Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
File:                     DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft (raw, json)
Hash identifier:          5HF7BooVbMvFHuS+sVOQLWP3qcY6bnLv10t7l4coqh8=
Subject key identifier:   93:D8:B8:2A:3F:5B:77:0E:AE:53:02:DC:09:E5:47:3C:57:3B:B5:29
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Certificate issuer:       /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial:       563A231F49CBEEEE3D08B99FE9BCFE443D59C343
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
Manifest number:          02EC
Signing time:             Mon 20 Oct 2025 03:24:20 +0000
Manifest this update:     Mon 20 Oct 2025 03:19:20 +0000
Manifest next update:     Tue 21 Oct 2025 07:17:20 +0000
Files and hashes:         1: 323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (hash: /GemfBvArZtukG4Y6RFLcXF3f1tLbIJXVDgtbWncR/o=)
                          2: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl (hash: mj1nV6RUl5LPXlwq/w8QjJc50mY5ipe5HUibL1SbU9o=)
                          3: 34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (hash: c0ivNdsbn1PNL+sK8V9iDiQA1Mt4huXCPkc/G0mHMQ0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
                          rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3a:23:1f:49:cb:ee:ee:3d:08:b9:9f:e9:bc:fe:44:3d:59:c3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Validity
            Not Before: Oct 20 03:19:20 2025 GMT
            Not After : Oct 21 07:17:20 2025 GMT
        Subject: CN=93D8B82A3F5B770EAE5302DC09E5473C573BB529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:94:d7:cb:18:f6:10:4a:4e:23:45:1c:4c:
                    93:b2:b0:d9:7f:82:fe:04:8f:a3:56:7b:26:6f:be:
                    65:6b:19:5c:61:29:ff:b6:e8:cd:00:77:73:32:ab:
                    3b:97:47:ce:06:02:f9:94:70:9d:d8:f7:71:18:1c:
                    71:58:cf:e7:b5:7a:e2:71:3e:b1:dc:99:3a:1a:a1:
                    68:c4:1f:e9:85:0a:2f:31:23:08:2f:91:b8:22:67:
                    5d:6e:17:d6:6c:15:c5:21:fd:98:56:e3:23:a6:73:
                    de:7a:ae:c5:bf:a5:f4:45:ac:7c:76:b5:c3:c4:5b:
                    7c:df:17:73:a9:e0:be:ab:6f:5a:b8:c2:21:0d:c2:
                    67:a3:01:ea:88:5b:20:e2:c9:a3:db:6e:32:df:9b:
                    7b:fc:73:8f:98:99:bd:e6:40:69:6c:30:65:5f:9e:
                    3d:6d:ce:52:c4:ba:0b:ee:5f:2c:6e:e3:f3:99:20:
                    ca:28:ca:8f:49:1c:c0:33:1e:e4:40:6a:26:96:24:
                    f9:cf:3a:b7:15:d1:c7:1e:8d:eb:84:23:ad:bc:b9:
                    9d:19:57:84:24:52:ed:29:a5:52:94:0f:b5:42:21:
                    7a:e9:58:d8:4a:e3:aa:3b:8d:10:b7:b0:98:48:65:
                    7d:ce:38:b2:2e:80:95:67:ef:dc:89:d8:7c:94:64:
                    31:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D8:B8:2A:3F:5B:77:0E:AE:53:02:DC:09:E5:47:3C:57:3B:B5:29
            X509v3 Authority Key Identifier:
                keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:62:f0:a4:93:7d:99:cb:7d:f2:63:1e:ed:1e:e1:0d:91:d1:
         c6:f1:59:07:d9:61:a0:32:f9:fd:9d:04:71:b5:be:e9:b5:86:
         f4:74:3d:a6:92:9a:64:99:96:90:79:84:03:a4:82:7b:97:38:
         34:0c:45:9e:90:90:44:40:d3:8e:86:c9:1f:18:b6:d0:ff:e9:
         1e:68:78:f3:ee:e7:1f:86:a9:4c:a2:e7:77:b1:74:9c:8a:33:
         75:e6:9b:4c:2e:2e:54:98:29:7d:ec:37:aa:32:f8:84:b1:e7:
         6d:08:ae:e4:56:87:09:b8:3a:c8:83:98:59:3f:4d:63:ec:d9:
         c9:cf:4e:e8:4c:3e:18:0b:f4:dd:be:3d:29:13:74:cc:fa:89:
         1f:25:ca:72:be:c3:8d:f0:58:df:05:a0:3f:cc:9a:3d:83:52:
         6f:0e:bc:c9:6d:62:ae:bd:cd:8a:51:52:64:8e:e8:db:14:8d:
         1a:4f:c8:58:d6:71:21:1c:cf:d3:0e:8e:c2:f4:e9:df:34:d7:
         1b:9f:94:16:9a:e6:59:41:e0:aa:15:e0:32:a5:79:ca:33:22:
         55:81:13:36:8b:ea:90:9d:bd:3f:45:f7:51:c6:38:93:ea:19:
         1f:f8:92:da:6b:ed:76:e9:e6:e3:b1:37:c9:94:f1:52:8f:32:
         13:e2:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:57 2025 by rpki-client