Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft
File:                     5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft (raw, json)
Hash identifier:          GgFEyTrWZ32KUD7pyGopb/kK5xSLi/x11qOje4Deb7E=
Subject key identifier:   30:33:DC:A2:4D:C2:80:46:50:8D:0E:6E:D1:60:90:2B:81:E7:97:BA
Authority key identifier: 5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9
Certificate issuer:       /CN=5CEFAC68C13B3048507970843DFCA0B39E32C2F9
Certificate serial:       23A6B0D22FC452194E63A0B226E246B6D9127EEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft
Manifest number:          1A
Signing time:             Mon 20 Oct 2025 00:37:40 +0000
Manifest this update:     Mon 20 Oct 2025 00:32:40 +0000
Manifest next update:     Tue 21 Oct 2025 02:56:40 +0000
Files and hashes:         1: 5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl (hash: /Y37n7j587bVsPHeO9Ui1Uere5IOiZ0ZbbpN+XIC3zo=)
                          2: 323830343a383966383a3a2f33322d3438203d3e20323733363338.roa (hash: nJ1jP8kWxROVlxgV42w6pt5bFCZlVe3bhWUcYiCCrio=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl
                          rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:b0:d2:2f:c4:52:19:4e:63:a0:b2:26:e2:46:b6:d9:12:7e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CEFAC68C13B3048507970843DFCA0B39E32C2F9
        Validity
            Not Before: Oct 20 00:32:40 2025 GMT
            Not After : Oct 21 02:56:40 2025 GMT
        Subject: CN=3033DCA24DC28046508D0E6ED160902B81E797BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:60:2e:db:52:9c:b6:d9:c6:7d:af:77:9a:
                    f5:19:ae:e8:2b:c1:7d:bf:a2:59:59:d1:79:cb:7d:
                    d5:6e:1f:c3:79:05:41:f9:5d:5e:37:5f:95:44:11:
                    9f:81:84:07:3b:36:5d:02:69:8c:e5:24:fb:30:c4:
                    3e:c3:c8:94:6a:93:1a:c9:82:c7:4b:41:ed:ae:ae:
                    ec:91:8c:c7:24:6c:6f:82:ad:c9:db:51:0b:7f:4a:
                    c2:a5:21:3c:be:b9:4a:fd:79:f3:19:d6:3b:99:67:
                    af:2b:05:f3:0f:e6:db:50:81:10:b9:1a:c6:41:fa:
                    77:38:9f:a9:17:7f:bf:b0:e6:61:c8:f4:2b:03:a6:
                    5e:3f:d1:b8:2c:46:f8:a0:ae:6b:bb:92:2e:3f:bc:
                    68:62:f9:60:42:f2:91:c0:8e:cb:60:58:f9:43:3f:
                    c1:ad:8d:1d:46:02:57:5d:c1:c0:3d:19:4c:2c:c7:
                    0e:a4:a6:eb:c0:64:4d:fd:f9:04:64:2f:fe:d5:4a:
                    f4:c3:06:1c:6e:b2:0f:f1:9e:3a:b0:f2:2a:d0:56:
                    c8:de:22:25:9a:6b:83:74:45:5e:68:99:e7:dd:6a:
                    79:28:2f:c3:c0:68:fb:f1:8a:db:00:cb:ee:ab:c5:
                    ec:10:c8:54:98:be:2a:52:49:8d:ea:a1:cf:6b:a6:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:DC:A2:4D:C2:80:46:50:8D:0E:6E:D1:60:90:2B:81:E7:97:BA
            X509v3 Authority Key Identifier:
                keyid:5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:04:48:f4:b9:eb:69:89:6f:9f:81:c3:5b:51:a4:70:06:34:
         2d:2f:f3:5e:0f:7f:88:c0:d9:f1:8f:0e:9b:e0:1c:5a:05:cc:
         49:48:28:d0:60:91:64:ca:bf:a6:59:65:3b:0f:ae:38:a3:b2:
         15:a2:e3:ce:1e:4f:04:00:1c:99:99:7d:5d:4e:c4:09:cb:c8:
         77:26:f3:1f:33:1d:f8:7b:37:13:2a:c3:c8:a0:64:e4:0a:ae:
         78:d9:0d:90:c3:0c:f9:4b:bf:34:a3:f9:0a:44:6d:18:11:23:
         a5:e5:7e:06:e1:b7:e2:a8:84:5b:f0:e1:19:c4:b5:51:87:44:
         7a:8b:cc:fa:4c:cf:cc:95:19:13:ae:de:fb:3c:39:fe:b0:91:
         35:a1:49:9e:2e:ad:36:1a:89:a7:36:01:11:93:20:72:b0:84:
         5f:b0:3f:85:19:4b:c0:34:a7:f2:2d:23:99:e1:d7:ab:8d:48:
         78:cc:4e:0a:6b:9e:07:d0:7b:05:04:7a:55:7b:b6:dd:21:3b:
         12:5c:6b:75:e1:ed:c0:b3:3e:36:20:e8:a2:0f:93:18:b2:ff:
         84:17:24:ec:58:8f:3f:4d:98:34:bc:d2:26:d6:4b:3d:20:4c:
         1b:c7:b1:fa:18:b6:83:3c:24:89:9f:b8:e0:5c:2a:a3:f5:cf:
         d5:2c:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:16:19 2025 by rpki-client