Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
File:                     D296B69B93C13271557656EE54E2511823349A12.mft (raw, json)
Hash identifier:          iuPDDgz/MV+Gvflr6M73bfjAvk83eG7vzYX/1J5M9Iw=
Subject key identifier:   65:F1:A3:A0:C6:73:BC:BB:2F:D9:0D:08:C3:47:68:36:32:39:D2:96
Authority key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
Certificate issuer:       /CN=D296B69B93C13271557656EE54E2511823349A12
Certificate serial:       5A8E6F4623B75847347E7811E2FE0D1BFAB13011
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
Manifest number:          034F
Signing time:             Mon 20 Oct 2025 09:22:00 +0000
Manifest this update:     Mon 20 Oct 2025 09:17:00 +0000
Manifest next update:     Tue 21 Oct 2025 09:22:00 +0000
Files and hashes:         1: D296B69B93C13271557656EE54E2511823349A12.crl (hash: fiE7uX9wo1B/m6GSpcueBiX0EdnMkNbxsqWazlSvi+w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl
                          rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8e:6f:46:23:b7:58:47:34:7e:78:11:e2:fe:0d:1b:fa:b1:30:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B69B93C13271557656EE54E2511823349A12
        Validity
            Not Before: Oct 20 09:17:00 2025 GMT
            Not After : Oct 27 09:22:00 2025 GMT
        Subject: CN=3082010A02820101009C0F9BA1AB100640B3501AE00FBDF34421B0D09B694B78B1CAC6F8C1291D37B63C5F40E40C32786BEB3B017614DD36F8D772719A353D57268E68246888C4CEFC53EB98BA310BC4CD58130D79BA0EE574B304729AD0BED70B2685AA8669D4158FC3DF82EDEA2D3C69569AFB9F7C59CE3E49ACCDFBF589E95A91B195467C2293344823CD4B1C4C0A95A98216DF8A5AD420466016C6882E971BD2EE1C6378CA64D7B4DB5D10C4118BE992346EE28E7C7C2934C621B75B7068E8BC305EF8861C9EE89E7A0993B63B8FA34AC8E33415D02E87ECCC9466523B44185444E9EB28B8936132FAAB59A8DDA4BF1B5A58BABFADFCE1289089EB532CE258CF9A0437B4F779D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:9b:a1:ab:10:06:40:b3:50:1a:e0:0f:bd:
                    f3:44:21:b0:d0:9b:69:4b:78:b1:ca:c6:f8:c1:29:
                    1d:37:b6:3c:5f:40:e4:0c:32:78:6b:eb:3b:01:76:
                    14:dd:36:f8:d7:72:71:9a:35:3d:57:26:8e:68:24:
                    68:88:c4:ce:fc:53:eb:98:ba:31:0b:c4:cd:58:13:
                    0d:79:ba:0e:e5:74:b3:04:72:9a:d0:be:d7:0b:26:
                    85:aa:86:69:d4:15:8f:c3:df:82:ed:ea:2d:3c:69:
                    56:9a:fb:9f:7c:59:ce:3e:49:ac:cd:fb:f5:89:e9:
                    5a:91:b1:95:46:7c:22:93:34:48:23:cd:4b:1c:4c:
                    0a:95:a9:82:16:df:8a:5a:d4:20:46:60:16:c6:88:
                    2e:97:1b:d2:ee:1c:63:78:ca:64:d7:b4:db:5d:10:
                    c4:11:8b:e9:92:34:6e:e2:8e:7c:7c:29:34:c6:21:
                    b7:5b:70:68:e8:bc:30:5e:f8:86:1c:9e:e8:9e:7a:
                    09:93:b6:3b:8f:a3:4a:c8:e3:34:15:d0:2e:87:ec:
                    cc:94:66:52:3b:44:18:54:44:e9:eb:28:b8:93:61:
                    32:fa:ab:59:a8:dd:a4:bf:1b:5a:58:ba:bf:ad:fc:
                    e1:28:90:89:eb:53:2c:e2:58:cf:9a:04:37:b4:f7:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F1:A3:A0:C6:73:BC:BB:2F:D9:0D:08:C3:47:68:36:32:39:D2:96
            X509v3 Authority Key Identifier:
                keyid:D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:33:22:23:82:01:0f:b1:63:14:28:2c:ce:e5:52:81:e6:
         45:e7:db:91:99:06:42:de:dc:11:8d:3e:e4:93:67:d6:1c:72:
         0a:c1:eb:0f:de:cd:c2:6e:e0:47:32:8b:b5:02:84:7a:d2:ae:
         9c:0d:e8:17:97:db:74:53:00:69:19:b1:8b:7a:cc:6a:5b:65:
         1b:de:bd:89:db:6b:a6:af:ac:e2:23:3c:37:69:5f:29:ff:eb:
         cb:f9:b1:5b:a4:a0:73:33:ab:fd:34:5a:fa:86:11:58:77:d7:
         37:d7:6f:83:86:9a:4d:fa:67:24:22:91:47:c4:08:9a:dd:e8:
         a5:08:b8:74:c5:2d:be:03:b3:8a:ca:20:d2:6c:06:af:0c:5d:
         10:dc:b3:90:af:e2:fe:47:35:ef:bf:b4:ac:86:41:3c:ae:d4:
         65:cd:ba:e8:67:10:55:91:a2:6f:d5:fe:b4:c5:39:59:4a:08:
         81:84:de:9b:71:aa:75:f5:72:a2:a6:29:f0:84:37:4c:02:3f:
         22:fd:1b:a4:5a:1a:f0:cb:9e:31:00:dd:0c:4a:c1:24:ce:4b:
         45:a8:07:1c:8d:19:67:5f:ef:6e:b8:a4:48:c2:c9:99:04:3c:
         61:4d:3e:16:1d:ac:1f:5c:03:bd:92:30:f8:8b:d0:45:1d:38:
         3f:94:be:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:13:42 2025 by rpki-client