Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
File:                     95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json)
Hash identifier:          HR6SLVe29q0L7Je3J3Xxux98zI9UV8ZQG9/l9/E7QGM=
Subject key identifier:   1F:90:25:CE:E5:19:08:32:6C:B7:1D:BB:44:C5:F2:45:A5:6F:3F:C2
Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81
Certificate issuer:       /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
Certificate serial:       07DA8783C829AE1A7CCC14CC0756E629C263DACE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
Manifest number:          013C
Signing time:             Mon 20 Oct 2025 10:51:31 +0000
Manifest this update:     Mon 20 Oct 2025 10:46:31 +0000
Manifest next update:     Tue 21 Oct 2025 14:42:31 +0000
Files and hashes:         1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=)
                          2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: qSt4MrVKysUZcNSKnd+5Qsl55Ew3+KqZvqexgU+PR5A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl
                          rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:da:87:83:c8:29:ae:1a:7c:cc:14:cc:07:56:e6:29:c2:63:da:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
        Validity
            Not Before: Oct 20 10:46:31 2025 GMT
            Not After : Oct 21 14:42:31 2025 GMT
        Subject: CN=1F9025CEE51908326CB71DBB44C5F245A56F3FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:06:a1:eb:24:55:bd:da:0c:2d:83:02:9d:
                    dd:46:a9:51:11:c6:99:9f:3b:19:48:04:f5:b5:36:
                    95:8a:31:49:e5:dd:70:d4:1b:ff:bb:f9:71:25:51:
                    02:a2:d9:6c:1d:f1:5e:bb:76:b7:1e:2d:a9:83:9a:
                    b7:89:39:57:76:c9:8c:d5:06:2a:06:40:82:8a:aa:
                    53:e4:9b:81:ce:d6:a1:14:ed:c1:4c:36:ea:73:a0:
                    a7:28:cf:fa:4f:24:f1:45:ab:f9:e4:a8:5b:f5:d4:
                    2b:05:43:2f:26:20:aa:42:69:d7:12:e4:12:f6:5f:
                    38:af:02:33:35:ad:8f:90:4d:a4:ff:cb:ab:e0:38:
                    11:f2:2a:61:d9:1d:ff:b6:21:db:a5:9c:06:ac:3f:
                    af:af:77:0b:67:1d:61:aa:83:af:9a:c1:85:d4:27:
                    fc:7b:32:33:13:2c:e8:5a:01:e5:b8:b4:c1:eb:bb:
                    3c:59:5e:31:f6:3e:e8:ba:d3:4a:34:70:21:62:f8:
                    f7:10:69:76:1a:9b:ce:97:dc:07:ed:7c:47:f3:3e:
                    6b:5f:c6:fe:ea:71:29:7c:86:c9:d0:32:b7:93:9e:
                    15:70:95:01:06:e5:5d:3b:7d:c1:bb:06:28:77:62:
                    b0:bf:c9:f3:e3:5f:35:c8:f3:1a:f2:16:21:31:e9:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:25:CE:E5:19:08:32:6C:B7:1D:BB:44:C5:F2:45:A5:6F:3F:C2
            X509v3 Authority Key Identifier:
                keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ac:ba:63:a3:45:d6:6a:61:f9:46:7d:2d:c5:16:dd:f5:a2:
         c8:3d:94:7a:02:61:9d:77:49:9e:44:11:fb:7c:90:a5:32:1b:
         06:db:f0:e0:2b:89:f7:77:85:89:84:e3:6c:ce:df:67:af:51:
         0c:0c:4f:64:3c:56:33:8c:e6:20:e1:5b:16:41:9a:d6:2c:7f:
         98:9e:e9:04:94:1a:41:ac:ec:c1:c9:9d:07:1c:3d:8c:80:be:
         8f:df:76:3e:f2:b1:69:88:f0:f7:5c:5e:47:53:a1:8c:bf:d2:
         e2:c3:9f:9d:c2:9c:51:cf:e9:a6:f8:6a:8f:98:4f:52:92:2a:
         15:ba:27:31:1a:05:1b:d8:d9:dd:42:27:ad:a2:f9:d3:fd:fa:
         9c:01:1c:53:84:e6:d8:8c:74:c8:ab:be:62:cc:15:b8:80:9c:
         86:10:b8:56:b5:bd:51:99:f0:0c:7b:93:b0:f6:6c:bb:57:e1:
         18:c2:fe:85:5a:2c:d8:db:5e:20:7d:98:23:79:a3:8e:c8:72:
         30:07:9e:e3:35:5e:cb:1c:3d:9a:ee:fc:df:ac:05:e5:56:f0:
         b0:2a:81:83:e3:82:b1:12:9d:14:d6:f9:9f:85:b8:4b:9e:78:
         b9:5f:f3:e0:2f:83:90:88:e2:a6:2f:c8:45:a6:e8:78:b7:0c:
         e7:f7:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:12:54 2025 by rpki-client