Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
File:                     CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json)
Hash identifier:          5ZBaRi5vFr/7xZxQh5gS0GB1P9DoXoavPqQMkIcV/qQ=
Subject key identifier:   B1:EC:D4:54:BB:76:32:CE:53:43:39:F1:FB:DC:C0:80:F3:6B:68:7F
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       0386AC7248658F3E6B37F80455A53E2CF2DE0867
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
Manifest number:          0106
Signing time:             Mon 20 Oct 2025 12:48:46 +0000
Manifest this update:     Mon 20 Oct 2025 12:43:46 +0000
Manifest next update:     Tue 21 Oct 2025 16:02:46 +0000
Files and hashes:         1: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: mgsYCCjJSoJmcEEh/9mNABYK1PuWrIpDzusmWD7BpKk=)
                          2: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: amDeMX/BZEdOLpiY5eI+Syvf2w+HOessOzMCfITuWvo=)
                          3: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: Ed5QuGTHPwp5oARXnulvR050iYj5IPBSMfibD+0njjY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:86:ac:72:48:65:8f:3e:6b:37:f8:04:55:a5:3e:2c:f2:de:08:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Oct 20 12:43:46 2025 GMT
            Not After : Oct 21 16:02:46 2025 GMT
        Subject: CN=B1ECD454BB7632CE534339F1FBDCC080F36B687F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:d5:6c:1e:f9:db:f0:28:3d:17:d4:ba:4e:
                    28:9b:32:21:a9:f7:4e:c9:71:28:ff:ed:a9:56:4d:
                    d4:93:1a:da:b0:c3:0a:ae:db:a4:ff:54:86:86:fb:
                    78:9e:85:33:17:e9:58:75:3f:3c:7b:a1:65:1c:a8:
                    3f:2d:05:c4:80:24:7c:ea:6c:c4:e5:74:8b:99:8d:
                    32:7a:4e:95:21:e1:78:3b:8e:2b:e3:d5:78:f0:51:
                    8a:60:fe:73:f1:7f:4a:1d:27:c5:d8:b5:1b:fa:33:
                    26:d9:d0:30:5f:b9:76:79:52:50:89:b6:07:c8:26:
                    b4:a0:f3:84:aa:0a:0b:2e:3c:63:89:a7:4d:7b:6b:
                    31:c1:9b:64:50:e7:14:fd:80:14:5a:81:af:f9:83:
                    f1:31:cb:f2:7c:6b:f9:ea:ab:29:a9:8a:68:c9:25:
                    52:4c:67:21:e4:27:15:4b:8a:ad:a6:b8:09:c0:18:
                    17:5d:3a:e6:c9:9a:94:4a:d5:27:d2:94:c7:2b:01:
                    e2:68:59:14:a7:02:56:cd:b9:c9:6d:d0:36:01:34:
                    7b:2e:44:a7:61:ca:54:b2:50:b4:07:6a:d6:0a:c1:
                    43:65:ee:b2:cd:17:13:a4:aa:02:aa:fa:45:93:43:
                    65:78:c3:39:99:df:15:65:3d:54:0a:6c:fb:a6:2d:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:D4:54:BB:76:32:CE:53:43:39:F1:FB:DC:C0:80:F3:6B:68:7F
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:52:19:26:8c:bb:3e:5a:42:5e:45:c0:47:89:06:b7:1f:
         54:c9:11:c8:f8:b7:37:aa:2d:d8:b8:e5:ee:ef:9e:70:84:aa:
         5f:0a:45:8f:8f:91:96:26:9c:ca:91:5d:82:df:2f:7e:21:cb:
         93:2e:bf:22:e4:3e:02:f4:47:53:66:7b:c6:7d:cd:f9:59:39:
         43:b4:2d:31:a4:f4:e8:29:f7:7a:0b:6b:90:ce:4e:33:ed:61:
         c7:32:ef:b5:c9:5e:37:81:fd:e6:ef:42:a4:81:57:66:21:0c:
         1b:57:26:71:8d:41:52:7b:ef:14:3d:f3:87:7a:5f:17:ee:a8:
         b0:b7:e7:53:5d:79:f2:60:27:15:0d:93:4b:0a:99:39:27:66:
         1d:d2:65:bc:0a:50:10:21:79:7e:9f:9a:74:7c:53:f4:e2:ec:
         d4:22:3c:9e:d2:0f:59:bb:23:f9:1c:1c:c2:20:26:e4:a3:d0:
         71:53:af:bf:3b:17:0b:a9:f5:36:b7:75:31:79:1c:75:80:57:
         f8:43:16:0a:fb:a0:72:19:c1:d8:e0:b0:c4:a6:b4:0b:cc:82:
         96:e6:40:d9:ec:c5:50:b9:7d:e0:1f:66:6b:5e:b4:2b:6a:9c:
         f6:53:44:ba:5a:9e:b2:93:8b:8c:f2:74:de:ba:9d:03:6c:72:
         84:2f:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:56 2025 by rpki-client