Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5V6stoUzMwPZKWhw1yayJK1RrGFG13teNF15ac1Q5AQY/0/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.mft
File:                     B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.mft (raw, json)
Hash identifier:          R6rWJrKmqr+S48z7iDIN+GhwIu9LzUPLhFpdzUYtY0I=
Subject key identifier:   0B:21:D5:CC:AC:A2:94:39:D2:11:EE:AB:81:FA:9D:9A:D9:77:67:87
Authority key identifier: B2:7D:65:1C:16:17:49:7C:D3:F3:CA:EB:C7:32:8A:BD:CE:2E:0E:59
Certificate issuer:       /CN=B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59
Certificate serial:       438B59F1F0D44233A2DF294DE952E0B01E79612E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5V6stoUzMwPZKWhw1yayJK1RrGFG13teNF15ac1Q5AQY/0/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.mft
Manifest number:          EF
Signing time:             Mon 20 Oct 2025 18:39:31 +0000
Manifest this update:     Mon 20 Oct 2025 18:34:31 +0000
Manifest next update:     Tue 21 Oct 2025 21:22:31 +0000
Files and hashes:         1: B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.crl (hash: C2l6B/VINmyGN9KrcXG/DOftT8G/TDLjoNnfVIkgLyw=)
                          2: 323830343a383939633a3a2f33322d313238203d3e20323733363135.roa (hash: WaKkHB0nuLN3ZDsHYOt3p4W/drbxnpvg7OWD1V6CkWo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5V6stoUzMwPZKWhw1yayJK1RrGFG13teNF15ac1Q5AQY/0/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.crl
                          rsync://rpki-repo.registro.br/repo/5V6stoUzMwPZKWhw1yayJK1RrGFG13teNF15ac1Q5AQY/0/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8b:59:f1:f0:d4:42:33:a2:df:29:4d:e9:52:e0:b0:1e:79:61:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59
        Validity
            Not Before: Oct 20 18:34:31 2025 GMT
            Not After : Oct 21 21:22:31 2025 GMT
        Subject: CN=0B21D5CCACA29439D211EEAB81FA9D9AD9776787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:65:8c:aa:40:42:cb:66:14:7b:62:17:3d:
                    85:9d:82:c8:92:a7:de:1d:74:15:3c:71:8f:a4:88:
                    f1:91:ec:a7:69:c3:85:e2:92:b3:89:e5:0a:b7:dc:
                    1d:79:65:a1:9c:40:f1:ad:28:2a:b0:a1:98:db:9f:
                    6d:22:7b:32:20:53:d7:11:3b:24:30:40:9e:95:e4:
                    48:20:ec:e0:98:90:ab:34:9c:0a:8f:b1:d2:bf:0a:
                    75:f1:40:01:c4:76:20:bb:0b:bd:ec:cb:22:04:11:
                    21:d7:16:81:7c:fe:95:87:e3:8d:86:43:85:61:f0:
                    40:3d:40:c7:6f:69:31:c2:26:40:46:6f:ba:4b:cd:
                    7f:de:dc:43:a0:c5:3a:19:d9:5e:a7:f7:10:4f:a0:
                    a0:c8:ff:27:7f:1d:47:7f:1c:23:9c:7e:84:a1:7a:
                    b0:cf:a8:61:39:c1:61:43:8e:44:a8:6e:bc:da:fe:
                    ca:9f:8e:6d:44:bb:9e:33:f9:5d:c2:7a:74:b3:1a:
                    f1:1c:9d:a0:5b:77:c0:45:10:c4:02:5b:ac:2b:47:
                    fd:55:f6:cd:10:b6:5e:d4:65:49:8a:84:3a:7a:38:
                    04:59:71:c7:10:fe:7a:0b:46:5f:76:7b:68:69:85:
                    14:37:91:89:5a:3b:96:33:b4:92:94:16:84:82:88:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:21:D5:CC:AC:A2:94:39:D2:11:EE:AB:81:FA:9D:9A:D9:77:67:87
            X509v3 Authority Key Identifier:
                keyid:B2:7D:65:1C:16:17:49:7C:D3:F3:CA:EB:C7:32:8A:BD:CE:2E:0E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5V6stoUzMwPZKWhw1yayJK1RrGFG13teNF15ac1Q5AQY/0/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5V6stoUzMwPZKWhw1yayJK1RrGFG13teNF15ac1Q5AQY/0/B27D651C1617497CD3F3CAEBC7328ABDCE2E0E59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:b9:27:c7:6a:58:b4:9d:c9:9d:67:7c:cd:c6:19:65:32:
         e3:5e:76:70:db:cd:eb:c9:69:95:fa:e9:07:b1:48:b6:61:19:
         07:2f:a1:24:1a:db:f3:c2:f1:89:b1:e4:44:77:79:eb:c6:43:
         43:3f:9f:74:30:a9:e7:4d:a8:2f:07:ae:70:28:4e:0c:e9:7e:
         fe:bd:29:bb:10:19:09:e2:2d:68:69:ad:08:66:9a:0f:f8:95:
         be:ca:98:34:e8:da:03:47:bb:67:6e:13:a6:46:2a:3d:6f:cb:
         6d:ba:85:ac:cc:06:48:66:5e:e1:76:e3:6e:64:6f:48:f0:6d:
         ca:59:11:0b:d6:f7:c6:67:4a:08:b5:cd:84:7c:67:eb:77:2b:
         66:1a:1d:2d:ba:80:0c:87:18:ef:e0:55:8f:71:ca:c7:32:c7:
         3d:63:98:b1:81:34:58:0a:b7:b4:e5:46:2d:14:44:df:50:cb:
         23:fc:29:32:a8:fa:96:64:a9:28:4b:54:33:78:0f:78:79:f3:
         dc:af:74:ae:eb:e3:2b:b1:1c:a6:d9:59:f5:8f:33:de:f7:fd:
         12:cd:7d:dc:b6:e1:72:00:f1:cf:5f:eb:28:f6:25:60:b5:e2:
         52:01:40:4a:56:f2:33:ec:7c:83:e9:01:0e:d3:a7:28:4d:03:
         33:21:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:06 2025 by rpki-client