Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
File:                     CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft (raw, json)
Hash identifier:          JFAMU+6W7OdfkVD8M6ntnglitD7G/P193f3hewqXlh8=
Subject key identifier:   D1:A3:2A:BD:07:55:3E:35:2B:FA:FD:AE:DB:31:7B:AA:34:D6:7C:06
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       2EBB7F10C54A2231BCF597271B8BB1E09E5D30E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
Manifest number:          0259
Signing time:             Sat 23 Aug 2025 07:59:07 +0000
Manifest this update:     Sat 23 Aug 2025 07:54:07 +0000
Manifest next update:     Sun 24 Aug 2025 10:44:07 +0000
Files and hashes:         1: 3230302e33392e36342e302f31392d3234203d3e203533303436.roa (hash: 3gKGNWz1L7Ud1t3Md7ioY7FVTLAni2yRSVDnW2oHytg=)
                          2: CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl (hash: 0c1V1dJ4VUt2H8s5tnocnmMbW0Q+OtnU8UeKCAoj7+s=)
                          3: 3137372e39332e3132302e302f32312d3234203d3e203533303436.roa (hash: eMo61bvQPDVk8NOg9Q7MaiGFibYYK+jU1Bz/uzZYxvM=)
                          4: 3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa (hash: 5eFUevr2dE6MZ+8wJXXksud7aRNAfHmV5AsSSz03MCg=)
                          5: 323830343a316630343a3a2f33322d3438203d3e203533303436.roa (hash: 02lwV22koZ8oQZyrbJEv18vRwqbUaxUUMyS+zIDXB5g=)
                          6: 323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa (hash: rakqIuuQ+fQPICPRrTDnV98R6tURbK5FHHU86pMLHc0=)
                          7: 34352e3138362e3134332e302f32342d3234203d3e203631363030.roa (hash: nesTxCF5G8p1z6EqmOaP0MAwB+COE8jfI9nS7fqHwEI=)
                          8: 3137372e3130312e31362e302f32302d3234203d3e203533303436.roa (hash: fI57AI6+t6AsMYH6jSm9b/z4WiODEbV9BIhwRdq7GXc=)
                          9: 323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa (hash: PDPEW7sXHheN1lkoRvWSLstZ5hLcgDKMJpo3g/12lgE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bb:7f:10:c5:4a:22:31:bc:f5:97:27:1b:8b:b1:e0:9e:5d:30:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Aug 23 07:54:07 2025 GMT
            Not After : Aug 24 10:44:07 2025 GMT
        Subject: CN=D1A32ABD07553E352BFAFDAEDB317BAA34D67C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:49:cc:ef:15:0f:1f:29:45:d4:40:f6:a9:2a:
                    93:87:c2:fb:2d:93:5a:5c:10:2d:c1:3b:da:2b:20:
                    a5:5b:75:7e:ef:f8:6a:ea:e6:c9:6a:a0:f2:96:0b:
                    bd:9c:5a:98:79:db:3b:4d:d1:c2:f0:50:13:7d:f9:
                    be:ed:7d:8a:bd:7a:e6:c1:37:20:ad:d9:37:f6:13:
                    56:70:7a:c6:10:0a:fe:37:5d:09:3c:a0:8b:ae:8f:
                    fd:bf:11:43:02:82:8c:f8:46:e2:a4:fd:7b:ee:6a:
                    de:6f:6e:c9:0e:62:26:cc:f5:71:2b:cd:89:cb:40:
                    be:88:42:78:a1:f9:5f:f7:19:55:06:e0:6a:e5:ee:
                    e4:34:5d:ca:c0:db:8b:13:3d:5f:45:44:f0:dc:2a:
                    a5:0e:50:5a:3d:38:ec:dc:36:85:52:33:82:14:e3:
                    fd:bb:9c:db:00:fb:8f:bd:89:5b:3d:e1:dd:11:c2:
                    32:c5:c6:45:f5:ce:f7:e9:b0:7c:be:17:37:e0:52:
                    01:b6:6f:16:37:33:4f:20:93:04:c5:a5:fd:c1:6a:
                    9d:14:b6:cb:3f:7e:16:39:c7:d0:3b:88:92:00:03:
                    fb:df:c6:d6:8f:c5:7c:e7:86:dc:31:48:c7:a9:90:
                    ed:f1:c7:bc:bc:9a:07:40:ad:45:81:e3:e8:f5:ef:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A3:2A:BD:07:55:3E:35:2B:FA:FD:AE:DB:31:7B:AA:34:D6:7C:06
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:b2:5e:06:68:2e:a3:eb:3f:5b:7b:ef:86:6f:47:f9:e9:
         1f:26:73:fb:6c:7a:4b:20:90:67:1b:46:6e:6b:fb:ee:28:ce:
         8b:4d:43:f2:07:e6:df:0c:87:f1:43:30:d9:1c:62:2d:51:cd:
         4e:28:2a:4a:aa:28:69:63:e9:0b:01:b5:e5:5b:71:80:ec:4e:
         36:4d:5d:24:92:b4:2c:bd:18:79:4d:3b:a5:95:e9:bc:41:4c:
         7a:ff:c2:c2:d2:d0:13:dc:b8:28:dc:59:8c:28:49:c0:5d:30:
         7d:fe:95:ff:bd:cd:bd:44:ca:71:7d:46:5e:13:ab:e5:6a:3b:
         7f:68:94:69:c6:b7:54:f9:63:3f:8c:89:48:82:5d:05:52:31:
         8a:9f:54:c8:e9:51:b1:e2:89:a0:92:0e:8a:03:99:9d:5d:02:
         c1:20:05:4f:2a:a7:a0:21:21:6d:69:0e:a0:9a:37:be:11:63:
         6f:ab:7d:7f:c9:4a:cf:87:41:09:bf:74:b3:e7:4d:80:a6:e9:
         9d:ff:15:0e:58:70:28:45:cf:09:27:a0:3d:30:00:98:20:56:
         b0:51:bc:da:a9:1e:35:24:e7:fa:b0:ad:1c:07:19:05:49:87:
         ce:f0:ad:e7:b9:07:27:1f:20:97:b7:28:1a:da:a2:8b:8b:fe:
         95:4c:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:44 2025 by rpki-client