Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          9R4LaEPELMRjXfcBTmzQ/Z5qkekCYzw3tTelFbdz5I4=
Subject key identifier:   A1:0C:24:F5:9C:B1:03:4E:BB:90:5B:4B:81:8A:77:72:3A:CB:94:48
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       529B9525C4FF4CFE3841CBB00F1CE41844574DED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          02F6
Signing time:             Mon 20 Oct 2025 06:19:46 +0000
Manifest this update:     Mon 20 Oct 2025 06:14:46 +0000
Manifest next update:     Tue 21 Oct 2025 09:59:46 +0000
Files and hashes:         1: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: TM8EFrdqP8xJWUHtOwxrWKv1VfOWeTZaGy5GBdWevQ4=)
                          2: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: TigbxK0cUv4RSQLgefNDxvnIkqyLfVMe13bYz6eIhIY=)
                          3: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: 1+HSgfBzJlr7zK7bJwKzg4EbSxN4iKAsjaPs/gCubKU=)
                          4: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: t31E7lvTR/lLlptpM+wkGzdViGt4jKXDtcm+wD6jrQU=)
                          5: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: onXRDoXh2p9baTThbUNhz9bbCLW3hh2NresCt/EzEg4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:95:25:c4:ff:4c:fe:38:41:cb:b0:0f:1c:e4:18:44:57:4d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Oct 20 06:14:46 2025 GMT
            Not After : Oct 21 09:59:46 2025 GMT
        Subject: CN=A10C24F59CB1034EBB905B4B818A77723ACB9448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:20:2c:56:e9:23:3b:4f:0b:1b:56:da:9b:
                    74:06:4a:c0:a7:2e:95:bd:11:e6:83:21:59:b9:db:
                    2b:b6:f9:d3:f8:da:fa:89:01:e1:60:96:9b:cf:44:
                    2b:aa:c3:dc:06:37:3c:6b:9d:63:cb:f3:66:94:e6:
                    bc:ee:fc:e8:58:45:b1:db:bf:1d:13:d3:0c:2e:50:
                    2a:f8:55:35:30:01:60:17:da:c0:a8:86:86:80:54:
                    5f:26:86:4c:4c:72:00:38:d5:06:92:21:19:a3:ec:
                    8e:ee:d5:71:1a:50:54:e5:d7:45:46:4b:5c:6d:50:
                    b5:7b:bf:86:6f:88:08:1d:07:c5:ea:4f:51:3c:03:
                    8b:07:7f:24:79:8c:9b:57:7c:5b:3c:61:86:7e:b3:
                    b8:55:46:f5:17:06:5e:73:2d:ee:40:2e:aa:d4:72:
                    e8:b6:0c:f2:ef:e3:ed:1d:f2:e3:65:a0:cf:49:60:
                    ce:d9:f1:15:eb:42:50:00:60:b0:73:58:c1:a4:79:
                    21:76:b9:fa:01:c8:a8:fa:4e:7c:0a:10:99:43:52:
                    69:fe:e7:4a:e1:31:1e:8c:1a:92:b2:16:24:e0:28:
                    61:68:a7:76:18:d4:ac:93:16:c0:b3:08:9d:42:23:
                    64:e0:90:23:e6:b2:db:84:7b:00:16:a4:cf:6d:e5:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:24:F5:9C:B1:03:4E:BB:90:5B:4B:81:8A:77:72:3A:CB:94:48
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:0f:44:b9:7c:53:e8:5e:ec:2b:ee:d4:36:5c:af:99:b2:
         dc:b2:8e:f4:d9:97:d8:c6:f7:92:2b:53:ad:32:ef:c3:b8:0f:
         1d:fe:30:13:e3:65:6f:fb:64:ac:89:58:36:8a:9f:42:f5:44:
         d2:79:90:1a:1a:50:36:6c:32:57:3f:fa:b9:7f:33:b7:ef:a3:
         73:8f:6f:88:16:d3:f7:71:57:9d:99:59:b7:9d:da:c8:bd:b6:
         34:b9:0c:fa:28:89:f5:72:b6:4f:fd:88:90:18:65:c6:4d:df:
         98:b1:a5:8e:2e:e7:85:48:7d:41:b6:93:ac:19:b9:01:e1:51:
         7b:35:13:1e:98:cb:aa:13:cb:e5:5e:4c:27:20:2f:92:10:5d:
         92:37:42:39:99:43:03:5c:a6:9d:f5:bc:ad:7c:cb:43:29:dc:
         18:d6:b0:eb:a2:0e:44:96:00:9b:8d:ae:91:fc:79:7f:2f:8a:
         82:3e:85:84:11:a0:ea:3f:56:22:25:2a:44:d2:6e:37:cd:e9:
         c8:51:0c:d9:db:cb:ae:33:62:85:4c:47:10:32:a2:22:fd:2d:
         a0:ed:a8:a7:b4:32:a0:5a:05:64:c8:a9:37:94:bc:91:f0:4e:
         a6:d6:65:ce:e1:fd:b1:21:d4:69:b3:89:c6:34:68:a8:b7:4b:
         79:1b:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:43:50 2025 by rpki-client