Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
File:                     D23AEA3BF9686D794967BECAC226FA9648876870.mft (raw, json)
Hash identifier:          3n+cafjYjR0bC95nknMs9eFtV0xhxRB0V668i0PkwDI=
Subject key identifier:   F8:96:29:7C:6C:88:47:3D:0D:51:E3:BC:47:30:CD:C0:AC:9F:45:B5
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       1B6C41F49345E6EBC2578943C39B89D6FE83E62E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
Manifest number:          02EE
Signing time:             Mon 20 Oct 2025 05:18:30 +0000
Manifest this update:     Mon 20 Oct 2025 05:13:30 +0000
Manifest next update:     Tue 21 Oct 2025 06:59:30 +0000
Files and hashes:         1: 3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (hash: mylTXmhuTTm2hr4D6b5vfiKs8MjHwQHS8CbX1aJ8+DQ=)
                          2: 323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (hash: N21bgywY1x4r1vLZaPh96X/eWqYiw39UYsCfaNuehUU=)
                          3: 323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (hash: kDbGCqNSUdmZakDCg1TiRYt/RRqjxxGDsDnwDF9XOCM=)
                          4: 3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa (hash: txjM31afppCmHo0SCDmaG63Ukdjv41N7lGDrF1rfe0Y=)
                          5: 323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (hash: /CBOzGSo3loJCL4J+JUGeubAJr+11A+LVtEkvNlfqGw=)
                          6: 3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa (hash: qEv9QRFbUud8wjmrI7Mg7gB/+7PH00kn4BfGK/NSz1Y=)
                          7: D23AEA3BF9686D794967BECAC226FA9648876870.crl (hash: YFqOqraFR5NxS++Mj2xD17gUvbUsXyOqCTwEvx0WP+c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6c:41:f4:93:45:e6:eb:c2:57:89:43:c3:9b:89:d6:fe:83:e6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Oct 20 05:13:30 2025 GMT
            Not After : Oct 21 06:59:30 2025 GMT
        Subject: CN=F896297C6C88473D0D51E3BC4730CDC0AC9F45B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:25:78:47:c1:6d:fc:0c:ce:2f:30:d5:d7:
                    86:a1:f8:0f:ef:fc:aa:0d:d1:1a:4f:77:d2:dd:5b:
                    1b:ce:0b:c4:86:b6:4e:bc:56:22:8c:39:0b:72:dc:
                    d4:51:df:bf:25:ee:c7:f5:85:c7:de:85:b7:f2:3e:
                    13:7c:30:b0:67:e4:3c:ad:a2:90:81:a7:71:b1:97:
                    80:bc:7b:a1:ae:d7:8d:d4:44:e6:6b:20:0b:ea:21:
                    a9:ed:ba:fb:88:4d:79:d1:a4:2b:3d:3a:74:68:b8:
                    0d:17:04:b9:5e:ef:81:eb:04:31:ff:1f:f0:c4:7a:
                    54:87:a6:5f:db:70:82:03:d8:19:a3:2c:b0:be:1e:
                    c2:e8:1a:24:c7:50:61:40:45:c4:24:43:d1:0f:eb:
                    c8:8c:53:37:d4:75:2e:b5:b3:b4:88:c4:23:c3:ee:
                    51:3e:a7:d4:2d:78:40:0e:90:cc:b7:65:33:7a:98:
                    06:03:a1:1e:34:0c:85:69:34:93:2a:9a:4e:a1:54:
                    01:e8:8d:ae:c6:1e:6a:81:b8:ce:15:7c:8e:9f:36:
                    28:dc:0c:83:7b:93:64:1c:4e:10:50:f7:c2:e8:f4:
                    43:d8:ec:b3:d9:71:38:77:98:36:bf:76:b9:7e:c2:
                    d9:45:63:4e:b8:75:fa:52:3b:9f:b7:40:f3:7d:bf:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:96:29:7C:6C:88:47:3D:0D:51:E3:BC:47:30:CD:C0:AC:9F:45:B5
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:66:3b:63:53:4a:9a:37:e0:50:49:bd:76:e0:76:3d:5c:fa:
         b2:f4:a3:c7:2c:ec:2c:47:ad:66:54:b8:be:1e:ba:08:d3:97:
         27:96:e4:e3:c7:7a:0d:02:f2:2c:97:07:e9:29:d6:44:84:23:
         52:ba:4c:eb:54:8a:36:ea:24:3f:93:b8:ba:e7:3d:ea:04:42:
         c0:f5:a1:4d:16:bf:5f:0e:d3:bc:3b:6c:51:ca:0f:60:b6:c0:
         66:c7:14:76:0b:7b:c4:fe:00:a5:94:48:9f:34:95:3e:bd:3e:
         d2:a2:be:c4:0b:61:99:ec:73:61:be:21:1e:c3:17:a4:c0:f6:
         a3:d4:54:72:1c:17:fc:2c:fd:c8:c7:90:36:5e:77:06:2e:b6:
         1c:35:8e:28:93:49:06:1e:13:9d:a1:9d:e2:a8:b1:90:2d:e1:
         fe:f1:0a:cb:9a:fe:b0:1c:d5:69:94:cb:04:df:c4:3d:87:ab:
         0b:61:64:7a:f0:d3:76:c1:dc:0c:9f:d1:75:de:f8:9a:01:86:
         37:77:e3:10:43:9b:7d:ea:3c:32:8e:50:3c:65:ee:ca:cb:6d:
         f3:d9:7f:c9:a7:e6:93:d8:21:0e:1d:be:ac:e9:96:2a:03:d9:
         44:d6:5d:bf:ec:57:2c:ef:c7:e2:09:4f:7f:39:21:84:cc:6f:
         68:40:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:37:23 2025 by rpki-client