Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
File:                     357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft (raw, json)
Hash identifier:          4/G77jozGRI3qf+3H034Xaz59xPHHAE0oEJcofEU7FU=
Subject key identifier:   F6:D6:04:64:33:96:20:B7:5D:3B:13:9D:20:F0:0C:EA:DF:34:56:84
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       419CF6E67B6764651A8221CBEF6464F98A857041
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
Manifest number:          02DA
Signing time:             Sun 19 Oct 2025 22:09:46 +0000
Manifest this update:     Sun 19 Oct 2025 22:04:46 +0000
Manifest next update:     Tue 21 Oct 2025 01:10:46 +0000
Files and hashes:         1: 34352e3136392e3135382e302f32342d3234203d3e20323638313136.roa (hash: nn1II6dJ8s4MEe7QoUpaWFdkR2uQukgWW+oIh6a1sLc=)
                          2: 34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa (hash: eqqfYP5Kh8QIH7clBXSyBhqialr/Y42KYJ0I6naQTsk=)
                          3: 34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa (hash: 7wG+NG3qrvXuiYzFmKV9SZRWcEYBcZawH7XbmFppOvE=)
                          4: 34352e3136392e3135392e302f32342d3234203d3e20323638313136.roa (hash: UKbA3xtojHWRKljuXm8Rn4fCf3qItyLDVPfPjD3UCw4=)
                          5: 357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl (hash: 7u8WQzcW7bD67/elIBS9TePLhsdRtvheLkBvBAfKu2Q=)
                          6: 34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa (hash: SRpuftg/q39McEuI+pMNT/QjhDteZDm/A9j/NxS09HY=)
                          7: 34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa (hash: Me2As91cxhG+/dqx8yX9zaYQScOJY/cWFuECkfueDI4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9c:f6:e6:7b:67:64:65:1a:82:21:cb:ef:64:64:f9:8a:85:70:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Oct 19 22:04:46 2025 GMT
            Not After : Oct 21 01:10:46 2025 GMT
        Subject: CN=F6D60464339620B75D3B139D20F00CEADF345684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:e0:09:1d:91:6e:47:df:a3:5d:3c:a7:91:
                    5d:62:68:b0:c3:90:94:4c:15:12:ad:ba:e5:52:29:
                    e3:99:70:66:d9:88:29:89:9a:7c:f8:bb:d4:f9:c4:
                    3c:45:2e:c4:8a:a8:0e:86:5b:ab:b4:24:99:d7:ac:
                    84:43:d2:00:07:b8:2e:d1:ed:da:72:1e:1f:44:44:
                    af:bb:a8:50:ac:df:18:b6:cb:53:8d:0f:e0:78:cd:
                    45:d4:0b:c5:77:f0:44:ba:b1:2e:4e:76:0b:e4:f3:
                    4d:5f:d8:b1:06:3f:5c:6e:46:7c:c0:8a:fb:17:a4:
                    68:84:f9:e6:96:cd:54:e6:e3:c1:b0:50:07:59:24:
                    20:56:f1:5e:03:2d:65:5a:48:de:ff:74:5f:d4:d1:
                    86:75:59:64:14:90:ac:6a:cd:27:62:d8:54:81:5d:
                    f5:81:e5:29:fc:c5:8c:3a:b5:20:13:4b:4e:72:30:
                    bc:21:2d:0c:6d:ce:0d:65:4c:9b:d0:ec:13:25:20:
                    d0:59:88:0b:49:51:7c:2a:aa:cb:01:0d:f1:65:6b:
                    14:76:b6:55:ce:77:90:26:53:7c:10:ae:e9:4c:77:
                    cd:1c:be:7e:d5:59:15:40:a4:12:73:7a:b0:21:97:
                    60:1d:aa:eb:a1:4f:ff:e6:3f:56:15:6b:28:cf:fb:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D6:04:64:33:96:20:B7:5D:3B:13:9D:20:F0:0C:EA:DF:34:56:84
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:9b:6d:15:cc:69:46:4b:94:44:a7:08:12:04:20:55:5a:
         59:02:74:83:48:e4:96:7c:45:fe:7c:81:58:db:1d:18:20:79:
         e1:dd:d7:80:97:16:21:fc:38:c5:86:90:ae:71:64:eb:4e:64:
         c7:94:95:4b:58:62:fe:d1:9c:1e:bd:38:42:11:e8:a0:51:08:
         b5:78:75:15:3a:d0:bb:79:fb:03:3b:26:79:5e:af:fe:02:97:
         83:82:3c:d7:f8:df:ff:72:f6:2b:ba:2f:cd:c2:4a:55:7a:12:
         01:d1:6e:40:f6:a8:f0:28:ef:fc:a7:0f:b7:31:d3:a0:a7:b2:
         df:0f:1c:fb:fb:0b:59:94:77:31:e2:c0:4a:d2:86:cb:9d:5e:
         e1:28:46:42:bd:11:fb:fe:49:2a:0c:88:4c:af:ba:69:be:4f:
         33:7f:f9:5b:50:60:f1:11:4e:44:a8:aa:58:76:3b:6f:13:0e:
         05:76:4b:e0:be:5e:32:03:c4:b0:8b:fd:4b:e6:2e:1c:1f:90:
         b0:cf:ba:47:f3:1f:35:7f:0c:26:e5:aa:82:f9:72:00:30:03:
         bf:bd:ee:e2:ee:e3:c4:dd:87:e5:d5:84:62:c9:c2:c9:50:24:
         24:f7:99:21:29:5f:cd:fb:50:57:e3:e8:5d:40:cd:44:0a:68:
         7e:fd:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:45 2025 by rpki-client