Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
File:                     D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft (raw, json)
Hash identifier:          nHiGeSaYJLHxU9H0RAfSZKY5vAQ/p2ipHVhjzUHitHg=
Subject key identifier:   4E:60:A2:C2:F9:44:39:86:42:64:9F:08:C2:5C:C8:63:E3:37:E4:00
Authority key identifier: D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
Certificate issuer:       /CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
Certificate serial:       28FD02115C35C6FEE4961CEE68AC17FD37F14345
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
Manifest number:          0A
Signing time:             Sat 23 Aug 2025 02:56:08 +0000
Manifest this update:     Sat 23 Aug 2025 02:51:08 +0000
Manifest next update:     Sun 24 Aug 2025 05:31:08 +0000
Files and hashes:         1: 34352e3136342e3139362e302f32322d3332203d3e20323638363430.roa (hash: 1f4Li89JjfMh3Zvwa4e6/48Ur/rzUCE7uzz/lzOZsCc=)
                          2: 323830343a353434383a3a2f33322d313238203d3e20323638363430.roa (hash: FPH5t3f9p9u23ePvWI4mh8ez4iCBapk+tdB2o6Jl1+E=)
                          3: D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl (hash: dOICpBNGqiYy1JvCmiPstAJv+QL05zO9dg47EUBmiTg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl
                          rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 05:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fd:02:11:5c:35:c6:fe:e4:96:1c:ee:68:ac:17:fd:37:f1:43:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
        Validity
            Not Before: Aug 23 02:51:08 2025 GMT
            Not After : Aug 24 05:31:08 2025 GMT
        Subject: CN=4E60A2C2F944398642649F08C25CC863E337E400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:ba:db:af:7e:ab:b0:0b:51:57:ac:b1:7a:
                    1f:70:68:56:78:5d:42:2b:02:66:63:5c:27:fb:f6:
                    fc:d8:0e:a3:61:9a:25:84:79:a3:ae:c8:de:12:ee:
                    ea:83:1f:e2:a4:b6:b2:fd:1c:a0:5f:3b:53:eb:c7:
                    2a:c4:27:e1:1d:5b:58:a3:4a:7a:fd:f1:74:1f:bd:
                    b9:be:37:ba:28:86:a5:ec:fd:38:45:d4:f4:66:67:
                    fa:32:3d:77:0b:57:f5:ba:b5:29:b9:a1:bd:95:67:
                    79:1e:aa:61:2f:93:a7:0d:c7:d4:60:1b:80:ba:63:
                    d5:96:10:8b:2b:5d:21:fe:d1:41:ff:79:ab:14:8f:
                    b8:ea:8a:a8:19:72:ad:6f:fc:4f:16:c1:5a:aa:d9:
                    90:32:b4:f6:76:1c:55:3a:8f:90:67:05:8e:6e:05:
                    a7:55:88:c6:de:54:46:d7:87:32:4d:d3:60:fd:11:
                    58:76:b3:97:5e:c6:66:de:e4:9d:eb:08:6d:19:e9:
                    b5:f5:7e:02:bf:3b:46:76:a7:15:0c:76:71:2a:1f:
                    12:3c:b1:ba:af:59:82:2a:01:61:b1:d5:72:e2:a5:
                    c3:44:6c:61:34:7d:3c:a5:64:0b:f5:d9:21:cd:ab:
