Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft
File:                     687D5F008B520395E4289191144220E2C472A669.mft (raw, json)
Hash identifier:          PzueOPNwb1Kgz8QqTDaH9QUqfiC67ME2PQMCi1WJkmA=
Subject key identifier:   28:19:70:04:36:D0:78:44:7F:36:5E:B7:2D:E3:31:16:11:54:0E:3C
Authority key identifier: 68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69
Certificate issuer:       /CN=687D5F008B520395E4289191144220E2C472A669
Certificate serial:       7717FDBE80853D45BE6B6DEA0004DFB3CD452234
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft
Manifest number:          27
Signing time:             Mon 20 Oct 2025 05:20:10 +0000
Manifest this update:     Mon 20 Oct 2025 05:15:10 +0000
Manifest next update:     Tue 21 Oct 2025 06:37:10 +0000
Files and hashes:         1: 687D5F008B520395E4289191144220E2C472A669.crl (hash: vQrYetejpsgoGt285GHp+BtTLZ4LooXe4X8SxoPoMiE=)
                          2: 323830343a326232343a3a2f33322d3438203d3e20323635313337.roa (hash: ijEr3f7j1DppUG1sCN5o0v9QuT/FdCpQy+KDTJiXd6E=)
                          3: 3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa (hash: kdjvMgt4WKFDG11VUvvzllBV2iitiEy2lt7hQDUlrNU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl
                          rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:fd:be:80:85:3d:45:be:6b:6d:ea:00:04:df:b3:cd:45:22:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687D5F008B520395E4289191144220E2C472A669
        Validity
            Not Before: Oct 20 05:15:10 2025 GMT
            Not After : Oct 21 06:37:10 2025 GMT
        Subject: CN=2819700436D078447F365EB72DE3311611540E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:ed:b0:e7:bb:f4:ea:b8:39:b2:b1:35:cc:
                    04:96:ff:3a:b8:1d:fe:6c:8e:bb:f5:b9:d2:be:c6:
                    c6:aa:1d:d7:02:7d:d0:9a:7a:65:f0:6f:74:21:a6:
                    46:e0:0e:ac:4a:29:d4:9f:ff:0e:ab:65:4f:f4:e4:
                    09:fd:9c:3b:22:93:28:7a:f3:31:cc:89:ae:24:6a:
                    b2:b4:fe:c7:93:bf:e3:96:a5:06:30:e3:ae:02:09:
                    c7:74:b5:b6:e5:be:e1:ef:01:dd:31:27:c8:27:44:
                    fc:bc:f7:dd:5a:4e:4c:7f:8d:2a:7a:4c:6a:b5:a8:
                    28:ea:2b:60:74:2a:34:2e:4e:a8:e1:ac:4a:72:ff:
                    9c:20:42:a5:16:58:00:0e:7d:cb:f4:8b:12:f3:70:
                    51:28:92:77:4a:55:3b:8f:da:30:5c:cd:23:8e:5b:
                    03:0d:a8:e0:15:1e:52:cd:f4:18:67:3b:aa:e6:2c:
                    db:27:e1:5e:76:99:0a:50:a0:cb:91:fc:a3:b1:64:
                    85:bc:67:21:82:77:48:a6:0a:95:08:65:68:41:30:
                    15:1d:2d:df:be:b0:de:14:76:b9:01:54:3d:05:3e:
                    27:60:93:a3:5a:a6:93:b6:89:de:7a:48:62:6c:dc:
                    fc:2f:cc:f8:1f:6f:35:ac:47:80:df:6f:ce:01:65:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:70:04:36:D0:78:44:7F:36:5E:B7:2D:E3:31:16:11:54:0E:3C
            X509v3 Authority Key Identifier:
                keyid:68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:61:59:99:26:94:0c:42:09:0c:c1:0d:54:7d:05:dd:1c:ae:
         fd:1e:6f:ea:91:2f:ba:8d:68:20:53:38:f9:f6:12:f3:e9:b5:
         b2:db:a3:2a:71:4e:e4:48:a9:91:8c:63:46:5a:26:6c:84:c3:
         12:13:25:7c:49:b0:0d:18:3c:47:88:1d:00:62:cc:f2:9f:45:
         4b:b4:0e:65:c4:c7:44:95:e8:56:e6:a1:2a:72:da:f7:60:e5:
         00:76:19:75:a0:cb:95:ae:77:d2:00:0d:b3:97:7e:76:d8:39:
         d3:87:ac:9d:4b:71:0b:19:40:81:aa:40:61:80:47:d9:51:02:
         1b:fa:a7:d7:d8:de:c1:81:b0:6c:32:58:0d:e5:4d:7e:22:7f:
         c4:5f:9d:a0:c8:fa:8c:d9:33:51:cf:00:9d:8c:9a:5c:95:5f:
         a9:93:ee:f1:d1:f6:a6:d0:c0:2f:13:82:65:ba:72:3c:02:1e:
         d9:d6:34:8a:e0:25:a1:1d:f2:5c:8d:52:7b:a9:5f:aa:53:18:
         4f:f0:30:4b:59:d8:0c:3a:c8:4f:d5:4b:b0:60:64:d1:c2:96:
         87:3e:08:88:14:be:25:3e:22:72:bf:62:db:b5:1e:32:81:ea:
         42:26:b6:e6:79:df:3e:e8:03:7c:ea:2b:94:f6:aa:90:fb:e3:
         24:8f:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:37 2025 by rpki-client