Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
File:                     95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json)
Hash identifier:          Um+Mw3kkgoGcq7CsiNW0RfBHUzC9XNZwkNc5qwoY3aM=
Subject key identifier:   29:38:DA:2D:FA:F7:5B:7B:F7:86:7E:B0:4B:62:B0:B6:16:8A:1C:1B
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       70678B4F7EE743208BBABE5F02C0A32F82F07B9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
Manifest number:          02A1
Signing time:             Fri 22 Aug 2025 23:22:58 +0000
Manifest this update:     Fri 22 Aug 2025 23:17:58 +0000
Manifest next update:     Sun 24 Aug 2025 02:15:58 +0000
Files and hashes:         1: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: q2vqiIMjq1wnH/CP3Dr+0H+LjsTPCNsiO+gCtC4Xm8c=)
                          2: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: dv3QhcfGmiv5Vc3c4EjQIIZYAyNY0UMg4oALIsJplwI=)
                          3: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: 3iO3oabNleqfnYnug7vGPkHKUazTL9LUAT5158uLJ1c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
                          rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:67:8b:4f:7e:e7:43:20:8b:ba:be:5f:02:c0:a3:2f:82:f0:7b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: Aug 22 23:17:58 2025 GMT
            Not After : Aug 24 02:15:58 2025 GMT
        Subject: CN=2938DA2DFAF75B7BF7867EB04B62B0B6168A1C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:9d:6f:18:45:16:83:58:ac:9a:10:44:a6:
                    55:32:1a:f8:7b:43:3c:0a:98:81:6f:26:5a:52:a2:
                    8f:1d:3f:b3:e4:ef:91:bf:a0:97:46:d0:aa:21:9e:
                    d7:85:b6:ea:38:91:2a:b8:aa:0f:81:2c:f4:74:97:
                    5f:4f:11:7a:21:e3:1a:45:dc:f1:57:79:f3:68:05:
                    15:12:31:73:ad:06:f3:79:e7:1a:36:96:61:cf:5a:
                    8e:4b:51:bc:34:81:ea:cd:e9:0c:4c:67:60:bf:96:
                    87:37:c7:2b:36:80:cb:cc:ea:ab:40:6f:99:1f:fc:
                    6d:0a:3e:08:27:77:22:9d:80:88:4e:19:a6:e7:e8:
                    f8:b9:ae:6d:6f:04:57:39:62:1e:83:e5:73:97:c6:
                    f2:ff:80:cb:ee:ad:9a:f6:20:ca:d5:61:43:c2:e3:
                    d2:af:89:83:6d:83:70:e7:98:01:d0:d0:7d:fe:d1:
                    1b:3c:bb:1a:ce:6a:a4:13:6f:92:47:02:7a:9c:38:
                    ff:22:23:3f:df:d0:26:7e:b6:ba:e9:b6:63:52:dd:
                    89:42:83:73:9d:dd:20:95:4e:af:be:37:d0:23:9e:
                    f6:4c:1c:b6:b6:1d:5e:a8:a0:8a:6b:d8:b9:c6:c5:
                    b6:7a:37:bf:1b:af:cc:cd:b9:91:a5:8c:34:f5:38:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:38:DA:2D:FA:F7:5B:7B:F7:86:7E:B0:4B:62:B0:B6:16:8A:1C:1B
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:0a:29:e7:8f:6e:54:2a:5b:db:be:4d:b3:68:02:97:ce:
         d4:67:49:ca:98:2d:4c:9a:34:60:a8:00:cc:9b:0d:cc:1e:f8:
         21:74:f4:ac:28:7a:4b:ed:8d:06:02:c7:65:72:c2:f8:0e:f1:
         77:e8:bc:0b:ba:fb:b2:74:72:90:09:fd:0f:c4:1e:bb:12:39:
         35:09:b9:0c:2b:1b:b7:6e:05:40:b5:50:96:7e:da:3a:fc:c0:
         97:e8:3e:51:fe:b1:18:c7:16:48:6f:1e:46:9b:d1:22:d8:8f:
         77:2a:d8:85:e5:b3:58:af:d0:fe:35:eb:d0:8e:b6:b1:43:45:
         5a:9a:8f:5a:a9:32:6d:70:83:78:9a:f0:2a:15:22:8d:87:22:
         d7:50:e1:01:a1:66:80:57:c6:20:07:7a:53:0f:c4:17:96:a3:
         a9:6d:fb:e0:26:5c:7e:6d:09:c3:c1:4c:8c:b6:c7:09:92:64:
         5a:6c:22:14:19:40:80:ae:41:e5:27:30:e6:0d:b7:64:79:ec:
         54:6d:d6:4e:af:da:0e:d3:03:d9:83:67:f5:78:d2:7f:f8:8e:
         ed:af:69:95:fd:1a:9c:d7:f5:7b:3b:6a:c9:4e:48:00:e5:26:
         0e:bb:17:60:53:d5:ee:28:92:8d:cc:bb:be:54:9d:15:c8:07:
         d5:d0:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:20 2025 by rpki-client