                    0a:05:ca:a2:55:91:77:35:8a:5c:dc:44:bb:3d:68:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:A2:C2:F9:44:39:86:42:64:9F:08:C2:5C:C8:63:E3:37:E4:00
            X509v3 Authority Key Identifier:
                keyid:D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:80:df:67:64:a3:e0:9e:03:c2:97:7b:3f:bd:bb:c7:e7:e9:
         24:e4:aa:d3:26:be:5d:73:c0:0e:ec:90:6c:d6:3c:bd:56:ec:
         da:50:1a:a5:b2:43:5c:7d:b3:f0:fe:07:b5:4a:92:d3:76:bb:
         eb:2c:49:26:d1:70:1c:17:09:45:9a:6f:3e:8c:5e:90:ae:24:
         40:91:2c:d1:4d:41:88:66:a2:ee:a5:77:aa:3a:ed:ee:5a:40:
         e6:18:bd:b0:7e:53:85:56:d6:48:05:99:92:8c:65:fc:d7:83:
         e4:8a:96:36:86:3a:20:ce:8c:f2:01:02:e6:79:be:77:f3:06:
         86:37:29:06:db:ec:c2:98:74:76:51:da:dc:02:be:df:e0:5f:
         93:ee:0f:33:29:63:94:b1:f3:57:46:dc:a7:73:d4:ed:9a:eb:
         85:9c:bb:6d:e9:a4:39:17:3e:05:bf:4f:3f:52:49:0f:5e:45:
         01:0e:a9:61:33:2d:36:e2:84:93:ba:0d:f2:1f:c6:f4:15:6f:
         ee:87:bb:1c:28:e1:fc:8c:17:f4:b9:2b:85:4c:c8:4d:87:82:
         20:74:db:dd:fd:65:f2:53:f7:df:8b:c6:c8:42:11:86:65:97:
         30:90:b2:e7:35:cd:f7:a6:c9:81:e4:6f:8c:d6:fd:bd:f2:62:
         55:7e:1b:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKP0CEVw1xv7klhzuaKwX/TfxQ0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUzMURGNUYxRkM5OTAzNjE1Nzg1N0EzQkMxMjA4RDBE
NjY3N0FGNjAeFw0yNTA4MjMwMjUxMDhaFw0yNTA4MjQwNTMxMDhaMDMxMTAvBgNV
BAMTKDRFNjBBMkMyRjk0NDM5ODY0MjY0OUYwOEMyNUNDODYzRTMzN0U0MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzLrbr36rsAtRV6yxeh9waFZ4
XUIrAmZjXCf79vzYDqNhmiWEeaOuyN4S7uqDH+KktrL9HKBfO1PrxyrEJ+EdW1ij
Snr98XQfvbm+N7oohqXs/ThF1PRmZ/oyPXcLV/W6tSm5ob2VZ3keqmEvk6cNx9Rg
G4C6Y9WWEIsrXSH+0UH/easUj7jqiqgZcq1v/E8WwVqq2ZAytPZ2HFU6j5BnBY5u
BadViMbeVEbXhzJN02D9EVh2s5dexmbe5J3rCG0Z6bX1fgK/O0Z2pxUMdnEqHxI8
sbqvWYIqAWGx1XLipcNEbGE0fTylZAv12SHNqwoFyqJVkXc1ilzcRLs9aJGHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTmCiwvlEOYZCZJ8IwlzIY+M35AAwHwYDVR0j
BBgwFoAU1THfXx/JkDYVeFejvBII0NZnevYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40
Y3cvMC9ENTMxREY1RjFGQzk5MDM2MTU3ODU3QTNCQzEyMDhEMEQ2Njc3QUY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzFERjVGMUZDOTkwMzYx
NTc4NTdBM0JDMTIwOEQwRDY2NzdBRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40Y3cvMC9E
NTMxREY1RjFGQzk5MDM2MTU3ODU3QTNCQzEyMDhEMEQ2Njc3QUY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADIDfZ2Sj4J4Dwpd7P727x+fpJOSq0ya+XXPADuyQbNY8vVbs2lAapbJDXH2z
8P4HtUqS03a76yxJJtFwHBcJRZpvPoxekK4kQJEs0U1BiGai7qV3qjrt7lpA5hi9
sH5ThVbWSAWZkoxl/NeD5IqWNoY6IM6M8gEC5nm+d/MGhjcpBtvswph0dlHa3AK+
3+Bfk+4PMyljlLHzV0bcp3PU7ZrrhZy7bemkORc+Bb9PP1JJD15FAQ6pYTMtNuKE
k7oN8h/G9BVv7oe7HCjh/IwX9LkrhUzITYeCIHTb3f1l8lP334vGyEIRhmWXMJCy
5zXN96bJgeRvjNb9vfJiVX4b1g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:17 2025 by rpki-client