Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          vFUv2Z41AyGP5nucLRel6hu8ObZLMcgfXXi1Fzr58OE=
Subject key identifier:   4F:1C:3B:A8:AB:34:07:46:85:8A:11:8F:46:68:90:32:BE:56:92:72
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       130E73913B0A397F142372BBFCB5308AA040A7BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          02A2
Signing time:             Sat 23 Aug 2025 10:29:21 +0000
Manifest this update:     Sat 23 Aug 2025 10:24:21 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:21 +0000
Files and hashes:         1: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=)
                          2: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: C20itxJ4DTD7IOico22t2Q5Dvtz1NIhvSEH11LBPj6s=)
                          3: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
                          4: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          5: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: s0XQ5cBXXSL2f/2QJcexrzksmoQy6uAfeMCGqzy8uKQ=)
                          6: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          7: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=)
                          8: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: P6SWfUEDEOicu/ThJIKlS3i7QKxb9vdCrj94vmvEAhk=)
                          9: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: 4lJdThsjLhGVHYQ4RpimGic9G9A4kVJswJRkv/eK3vE=)
                          10: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: LxMMnzvb3MU5AwskvJ2vhzJKMPcEnPpmSsbF4wuhS5s=)
                          11: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
                          12: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          13: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: 7pF+J+djX5+jWkVin/T3LCK6bs9RTrurUrAtxMJI8R0=)
                          14: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          15: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          16: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          17: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0e:73:91:3b:0a:39:7f:14:23:72:bb:fc:b5:30:8a:a0:40:a7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Aug 23 10:24:21 2025 GMT
            Not After : Aug 24 14:00:21 2025 GMT
        Subject: CN=4F1C3BA8AB340746858A118F46689032BE569272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:2b:0f:23:77:b0:54:1a:f8:e5:ce:e0:e3:
                    de:bb:39:ce:48:a7:d5:df:35:12:db:ae:1b:b7:c2:
                    64:55:57:19:c3:3b:21:4f:a2:e5:27:36:1d:87:8f:
                    b6:9e:02:fe:14:b1:91:b7:66:fc:79:04:c2:46:7f:
                    a1:92:45:75:d8:7b:49:45:60:d8:84:38:cd:6c:ae:
                    a9:23:4a:11:04:93:b2:0b:e5:03:b2:52:bf:c5:5b:
                    8d:ce:c4:c8:cf:ba:3d:74:60:63:3b:4b:3f:db:58:
                    7e:32:ca:38:5d:49:55:f4:63:55:92:3e:12:04:d2:
                    db:30:65:03:db:36:c5:da:9b:4c:35:dc:f6:7d:0a:
                    b9:86:ff:6e:35:2c:f1:cf:e1:df:4e:7a:36:38:49:
                    04:2f:f1:2f:05:d4:73:1c:34:3d:64:25:0d:3d:a8:
                    7c:cf:1e:f2:5a:de:d7:35:2f:74:bc:75:71:75:ad:
                    04:b6:51:fe:20:86:1d:f4:94:5c:01:16:d2:03:9b:
                    26:fd:61:a6:82:bb:02:81:3d:e4:2c:70:ad:b5:ae:
                    f9:f6:60:58:d3:70:29:a2:8c:79:b1:56:38:c0:8c:
                    9f:2d:4b:56:f9:a5:1f:4b:f1:83:6d:98:62:64:25:
                    da:7d:4e:56:d0:c9:cb:1b:50:95:38:b4:d2:68:58:
                    8b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1C:3B:A8:AB:34:07:46:85:8A:11:8F:46:68:90:32:BE:56:92:72
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c2:5b:ec:28:2c:98:58:ad:d3:c8:e3:33:d1:29:7e:c1:07:
         6e:bb:84:3c:fd:fc:fd:08:ee:46:b0:9b:58:34:9a:af:2f:56:
         cd:3f:37:ab:11:ae:ef:34:c2:72:5c:dc:ec:95:d8:f7:57:f8:
         13:58:9f:36:c5:3d:62:10:96:2c:f0:7d:46:61:65:72:25:86:
         21:cd:14:bc:a4:a5:d4:01:0c:c1:b1:96:d8:a0:e8:17:bc:68:
         44:26:9b:f1:fb:ea:20:46:bc:72:00:53:8f:0c:09:ea:33:04:
         58:45:c2:c2:ab:9f:4e:62:c1:32:96:e8:5f:75:3d:eb:ff:8b:
         60:7d:37:95:ea:80:5d:0a:4d:f2:ce:9a:53:da:91:5d:2e:a8:
         6a:65:2d:f0:78:da:a8:3e:20:59:4a:12:48:8c:ef:3a:aa:87:
         28:26:c9:ce:1a:47:50:0b:e3:29:2f:4e:f2:56:de:9c:2d:62:
         9e:63:0c:36:d2:51:82:6e:24:87:e9:f2:e7:2d:8d:0c:52:9c:
         f4:19:04:37:78:05:d2:16:b6:63:f8:c6:f4:54:11:30:37:e7:
         9e:7a:15:33:fe:6b:91:e6:dd:57:d3:df:c0:a4:60:20:96:d3:
         76:bb:82:c7:66:d2:a1:e9:63:e3:9c:7d:a8:1f:99:c5:97:2e:
         1a:c9:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:37 2025 by rpki-client