Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
File:                     8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft (raw, json)
Hash identifier:          lhR+Y92S7vYSRI3R61b3d20XQvA0zLO4CmnPzlSUteI=
Subject key identifier:   B9:02:36:4F:00:56:E6:00:E2:01:17:9A:33:6A:11:16:9F:9A:7F:D2
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       4154E96F751CC5D6DF7ABA28F641AC90B7041BBE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
Manifest number:          34
Signing time:             Mon 20 Oct 2025 16:24:36 +0000
Manifest this update:     Mon 20 Oct 2025 16:19:36 +0000
Manifest next update:     Tue 21 Oct 2025 20:08:36 +0000
Files and hashes:         1: 323830343a333437633a323030303a3a2f33362d3336203d3e20323635343631.roa (hash: XJXbicTiz1vRqPrpznv3f1laTUe0a88aMkkEmpG+NSw=)
                          2: 8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl (hash: iBvQSsQBPEYXQgo2zEJF0VpVSq80n4alEONOun/IVTc=)
                          3: 323830343a333437633a3a2f33362d3336203d3e20323635343631.roa (hash: 3WER/jW23JkF6Yqz3PvguCfldP/2lVcz203G7wTqyEs=)
                          4: 323830343a333437633a343030303a3a2f33362d3336203d3e20323635343631.roa (hash: i+MfEOKhmhGZpBUgdLviL7dhasGJaVgJWzgxupkIXP8=)
                          5: 3136382e3139362e3135322e302f32332d3233203d3e20323635343631.roa (hash: ZjsB+i+HeaPRS/xs0TWEeI7qr3leqjb2o+qwLGG22fU=)
                          6: 3136382e3139362e3135322e302f32342d3234203d3e20323635343631.roa (hash: IlO1cehuqtdP2CtKKygYj9ulv3NlL8BSnEc3rcXtH4Q=)
                          7: 323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa (hash: s4H7RD1QdFKwlJnXkSn5OJflItXFXtkdrjv1Nu8OQxU=)
                          8: 3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa (hash: my8/S3MIsBNYW/x0gFtoQNussu714xSmnlPgsFwrnJs=)
                          9: 323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa (hash: /x0r92timG5YwaJhwVPPM2RSs3DVOUeJAuukIqM37hQ=)
                          10: 3136382e3139362e3135332e302f32342d3234203d3e20323635343631.roa (hash: OKxWWzGEBMxnVvl+7cmZX8RNnumjW08yDHr0GwoRLK0=)
                          11: 3136382e3139362e3135342e302f32342d3234203d3e20323635343631.roa (hash: ifuJxqU4a+8rG3k34Ns0NosdtSxHkd5g20lw0jZxHUM=)
                          12: 3136382e3139362e3135342e302f32332d3233203d3e20323635343631.roa (hash: 7t5WCqa0Kf8lj3p3b6b4lWEkTR0A1OMl9B6M6EEZBGY=)
                          13: 323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa (hash: Y3BoxUq/w5ovYjOBq+YPxRUZMdfCh0A7i49nZUn7AnM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:54:e9:6f:75:1c:c5:d6:df:7a:ba:28:f6:41:ac:90:b7:04:1b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Oct 20 16:19:36 2025 GMT
            Not After : Oct 21 20:08:36 2025 GMT
        Subject: CN=B902364F0056E600E201179A336A11169F9A7FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:d4:cb:2f:05:99:88:ef:b3:05:ec:4b:32:
                    81:b5:e7:b5:05:22:35:59:f9:a8:17:09:4c:c9:7d:
                    84:aa:a0:ff:9e:d3:00:2b:92:09:b9:18:54:94:ce:
                    13:89:6a:71:a9:df:28:df:1c:fa:1d:3c:7c:d6:08:
                    3f:22:c0:38:ec:64:2b:26:fc:27:4b:94:4a:e7:c6:
                    af:74:c4:a7:9c:fb:b3:a7:65:1b:42:04:28:7c:47:
                    e2:15:5a:29:87:29:5c:57:32:51:cb:71:e3:9a:c3:
                    7d:59:3a:1e:2d:85:48:c2:62:4d:3f:37:53:47:d0:
                    d6:92:ab:05:9e:dc:3c:5f:b0:48:38:72:04:de:05:
                    2c:d1:15:9e:f3:50:c1:01:b0:67:d2:f0:c1:af:24:
                    bc:25:d5:79:f5:b9:1b:6d:ba:9c:2c:00:fa:6d:f0:
                    fa:de:86:0f:de:44:9c:0d:9f:52:92:f9:f3:42:97:
                    9f:06:d1:98:0a:52:d2:be:8b:c4:bc:9f:b5:af:da:
                    51:9d:7e:92:c5:f6:39:c3:34:d2:3d:36:0d:a9:56:
                    6d:1e:a2:02:df:6e:00:75:c5:db:38:ad:a2:0e:03:
                    2e:a7:8a:48:d7:4d:3f:b7:16:8f:67:a8:a6:e0:2a:
                    5d:fe:19:2e:c6:83:e1:47:90:56:16:21:ee:3f:7b:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:02:36:4F:00:56:E6:00:E2:01:17:9A:33:6A:11:16:9F:9A:7F:D2
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:22:5d:ad:1d:2f:4e:1a:24:33:14:97:2c:06:ca:54:cd:
         af:af:5d:de:7a:df:e5:d2:ce:10:ce:3c:1c:73:a4:f0:e0:a2:
         9d:70:9b:4a:55:98:7d:82:cf:25:6d:37:6e:f8:ac:21:33:ea:
         62:e8:f9:05:dd:78:51:aa:86:7a:e3:3a:2f:75:d8:37:1d:9a:
         89:89:02:5a:ea:0c:01:47:50:22:45:55:b0:8b:ea:55:61:76:
         99:d2:dc:b2:d9:06:b2:7f:99:21:44:1c:2a:df:05:a8:be:bc:
         5f:21:6b:66:fd:bb:3b:13:ec:cd:ef:6c:47:5d:05:ff:77:74:
         3f:6c:9c:27:a6:a1:f3:5b:b0:a6:73:d3:95:ec:35:cc:25:ba:
         f3:e8:47:03:16:e4:e3:71:bb:89:bb:1d:09:20:ff:0f:e3:4a:
         df:f4:24:9a:6d:1b:36:2f:37:c6:79:45:34:1a:1c:cb:29:bc:
         a6:b3:fe:4e:eb:75:0b:36:c8:38:44:39:c4:1b:eb:47:cb:7b:
         53:a5:49:7a:4a:c6:c6:a1:30:ea:7d:86:4d:d7:68:5b:0c:f6:
         ba:11:6f:90:19:e4:f1:dd:7e:6b:8c:b9:eb:97:10:2f:54:85:
         38:25:3a:24:e8:5d:2d:73:57:30:eb:64:d1:40:db:41:09:3b:
         94:f4:a0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:39:21 2025 by rpki-client