Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
File:                     E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft (raw, json)
Hash identifier:          gqUQQsyXWMlDtmIzdN4sPchcXiXOj47A6vj4ZJgNLSA=
Subject key identifier:   5C:7F:0A:03:F2:5D:68:03:63:FA:61:96:3E:9B:60:9C:92:1F:30:71
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       3D4517CDE010CEECDFEC9F1516972D1F2A19E420
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
Manifest number:          E6
Signing time:             Mon 20 Oct 2025 04:12:31 +0000
Manifest this update:     Mon 20 Oct 2025 04:07:31 +0000
Manifest next update:     Tue 21 Oct 2025 07:44:31 +0000
Files and hashes:         1: E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl (hash: cfIYcC7/mG7DdGtRgynbGhN42u3OdU8rG+AoiuwX/98=)
                          2: 323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa (hash: oTsWtwKr6AsKcKSiIACkui8/r4KI48XlfXRbN5Ph0B0=)
                          3: 34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa (hash: AJGgQgsxwIk4dVlVq0JfSI7buI/VGzoipoua+psqc2E=)
                          4: 323830343a353130343a376530303a3a2f34302d3430203d3e20323638343235.roa (hash: uLu9gWUq6/BimsV43hOxu+K+0rS7t0/6Njcdq0Bi1g8=)
                          5: 34352e3136302e3137302e302f32342d3234203d3e20323638343235.roa (hash: YDpgH/4bezLcHcKquy0hO/2IbIOHc/EvOAlJ0sHVWu4=)
                          6: 34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa (hash: gSnKP9WhOoPdQnm2UThEPqz/xuYFeGKfT5pMDS2CYWQ=)
                          7: 34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa (hash: JzBeqihAa+Mkl3GB5cphyq5G6WYEL7Ee5oQRkQFRnTE=)
                          8: 323830343a353130343a3a2f33332d3333203d3e20323638343235.roa (hash: O5lDJAGa/1XEPXAo82R4hgC3bbIo0b4QsYTQy2riaY8=)
                          9: 323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa (hash: MxtZ9EJPkyF+YNXZieFUaLFM1OcwrqefDjv8/f86TUY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:45:17:cd:e0:10:ce:ec:df:ec:9f:15:16:97:2d:1f:2a:19:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: Oct 20 04:07:31 2025 GMT
            Not After : Oct 21 07:44:31 2025 GMT
        Subject: CN=5C7F0A03F25D680363FA61963E9B609C921F3071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:ef:ce:14:b3:db:14:0c:87:74:00:d9:32:
                    e2:9f:81:71:41:a5:a0:44:cd:ef:3e:a7:20:2b:fb:
                    12:44:42:9e:71:93:b2:b9:2f:8e:fe:38:de:27:9c:
                    1f:26:71:94:13:19:61:a0:c4:98:be:d3:d1:c4:fe:
                    5c:8b:3c:89:95:18:d8:4f:78:64:29:b2:40:77:23:
                    5e:77:f6:3b:b4:90:12:6a:72:4d:7e:1e:76:4e:d2:
                    1c:d3:e4:55:a8:27:39:55:95:e1:4e:18:1b:1e:f5:
                    36:8d:8f:93:39:6f:30:18:b3:3f:ca:f2:fe:d0:1e:
                    16:11:c8:72:32:7b:2b:e4:35:a4:c9:d6:b1:6e:aa:
                    17:4e:80:0f:ab:00:54:3d:74:5a:d1:33:25:f9:40:
                    c2:dc:ef:4b:7e:87:32:28:25:3b:96:f4:88:eb:2c:
                    0d:a0:57:f1:62:f4:9e:09:29:db:94:af:97:7d:58:
                    fe:26:ea:e9:20:e7:23:87:65:e4:6c:16:8d:f5:6b:
                    46:06:a7:34:04:52:a6:6c:73:b1:cf:45:5d:d8:f5:
                    96:ba:8b:31:af:72:7b:13:8c:72:ca:ac:04:3e:1a:
                    72:3e:a9:83:f8:27:18:47:fb:38:d8:f0:ac:80:23:
                    a5:36:bf:8d:df:28:3e:6c:fb:57:81:6a:0c:4a:ee:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:0A:03:F2:5D:68:03:63:FA:61:96:3E:9B:60:9C:92:1F:30:71
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:7b:07:a9:11:4b:11:67:84:ba:51:54:b0:89:53:c3:6f:63:
         08:50:41:67:8f:b2:ed:8d:5f:34:09:63:df:25:49:60:d7:e0:
         86:32:58:77:50:18:4a:dc:17:0a:6d:53:bc:62:d3:16:e0:9a:
         34:28:ec:cb:f8:03:01:0b:da:2b:87:7b:9f:1b:1b:83:f5:54:
         04:68:72:b4:ee:4e:d7:2d:b2:14:5a:a1:42:7b:5c:60:91:b0:
         ee:1d:72:4c:ca:0a:9f:23:a8:62:1b:31:e8:bb:95:69:2d:aa:
         38:9f:1b:2a:59:e7:b4:12:38:45:28:43:74:ac:e5:d7:00:c7:
         83:6b:c7:98:f4:cc:28:7a:08:96:be:79:70:75:7e:15:3f:73:
         19:f0:cd:fa:46:d1:87:b9:2b:20:bf:fb:fd:e3:20:c2:8f:e7:
         12:a2:6a:9b:05:37:98:0e:c4:48:96:fe:50:dd:65:d8:be:76:
         bc:bd:c9:46:ee:69:e3:bb:1c:f1:c6:3e:44:04:70:d2:e2:2b:
         26:89:6d:8c:77:78:0b:24:7c:5d:38:c1:a9:40:06:1e:e6:55:
         32:e1:d0:ac:30:fb:96:68:7e:28:d5:c7:d8:41:f9:1f:c1:45:
         53:63:a9:ae:76:7a:85:3d:f6:a2:ad:c6:86:3c:ff:ad:e8:c2:
         82:0a:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:54 2025 by rpki-client