Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft
File:                     31913C696443B8596EC7722D368B4749C287A025.mft (raw, json)
Hash identifier:          e2he9i+Vr/1BPE9tgPNgyGkZYpIDpnNTk/2OypaDzpc=
Subject key identifier:   D8:07:AB:8B:0E:0D:03:A3:28:F0:C1:55:82:CC:7E:25:25:D8:4A:8E
Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25
Certificate issuer:       /CN=31913C696443B8596EC7722D368B4749C287A025
Certificate serial:       129A2DC590D74E3AF5C9AD47C9192036ED697CC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft
Manifest number:          028D
Signing time:             Sun 19 Oct 2025 17:02:04 +0000
Manifest this update:     Sun 19 Oct 2025 16:57:04 +0000
Manifest next update:     Mon 20 Oct 2025 20:53:04 +0000
Files and hashes:         1: 31913C696443B8596EC7722D368B4749C287A025.crl (hash: SIx1xzZ4zJU1ny/fwxNt67Um+FmCZ9+WaWBDq6OADcs=)
                          2: 3138362e3232372e36342e302f32322d3234203d3e203631373236.roa (hash: tQtO6upZn/pp5ZgaAHSVlMXZc9ybBbe/+0pkP3gDHBw=)
                          3: 3133312e37322e39362e302f32322d3234203d3e203631373236.roa (hash: T4l1Rdp+if5x2GwVENwJ5EG4S5U5hpq/S6oNIsW4FsY=)
                          4: 323830343a316236383a3a2f33322d3438203d3e203631373236.roa (hash: pfn35jhaqmmVavRIG/aoZzZSN1xJuEgSVB+lmLR7HBw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl
                          rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9a:2d:c5:90:d7:4e:3a:f5:c9:ad:47:c9:19:20:36:ed:69:7c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31913C696443B8596EC7722D368B4749C287A025
        Validity
            Not Before: Oct 19 16:57:04 2025 GMT
            Not After : Oct 20 20:53:04 2025 GMT
        Subject: CN=D807AB8B0E0D03A328F0C15582CC7E2525D84A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:86:d1:26:b9:f4:ec:ab:7a:4c:a1:20:03:
                    eb:ac:bf:3c:fb:d9:47:67:26:11:f5:76:bf:cd:9c:
                    b1:ff:9d:63:1c:a4:fd:d8:c6:77:80:dd:92:56:43:
                    6b:f3:c9:31:56:d8:7c:a8:22:de:2d:27:2f:bc:e5:
                    ce:23:bf:9f:9b:ec:b4:a7:68:8c:81:0b:85:ca:ef:
                    a3:fb:3a:45:b7:f4:2e:5b:8e:8a:13:f3:b0:3a:b6:
                    a6:d7:f8:8e:76:a4:f2:bb:02:89:68:cf:6d:7b:a1:
                    0a:b8:4b:75:73:35:c0:e7:55:58:00:ef:1b:fb:7c:
                    db:6f:37:57:31:25:76:be:74:63:cb:5e:57:6a:c8:
                    f5:ca:c3:89:2f:8a:bb:3d:48:07:93:f1:aa:72:5b:
                    48:24:33:03:7a:31:fd:57:45:66:0d:d2:ef:3e:24:
                    34:83:74:d0:29:98:03:e9:8f:a8:5d:68:9a:d7:2e:
                    ed:e4:98:52:7d:e6:a7:58:88:a7:69:b2:80:78:af:
                    2e:b7:9a:87:a5:5b:b7:5c:4f:d6:3f:55:3f:b4:c3:
                    f5:4b:74:11:72:96:8f:f6:aa:e6:b8:a9:b3:e7:f3:
                    f3:56:bf:c0:53:9c:37:83:ab:77:08:70:19:02:da:
                    4e:7e:f6:b7:1b:be:db:8a:d1:d1:1c:27:81:bd:2b:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:07:AB:8B:0E:0D:03:A3:28:F0:C1:55:82:CC:7E:25:25:D8:4A:8E
            X509v3 Authority Key Identifier:
                keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:57:cd:ee:a3:9d:25:93:c8:91:f4:b5:08:f5:7b:d5:77:c3:
         1f:58:69:16:d3:35:8e:12:41:fa:98:fc:3c:83:89:8e:30:fc:
         1e:f5:ae:9b:7e:ff:a9:c5:5d:62:8e:e1:6a:9d:36:18:16:cb:
         83:2c:56:d7:88:67:ad:e5:dc:11:63:7a:7b:fc:ec:43:64:b6:
         a5:58:a1:81:2b:05:63:49:94:fc:8c:97:5a:c9:57:06:ab:31:
         df:ec:b4:8c:7f:b3:7b:44:9c:86:5f:6f:92:12:74:19:29:34:
         96:31:07:9a:ab:b0:5b:6e:af:9f:4c:1f:c0:c4:34:28:02:77:
         ad:d1:5c:81:6e:82:f4:9c:2d:c2:23:f6:e4:bf:2d:fa:34:f7:
         1c:71:41:94:74:63:75:f2:5b:59:23:28:4a:ec:27:6d:84:c4:
         43:7a:fa:1c:16:4c:a2:72:cf:a9:69:1e:11:5b:4d:75:f2:d4:
         77:27:0c:5c:19:16:03:30:77:6e:24:f0:94:7a:43:6c:7d:d8:
         bb:66:7d:61:2f:07:ef:8f:a9:99:d2:c5:8a:b0:d9:b2:d7:fc:
         3f:d9:30:d0:07:65:f3:de:78:f8:0e:08:38:f3:00:25:27:89:
         52:6b:cb:75:5c:88:fe:1f:e7:da:4f:76:cf:d2:f4:0f:8f:47:
         0d:4d:54:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:08 2025 by rpki-client