E:F5:B4:E4:99:FE:39:9B:56:5C:F2:A9
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Certificate issuer:       /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial:       3C19A73EEC79BE6C83DEF5FB3656019DCA40C341
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
Manifest number:          028F
Signing time:             Sat 23 Aug 2025 10:17:30 +0000
Manifest this update:     Sat 23 Aug 2025 10:12:30 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:30 +0000
Files and hashes:         1: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl (hash: eWB+u9MdIioVIGWeu3HIYbHY49iHX+353xEC5aazfBU=)
                          2: 323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (hash: Z0J4eT+/Pm37ea2jwyYZIrXM8+ylfxcILtCFUN3f0nU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl
                          rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:19:a7:3e:ec:79:be:6c:83:de:f5:fb:36:56:01:9d:ca:40:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
        Validity
            Not Before: Aug 23 10:12:30 2025 GMT
            Not After : Aug 24 12:00:30 2025 GMT
        Subject: CN=E1E5480DEF56A9200EF5B4E499FE399B565CF2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:c2:95:8b:b0:c5:21:98:a7:ad:e4:fa:0e:
                    3d:7b:7f:55:8b:ea:f7:57:6d:33:e9:cf:03:18:02:
                    f4:ee:fa:f9:ff:cf:a3:34:dc:e1:e8:e1:13:18:69:
                    7a:db:c2:42:4d:0b:6a:02:92:63:b6:29:83:cc:2f:
                    c2:3d:20:a3:9c:f8:8c:0b:24:e1:54:1b:47:92:82:
                    90:36:30:06:b2:93:9e:65:c4:75:dc:df:c4:9b:7d:
                    ad:f0:e0:d8:11:42:2b:45:d0:90:92:f0:35:eb:fa:
                    74:71:75:8b:4a:a8:09:d5:ef:bd:29:c9:e1:1e:9d:
                    7c:0a:fb:6b:30:30:3d:50:9f:a7:8f:55:f2:c7:50:
                    5c:dc:7d:ae:4b:92:34:66:07:7f:2a:59:af:d8:6a:
                    ec:0f:5f:f0:81:ab:a8:2f:79:a2:45:f0:33:51:a1:
                    6b:08:47:17:14:cb:94:95:79:ba:79:85:c8:d5:c8:
                    06:e4:be:57:60:aa:f4:9e:27:12:1b:70:06:33:54:
                    2f:78:49:c5:9c:6a:8f:2c:54:94:53:00:09:dd:f6:
                    bb:00:4c:de:d4:9c:7d:f4:d4:74:ff:3d:81:b3:7c:
                    b7:ec:1a:a2:e3:fa:3b:c0:1d:28:17:0f:80:15:9c:
                    1f:b5:4c:b4:5c:7c:42:f6:b2:de:9e:40:0d:6d:58:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E5:48:0D:EF:56:A9:20:0E:F5:B4:E4:99:FE:39:9B:56:5C:F2:A9
            X509v3 Authority Key Identifier:
                keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:29:54:d8:17:49:3c:9a:f6:b3:c4:55:3a:49:d5:a8:d0:
         a6:bd:7c:89:a8:10:a8:0e:41:d1:3f:b2:63:12:49:7d:2d:1e:
         cf:bb:92:92:43:1a:78:4c:cb:79:68:1b:9b:cb:71:b2:66:c1:
         75:3c:cb:b4:a9:23:e9:4b:3d:69:e5:68:bb:6f:64:06:b3:4b:
         6c:0b:ae:39:cc:3c:53:b8:f2:9e:41:d0:ff:e4:49:c5:df:f0:
         4c:30:8e:3a:b7:14:23:c1:c0:98:79:12:d8:5a:17:d4:51:cc:
         5e:74:da:f9:f5:27:d1:70:55:64:48:6c:5f:2c:14:6f:41:08:
         7e:f8:39:72:31:6f:08:7a:b6:fa:16:96:8d:a5:61:10:63:c9:
         f3:00:a1:25:59:a2:b7:e2:90:f6:19:a7:9a:58:f5:a1:d0:d7:
         bc:4f:22:92:c5:89:55:2a:b4:8f:23:47:58:4e:61:d3:37:7f:
         42:ed:bb:7f:c0:24:e6:f0:06:58:02:d0:f4:01:9e:ad:80:ab:
         b1:7c:9e:e8:25:1b:4a:31:f3:39:ad:f5:37:74:c7:36:05:12:
         9f:d6:3b:cd:e9:18:0c:4a:a1:93:be:d3:25:a8:95:36:87:88:
         45:5a:dd:5b:66:da:ec:eb:16:84:cf:d3:b7:57:45:ac:3c:05:
         e1:44:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:37 2025 by rpki-client