Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
File:                     E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft (raw, json)
Hash identifier:          InHv5Xt8NT3344J1cSvJF5RYoxS9hip15L2us7KkQb0=
Subject key identifier:   02:D9:F5:A8:12:49:7B:8E:D2:0F:AA:E6:02:43:A6:B4:4C:A1:87:63
Authority key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Certificate issuer:       /CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Certificate serial:       1149E3B2358739BBFE90AFCACA8796AA0101190A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 16:22:38 +0000
Manifest this update:     Mon 20 Oct 2025 16:17:38 +0000
Manifest next update:     Tue 21 Oct 2025 16:49:38 +0000
Files and hashes:         1: E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl (hash: QpEHKOVt2XsrlpzQ7I2SGrqQzS8elFTVhkoh8Z/NotY=)
                          2: 323830343a373138633a3a2f33322d3438203d3e20323730373936.roa (hash: hy+PYw9smVKZXTiWxh17j209/4jADdXXtIvOCYFEFiw=)
                          3: 3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa (hash: q/6qUhrGpywsYVU0hghyX+iDJDoyen0tHtGj+/ZKltg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
                          rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:49:e3:b2:35:87:39:bb:fe:90:af:ca:ca:87:96:aa:01:01:19:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
        Validity
            Not Before: Oct 20 16:17:38 2025 GMT
            Not After : Oct 21 16:49:38 2025 GMT
        Subject: CN=02D9F5A812497B8ED20FAAE60243A6B44CA18763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:f4:78:3a:43:53:b9:b4:71:47:42:5a:23:
                    81:b8:4d:ec:1d:02:3e:b7:df:f2:b6:e9:a7:5c:5c:
                    62:ba:91:cc:e5:3b:a9:80:87:21:8f:49:22:fb:eb:
                    2b:88:45:4c:59:4c:1c:0d:c9:7a:80:8b:51:a2:d4:
                    89:02:07:d2:55:07:af:4d:1b:3b:ad:46:d0:e8:79:
                    06:fd:57:98:e5:59:5b:ec:3c:1d:ec:84:14:d9:8a:
                    c0:da:12:85:c8:ce:a6:4d:df:96:7c:a2:48:5d:27:
                    43:a6:43:be:69:13:aa:f8:2f:14:39:c5:3f:98:fb:
                    23:ef:27:0d:67:03:c1:3b:0b:f3:a5:4b:52:c2:72:
                    50:49:36:2e:ed:9b:73:92:47:83:3c:4c:99:95:5c:
                    d1:2d:16:17:93:b4:72:24:73:d6:36:c4:37:f4:1e:
                    63:f0:31:cb:4b:97:4f:ae:74:33:c8:9c:f0:ad:22:
                    f2:66:ac:59:6f:34:48:f2:72:90:44:a2:08:66:24:
                    24:a4:19:ec:8d:ec:8c:64:d9:60:ca:21:40:40:f4:
                    03:8d:8b:54:06:e1:0f:87:fb:72:45:6f:3c:4d:8f:
                    96:59:f6:2d:31:2a:ee:c5:f0:7f:3e:15:df:18:87:
                    ab:13:87:56:8a:28:00:f8:b2:75:c9:f2:8b:9d:7f:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D9:F5:A8:12:49:7B:8E:D2:0F:AA:E6:02:43:A6:B4:4C:A1:87:63
            X509v3 Authority Key Identifier:
                keyid:E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:03:ad:7e:1d:44:16:16:f5:2b:09:13:cc:7f:1d:d7:e7:
         08:e1:90:65:49:dc:c8:9b:07:4e:7a:c1:8e:b2:d1:ee:28:93:
         9c:be:2c:1e:fd:8f:95:6e:fa:19:7d:3d:2d:d6:73:34:6a:9d:
         a6:02:c4:a6:56:0c:63:4b:a6:a0:cc:47:7d:20:ea:03:00:c2:
         8d:3a:90:88:86:20:12:5a:95:dd:55:1f:01:14:7b:c4:ef:ca:
         50:5f:f5:e4:51:59:70:4b:76:41:1a:e9:7e:6f:00:15:63:80:
         47:f8:7c:6f:dc:2d:43:03:45:10:09:a6:13:b5:a8:a8:60:ac:
         d7:d7:2b:90:0a:37:e0:87:b0:61:1e:a9:61:e1:b1:7c:e8:ef:
         1a:91:a6:b5:5a:3b:d7:d0:6b:33:b1:31:04:6b:f7:b8:f7:ff:
         92:e0:ea:a2:29:03:19:ab:8f:e3:dd:77:66:e0:77:b5:52:20:
         6a:bf:fc:b1:e2:5e:11:79:9c:11:04:4f:f7:07:4e:f1:b9:a9:
         01:43:b0:59:49:36:08:7e:09:d0:06:ec:89:52:d8:36:c8:44:
         6b:c0:97:f6:18:d8:14:b4:cd:03:ff:8e:b6:77:29:b6:49:48:
         7b:b2:38:ee:41:b5:78:a3:ef:29:cc:63:cf:e8:45:8d:df:f2:
         d8:f9:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:16 2025 by rpki-client