Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft
File:                     9D24A534785E862FF2DAC70BF06847337A2816FB.mft (raw, json)
Hash identifier:          M2CUJU/a5o2zEmM3j1DtoB5hKMqSKL2DRwY74mPfYgY=
Subject key identifier:   A7:FF:09:BD:92:A8:C0:9E:0C:AA:32:84:5F:29:E9:D5:69:C1:56:D1
Authority key identifier: 9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB
Certificate issuer:       /CN=9D24A534785E862FF2DAC70BF06847337A2816FB
Certificate serial:       31FD6BAE3D4F569F386862A3039E33A8EE10A7B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft
Manifest number:          02E7
Signing time:             Mon 20 Oct 2025 16:17:00 +0000
Manifest this update:     Mon 20 Oct 2025 16:12:00 +0000
Manifest next update:     Tue 21 Oct 2025 19:28:00 +0000
Files and hashes:         1: 323830343a366231343a3a2f33322d3336203d3e20323730333736.roa (hash: goyqg9XLzjSyt1Nj/jZlhroqHslipMCw33oUGSDwgcY=)
                          2: 9D24A534785E862FF2DAC70BF06847337A2816FB.crl (hash: xal7gDQ7TapaYDTN/M0rP7mD9ZHfunOP+ZwsZcKjieE=)
                          3: 3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa (hash: PwoUsAJev6eSGpJhH8r4RMVtPXYw4/MXxRpUUne9aoo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl
                          rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fd:6b:ae:3d:4f:56:9f:38:68:62:a3:03:9e:33:a8:ee:10:a7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D24A534785E862FF2DAC70BF06847337A2816FB
        Validity
            Not Before: Oct 20 16:12:00 2025 GMT
            Not After : Oct 21 19:28:00 2025 GMT
        Subject: CN=A7FF09BD92A8C09E0CAA32845F29E9D569C156D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:69:91:8e:90:e3:02:2a:47:1e:0b:9e:f0:
                    32:82:30:2c:ae:3f:8a:95:50:1a:e0:91:88:c9:8f:
                    13:1f:58:5f:0b:21:3a:c1:63:76:c0:75:63:17:1d:
                    c8:51:b5:d4:c3:74:70:9f:c4:d6:7f:1e:c9:f7:fa:
                    72:c4:6b:d4:92:9a:3f:02:e7:c1:93:a0:be:96:3f:
                    5f:44:4e:7b:d9:92:b9:33:d0:ec:ac:3d:b6:03:72:
                    b1:8b:b8:8e:14:b6:2e:3e:bd:a1:18:77:0d:62:2f:
                    45:0b:cd:9f:fd:bd:53:05:9c:ab:8e:8e:fd:e2:2a:
                    65:ae:3b:c6:52:c3:99:c1:a7:cb:52:25:7b:71:55:
                    48:fc:82:1c:b3:a1:7a:ac:e4:4a:85:dc:0b:d8:e9:
                    21:10:d7:fa:44:37:03:d9:49:66:1d:b9:31:f1:6e:
                    1d:73:03:1d:67:2a:a6:6d:ce:85:f0:f1:b0:1c:f3:
                    d2:8d:86:ae:10:fe:29:bb:5c:4e:f8:b2:b4:e8:55:
                    b6:99:d6:ca:a0:ec:a8:62:ec:e2:e2:c2:bb:44:4a:
                    b2:70:fd:b5:7d:f5:e3:7e:e6:ca:99:9f:40:5d:c2:
                    c7:08:77:d0:e1:db:5f:4b:e5:98:9f:f6:dc:13:68:
                    7e:75:49:67:16:d7:fc:9b:30:ab:9e:4c:82:ab:ba:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FF:09:BD:92:A8:C0:9E:0C:AA:32:84:5F:29:E9:D5:69:C1:56:D1
            X509v3 Authority Key Identifier:
                keyid:9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:f8:33:73:2d:d9:a6:81:9f:51:55:43:20:7a:90:97:fb:
         e9:18:b1:f6:47:10:f0:88:c0:fb:fc:c3:97:94:bb:ac:82:42:
         4a:1a:98:bd:f3:65:9e:96:06:50:17:01:76:e2:af:7d:a2:69:
         af:2e:97:8a:b1:44:da:63:1d:08:50:74:9c:0e:38:66:57:d8:
         41:b7:44:bb:af:0c:a7:40:09:ba:b2:5c:43:8b:37:21:09:07:
         13:db:5b:8e:2e:e1:1a:64:67:ba:ad:9f:a3:e8:1e:dd:36:0e:
         6c:aa:95:22:9a:98:26:89:00:ab:cb:f9:94:10:b2:a6:ef:6a:
         8d:4d:ca:5d:da:29:ea:d7:91:12:96:d3:11:d3:ca:91:41:f6:
         87:16:c7:c4:b2:74:9e:6d:92:db:2e:98:93:d7:4f:0e:35:9f:
         8d:c5:09:d5:e6:26:1d:97:91:0b:4a:05:ff:62:3c:a0:ee:a5:
         39:18:a5:27:f1:ff:5d:73:e4:22:90:27:38:dd:4d:95:ee:e1:
         48:c3:01:b5:7c:ca:c5:00:d5:c9:a4:d7:c1:94:f2:2f:fe:f8:
         e9:d9:59:e1:5c:17:05:3b:3d:29:00:7c:3d:5b:f5:f2:d7:cd:
         1f:ee:c0:92:5d:28:82:58:35:d0:0a:15:e6:f2:87:ab:cd:4f:
         18:88:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:16 2025 by rpki-client