Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
File:                     CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft (raw, json)
Hash identifier:          UK+kmPLrsZB16FAX9L1kww3j1T1MOU4o1s1wkcjqk7w=
Subject key identifier:   20:73:25:16:E1:AB:70:72:62:8D:1E:5F:6B:29:BE:61:8D:6E:84:82
Authority key identifier: CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1
Certificate issuer:       /CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1
Certificate serial:       3814D93487DA95EC700B5E2C36A3C4C4E53EA4B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
Manifest number:          25
Signing time:             Mon 20 Oct 2025 04:21:41 +0000
Manifest this update:     Mon 20 Oct 2025 04:16:41 +0000
Manifest next update:     Tue 21 Oct 2025 07:47:41 +0000
Files and hashes:         1: 323830343a363535343a3a2f33322d3438203d3e20323639343833.roa (hash: TZWtfH5ij650ijLBJ9vtX7taN3u/arKIvGUt+j4npdE=)
                          2: 34352e3138372e32302e302f32322d3234203d3e20323639343833.roa (hash: fmu9Yn5/C/J+YfUZLc8KQ7P9FB91xBYqIaeFNXI3FjY=)
                          3: CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl (hash: WiBLi1TIk3/wymKdneQDN3PZqxGVcajSQzwkq5mFZuA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl
                          rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:14:d9:34:87:da:95:ec:70:0b:5e:2c:36:a3:c4:c4:e5:3e:a4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1
        Validity
            Not Before: Oct 20 04:16:41 2025 GMT
            Not After : Oct 21 07:47:41 2025 GMT
        Subject: CN=20732516E1AB7072628D1E5F6B29BE618D6E8482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:25:8a:06:7a:9d:eb:ea:04:68:83:d7:01:76:
                    94:1a:77:52:ad:d5:66:5b:67:83:03:c6:84:ba:ba:
                    84:a8:fd:08:1b:c3:78:06:eb:f4:f3:d8:de:c4:5d:
                    9b:28:db:b4:58:7e:f3:d1:37:d2:8f:9b:6b:7a:61:
                    ae:3b:a7:6e:3f:7d:08:b9:06:3d:68:aa:9f:11:b1:
                    32:00:c0:fe:03:72:3a:62:bc:94:2f:8f:1b:a3:b5:
                    1c:b9:49:36:18:40:3b:1f:ef:56:1b:ae:47:4f:f7:
                    23:d4:36:ee:0d:bb:c9:6e:f7:d0:25:e8:c8:b7:9e:
                    0a:b9:aa:b1:a5:8d:84:78:7b:c8:06:d2:52:77:f9:
                    b4:92:64:aa:d5:0f:8e:66:80:c1:f4:32:4f:11:ec:
                    0e:70:ea:39:17:ab:84:b2:3a:44:20:c8:e8:07:6d:
                    bf:71:33:06:e1:b0:9a:72:a7:84:e9:dd:e7:04:b7:
                    28:e3:24:13:34:ef:65:d5:2a:74:ae:d1:61:2f:cc:
                    c0:06:b7:9d:ff:95:4b:13:9d:45:0d:74:d9:84:fc:
                    23:74:e8:49:cf:05:cf:e8:74:5a:ad:f3:41:c1:2f:
                    48:6d:b0:cc:0a:17:06:b5:3a:21:ac:de:0c:32:1a:
                    19:c5:4d:36:de:1b:83:22:10:42:33:71:a2:d1:e4:
                    32:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:73:25:16:E1:AB:70:72:62:8D:1E:5F:6B:29:BE:61:8D:6E:84:82
            X509v3 Authority Key Identifier:
                keyid:CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:8a:f9:37:7a:9a:b2:31:76:1a:d8:2c:1f:7b:7c:7b:aa:
         f7:2e:51:d1:c4:1b:12:af:93:69:5b:b4:0b:35:99:f8:c0:b6:
         15:e6:4e:e9:9a:ed:10:ed:af:17:32:26:e3:e1:0d:69:f7:30:
         8f:9e:83:e4:15:72:17:44:96:44:43:5b:1d:1e:03:2e:d3:04:
         c5:5f:78:55:78:1b:35:f7:b1:a5:71:e1:33:06:d6:65:7f:c2:
         e3:eb:00:11:74:cb:c9:fe:0d:6f:ba:b7:8a:78:23:8c:6f:ba:
         49:7d:51:23:3b:48:f8:4e:a0:33:a5:b4:a8:fb:69:71:8c:bc:
         27:1c:49:bb:2a:4b:6a:f5:8e:16:27:bf:4b:3f:f8:bd:87:8f:
         c2:d3:7a:a7:c7:80:4e:c2:1a:0a:3d:00:cd:a0:38:fd:d9:37:
         e7:98:2f:cd:47:a2:77:9a:70:ee:fa:5f:71:1c:75:55:4f:6d:
         66:2c:14:79:0d:f0:9a:08:c3:8a:b6:7f:ef:3e:e9:d1:de:88:
         01:86:f4:b6:66:c9:2e:87:3f:76:ed:31:91:c2:b1:88:78:35:
         36:13:46:90:26:83:56:96:ed:aa:89:9e:c0:d5:2b:aa:55:8a:
         8b:98:0c:2f:27:e5:b8:b3:a4:ed:30:e0:8a:cc:71:26:c1:4a:
         9a:34:f5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:17:31 2025 by rpki-client