Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
File:                     B7D297E891D0B38E9314260166E2A362DC625072.mft (raw, json)
Hash identifier:          vCVvd7ivFkcRA3zWCp1n6Z4Yi8gJJBp0m40Jx1SDZxE=
Subject key identifier:   92:66:C2:09:9D:0B:65:8A:BF:F3:E1:AA:66:C8:B8:20:4A:73:FD:E1
Authority key identifier: B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72
Certificate issuer:       /CN=B7D297E891D0B38E9314260166E2A362DC625072
Certificate serial:       6226C1187E7678E14A7CBE86C0B3CC2114430D98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
Manifest number:          29
Signing time:             Mon 20 Oct 2025 01:54:28 +0000
Manifest this update:     Mon 20 Oct 2025 01:49:28 +0000
Manifest next update:     Tue 21 Oct 2025 04:20:28 +0000
Files and hashes:         1: B7D297E891D0B38E9314260166E2A362DC625072.crl (hash: BNEi3PVuvAYDEPp2srOcjm48rUn2/i6QVgxQBJ4zVDA=)
                          2: 323830343a393461633a3a2f33322d313238203d3e20323734343733.roa (hash: 5dNt86QmNpkL+18z4Xw05SaIiYBHZoUuE6RI1tm97vQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl
                          rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:26:c1:18:7e:76:78:e1:4a:7c:be:86:c0:b3:cc:21:14:43:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D297E891D0B38E9314260166E2A362DC625072
        Validity
            Not Before: Oct 20 01:49:28 2025 GMT
            Not After : Oct 21 04:20:28 2025 GMT
        Subject: CN=9266C2099D0B658ABFF3E1AA66C8B8204A73FDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:85:28:84:67:a4:49:db:3e:34:c9:bb:7e:
                    45:2c:89:c7:57:30:19:9f:e9:e6:96:c2:0b:27:f9:
                    28:7a:7f:c2:f9:12:9a:51:af:7b:01:63:30:a5:26:
                    88:ca:b8:7e:fd:5d:f4:c9:70:a9:e6:c3:5f:92:53:
                    b8:34:2a:38:12:5f:d0:99:ee:b4:92:3f:3a:23:29:
                    77:40:07:6a:49:f4:4e:b3:f4:f2:3b:63:a3:94:f9:
                    7e:5b:9c:bc:77:73:4d:a3:8e:a5:48:d9:54:a6:b6:
                    7a:a4:9a:bc:15:9f:27:a0:00:bd:1b:26:4b:b4:0f:
                    e6:90:28:1f:7d:0b:18:bb:83:97:e6:d5:d2:13:77:
                    cb:06:36:8b:84:e3:a7:b0:44:84:23:24:e7:63:e9:
                    eb:47:5f:c0:9c:38:74:b6:48:d3:be:22:d4:83:ca:
                    00:59:d7:f3:d1:af:3d:ee:ce:39:f8:d9:3a:2e:95:
                    ef:61:45:b3:da:1b:64:50:f6:47:e5:85:37:63:cb:
                    07:67:b0:3f:f3:c2:aa:1e:d5:25:34:85:ae:53:6f:
                    c9:ed:0b:2b:a8:77:fa:13:73:0e:ff:b6:e4:76:17:
                    ff:d9:58:1d:9a:de:c7:f6:c5:0f:96:a3:57:3f:0a:
                    ae:0a:bf:8b:38:9e:81:e5:db:86:f4:34:cc:7f:67:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:C2:09:9D:0B:65:8A:BF:F3:E1:AA:66:C8:B8:20:4A:73:FD:E1
            X509v3 Authority Key Identifier:
                keyid:B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:26:9e:78:27:c8:46:e2:e0:2f:e0:da:63:a0:8a:19:58:
         ac:32:20:aa:2b:5c:52:07:a3:3c:77:4f:3c:31:cc:b9:25:27:
         c6:31:bc:67:ba:70:6f:7e:d9:df:0a:34:53:37:9b:8e:76:7a:
         ac:f2:4d:aa:98:ba:dc:ef:93:a7:1e:a1:71:e2:03:d2:4e:1e:
         72:a9:38:7a:41:a6:27:34:73:bb:8a:21:17:96:a3:48:bb:58:
         c0:bb:9c:17:76:96:0c:b1:ea:9a:f0:ba:ca:ff:d3:7d:d7:be:
         c0:a5:7e:ec:5e:52:8d:69:ba:3a:4d:40:b7:01:0a:2c:ed:7a:
         8a:64:e4:bc:6c:05:26:5d:49:23:96:39:58:54:a0:27:7c:58:
         af:99:86:3c:ca:21:2c:bb:e2:40:ed:26:f2:5f:d3:c1:f4:a6:
         2f:dd:48:9c:c2:c2:49:05:58:30:ca:87:53:fd:47:4b:a2:ea:
         27:f0:f5:ed:b5:34:c0:58:bb:8b:59:20:a6:a1:97:b9:2f:5a:
         c2:7a:e5:da:f0:40:30:fb:a0:3f:c2:96:a8:02:a5:6c:44:23:
         b4:66:4d:25:5a:f0:5f:02:cf:e3:e1:24:7d:cf:e9:66:34:4e:
         a5:21:0d:de:ca:51:d0:5c:40:68:df:65:36:b8:59:51:b8:e1:
         07:e6:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:28:52 2025 by rpki-client