Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft
File:                     AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft (raw, json)
Hash identifier:          H3zsIxxwjXTsNiRlq8U2SmfWRWNU7Z0yLOyyiH39W+M=
Subject key identifier:   7C:6E:C0:E4:A8:D0:6F:FF:58:11:E2:CB:D7:6E:50:81:57:B1:2A:91
Authority key identifier: AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28
Certificate issuer:       /CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28
Certificate serial:       7EA423F5B3F858C8B85595F5CA68FAD399917192
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 08:09:55 +0000
Manifest this update:     Mon 20 Oct 2025 08:04:55 +0000
Manifest next update:     Tue 21 Oct 2025 10:53:55 +0000
Files and hashes:         1: 34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa (hash: NqLcgKbfzAfsmZNI+XUfpxZJPzuSbfOui/lTDMEpzng=)
                          2: 323830343a353138383a3a2f33322d3334203d3e20323638343538.roa (hash: Mv+OZ01O49zIHJJDesHD7xJ/KwQyTUDir7uCnjI9KHQ=)
                          3: AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl (hash: GL+B3cBVqpdGxnFqXX0b7MwdZwCKZCC+SIqHw71kF9w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl
                          rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a4:23:f5:b3:f8:58:c8:b8:55:95:f5:ca:68:fa:d3:99:91:71:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28
        Validity
            Not Before: Oct 20 08:04:55 2025 GMT
            Not After : Oct 21 10:53:55 2025 GMT
        Subject: CN=7C6EC0E4A8D06FFF5811E2CBD76E508157B12A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:3c:d5:6c:40:8d:31:69:21:0a:d4:03:e5:
                    98:16:f8:22:fd:13:ee:03:9e:fd:50:a6:95:11:8c:
                    b1:77:18:40:5b:f8:94:db:d9:45:fc:ed:80:30:31:
                    ab:4f:53:87:2c:36:51:07:b2:04:9b:0d:44:74:a9:
                    9b:76:12:b1:a9:6e:c2:c0:65:47:0a:bc:23:34:d1:
                    db:61:d1:d8:8d:f9:aa:4d:e8:c3:ed:6f:f3:19:0e:
                    56:b4:76:c0:88:16:19:18:53:75:b3:94:11:ce:ca:
                    43:0d:ef:d5:0b:c3:12:fc:5d:2b:f0:2e:1f:1e:d0:
                    43:17:fa:4c:7e:bd:d4:3e:08:7f:91:aa:1f:2a:31:
                    bf:d7:4c:21:e6:00:7b:ac:c7:da:53:7f:27:6d:51:
                    6d:95:41:b9:8c:9e:c1:85:a5:db:4b:09:93:e8:f7:
                    a4:95:17:c2:0d:3e:e1:64:70:d4:2d:9d:ca:c7:d8:
                    c9:1a:25:56:77:9f:e4:3e:19:40:64:44:c1:ed:f6:
                    b2:8e:72:17:c8:d1:ae:d5:88:64:be:d0:cd:f6:67:
                    07:7e:52:5b:12:06:c4:c9:c8:a1:33:bc:a0:b9:22:
                    48:e6:9c:9c:19:8f:25:a3:f0:e7:a0:12:21:fe:7f:
                    12:64:b3:41:e7:f8:fa:64:8e:85:2f:1b:2c:0a:96:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6E:C0:E4:A8:D0:6F:FF:58:11:E2:CB:D7:6E:50:81:57:B1:2A:91
            X509v3 Authority Key Identifier:
                keyid:AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:db:9d:2e:a5:e3:81:3b:5f:d8:f3:aa:c5:19:b8:3c:90:eb:
         20:86:71:fb:b5:ed:e8:57:bb:5f:bc:c3:75:71:26:cc:80:1a:
         f8:49:17:4d:f9:a4:15:d6:bb:99:ce:00:e6:b9:f6:40:f8:07:
         13:a4:fc:0f:e1:a5:6f:8a:8c:00:d5:6d:d9:36:7d:a6:86:0c:
         ed:f5:01:1b:ed:46:44:8a:c9:28:82:61:99:ae:08:2d:61:77:
         90:5d:12:b7:3a:b7:cb:57:d1:fa:ea:f6:99:3e:f3:2f:72:3c:
         db:32:a1:0b:32:a0:16:ee:cb:03:7b:04:85:47:5f:91:92:12:
         e7:88:f9:e6:40:2f:b1:d1:97:2b:5e:cd:b1:05:b2:87:af:84:
         60:ea:3e:43:07:34:4d:83:4f:a6:3a:e0:f3:18:f5:62:0a:3f:
         46:b8:8b:24:69:6f:d6:6e:8e:ae:0f:fc:84:49:fd:6f:c6:7f:
         69:1d:d0:cb:14:65:a1:34:7f:e1:f2:7d:7c:3c:c8:05:53:90:
         d6:f3:6e:e9:d8:20:56:9f:e8:6f:88:b4:4a:8b:52:26:f8:eb:
         b4:a6:8d:8b:ca:97:5f:98:96:f3:38:19:f7:b0:0f:12:35:f5:
         bb:5d:78:79:e3:e8:53:b2:38:cb:1e:a9:41:45:7c:1f:ff:df:
         c3:6d:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:23 2025 by rpki-client