Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
File:                     9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft (raw, json)
Hash identifier:          rFQnYyiJ3yvGbZA7vKbzOf9E/sa36gqAs9OeyJFYZbo=
Subject key identifier:   E2:CC:00:AE:5A:8D:60:96:4B:A7:3D:7E:E6:E4:08:2D:F2:11:51:96
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       58583F127AFCCB1F1519CE215BFC5201739F7715
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
Manifest number:          02F2
Signing time:             Mon 20 Oct 2025 05:00:00 +0000
Manifest this update:     Mon 20 Oct 2025 04:55:00 +0000
Manifest next update:     Tue 21 Oct 2025 05:58:00 +0000
Files and hashes:         1: 3132382e3230312e35352e302f32342d3234203d3e20323636363238.roa (hash: 019q0RBSJIzEDbXEB13oaIQmER5aG+rpH+nf+nQLSKo=)
                          2: 3132382e3230312e35322e302f32322d3232203d3e20323636363238.roa (hash: GAYQNYQ+EJ7m4nBAAGtD6GrlyRzCCO3eoWY9GXWCVQE=)
                          3: 3132382e3230312e35322e302f32332d3233203d3e20323636363238.roa (hash: kvFProS5ons0pMi875OgCLJBxfNn8cNjIf6QGcfrsrI=)
                          4: 3132382e3230312e35332e302f32342d3234203d3e20323636363238.roa (hash: ksqjoq+oKZUWe3ZZslHHwhKJDYgJnUAbqfP09re4b68=)
                          5: 3132382e3230312e35322e302f32342d3234203d3e20323636363238.roa (hash: u+sbU9s7+J66mKVCP3OpdTE9MgdzCbhpeRPe+p/9ZP4=)
                          6: 323830343a336565383a3a2f33322d3332203d3e20323636363238.roa (hash: x/rL/XwrQUmg0p5E/UFu9l4VKXmhr+JlReegAc0lHtk=)
                          7: 3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa (hash: Y3uUT1Nyx8Jbp6QBIT4Q2Cw01jB5BdDbVMY+/4EHgHU=)
                          8: 3132382e3230312e35342e302f32332d3233203d3e20323636363238.roa (hash: PW0lMQE/GCGSMTY3tIwq5zzolHpnwGV2gMnuyG4Cyi4=)
                          9: 9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl (hash: MqZ/yoIsEnvF6w5BNPfQEVZGiB0jbgJGs9Da4kk5KTs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:3f:12:7a:fc:cb:1f:15:19:ce:21:5b:fc:52:01:73:9f:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Oct 20 04:55:00 2025 GMT
            Not After : Oct 21 05:58:00 2025 GMT
        Subject: CN=E2CC00AE5A8D60964BA73D7EE6E4082DF2115196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:94:c5:78:25:1a:43:85:b8:dc:9d:a5:e4:
                    79:17:70:9e:f5:82:60:2b:a8:c4:c0:46:4b:2a:87:
                    60:2d:a9:19:b3:75:c4:dc:d4:d5:df:7c:ac:04:c3:
                    67:9c:71:a6:22:6e:84:e4:7f:73:d6:9b:5a:5d:f4:
                    9a:3e:fd:89:fd:4b:05:28:04:d6:fc:db:d0:25:d6:
                    74:de:a3:5a:ff:2d:50:1e:2b:41:f5:d5:b3:c5:0c:
                    50:a5:20:81:04:25:89:78:9f:da:ef:8b:f3:c5:3c:
                    3d:5b:06:12:db:ad:53:82:91:40:aa:c4:b9:b4:e5:
                    04:a5:b5:0c:06:93:5a:58:43:2f:2b:be:31:6b:ef:
                    00:f7:9f:ea:b0:13:87:21:54:2a:e2:8d:90:59:90:
                    5d:f8:b8:eb:eb:fd:27:11:13:8b:f5:53:af:e7:f8:
                    34:c6:68:d0:f8:fe:43:86:0b:cc:76:07:49:01:90:
                    82:bd:38:f7:38:86:9b:3e:86:a1:53:92:fe:63:6e:
                    14:6e:01:cc:0e:71:fe:3b:53:d4:7f:be:ce:33:bc:
                    7a:f5:8d:fe:3b:f3:b1:ff:04:0a:ad:18:e1:84:5b:
                    60:2b:93:17:f5:b1:9f:39:37:e0:75:65:83:dc:ee:
                    02:0d:32:1c:c1:55:61:47:b7:5d:88:d2:c6:89:75:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CC:00:AE:5A:8D:60:96:4B:A7:3D:7E:E6:E4:08:2D:F2:11:51:96
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:7a:d3:f0:92:cf:63:ee:6d:8b:37:92:43:e6:d5:9d:17:
         3d:fa:cc:aa:da:0c:ae:e9:d4:38:97:03:3b:b2:15:81:f7:27:
         3b:8a:9d:2d:3a:2c:14:78:b2:e2:3b:1b:66:96:7a:a2:2e:b9:
         94:20:af:1a:97:70:78:b8:ab:4d:86:a4:6f:88:8a:7d:5c:05:
         e3:78:e7:59:b9:3c:c1:54:9b:76:39:1e:14:1c:f2:f9:90:3f:
         d6:e2:29:44:d4:20:21:9e:42:e9:c5:39:fd:e4:e4:a4:64:34:
         44:a9:9b:f7:e1:df:dc:ae:8d:93:bb:0d:89:ca:ac:f0:fc:71:
         8a:c8:23:9d:7c:bd:6e:50:32:87:1d:5b:dc:37:65:64:f8:2e:
         41:12:3b:73:c1:d4:72:eb:37:86:11:b2:e3:c0:26:9f:93:85:
         70:91:c4:9d:d5:79:17:84:5b:a2:2d:69:6b:97:4e:0d:df:4c:
         98:08:4a:57:b2:c5:00:7a:f1:17:a3:40:c1:d1:7b:4f:4e:d2:
         26:45:8f:e5:a0:21:c3:4d:f6:b4:5f:30:34:e4:e0:e4:aa:c9:
         75:dd:71:c2:08:23:90:0d:ce:21:11:a0:ee:ba:52:00:81:e6:
         ca:d0:ec:24:19:21:5f:e5:64:af:d4:f5:98:de:24:3c:c8:c4:
         b1:9f:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:02 2025 by rpki-client