Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
File:                     DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft (raw, json)
Hash identifier:          bbxb/5RbWfa5jzyCP6Mm3JlBLA9O3ChKBETGWP4luKs=
Subject key identifier:   75:97:0A:FD:2F:7A:11:1E:1E:63:7F:6D:E7:69:11:67:63:19:10:DA
Authority key identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
Certificate issuer:       /CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
Certificate serial:       14BC128C8F34D8D0382AB951062A743CCE889084
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
Manifest number:          D3
Signing time:             Sun 19 Oct 2025 23:47:06 +0000
Manifest this update:     Sun 19 Oct 2025 23:42:06 +0000
Manifest next update:     Tue 21 Oct 2025 02:33:06 +0000
Files and hashes:         1: 323830343a333163633a3a2f33322d3334203d3e20323635303338.roa (hash: Hf5yARcahJxd2qwBIlcKhy0tIV/SIDbTzFn9LXhXI0Y=)
                          2: 3137302e3135302e3230302e302f32322d3234203d3e20323635303338.roa (hash: +2p9wnelJvyIdVwZ5qUKRl86p9f5kfdKUAcjXUn447w=)
                          3: DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl (hash: iRRIZZ4LE+mpJusdU8psEa8zrII3sSDJTQzNv0nx0M0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl
                          rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bc:12:8c:8f:34:d8:d0:38:2a:b9:51:06:2a:74:3c:ce:88:90:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
        Validity
            Not Before: Oct 19 23:42:06 2025 GMT
            Not After : Oct 21 02:33:06 2025 GMT
        Subject: CN=75970AFD2F7A111E1E637F6DE7691167631910DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:9a:97:b3:9d:f7:74:44:1f:eb:8c:01:40:
                    c2:ac:28:d3:74:40:e3:e6:bd:c4:43:fc:8d:c4:04:
                    d7:67:b0:54:8b:ce:b1:9f:5c:40:53:1d:ed:bd:ff:
                    f6:23:d6:0a:30:a3:5b:75:48:60:16:2d:81:a2:aa:
                    b4:89:c9:03:f8:f8:72:2b:fd:9d:b7:4a:c9:47:c4:
                    81:62:dc:7c:86:26:1d:d0:ff:79:de:9b:9a:75:e6:
                    e9:e9:15:7f:49:d3:a5:ec:db:94:28:37:5e:34:2d:
                    60:59:a0:48:32:cb:c1:54:a4:9c:df:be:8b:5d:a0:
                    6d:d2:9a:b4:0d:a3:56:66:ef:a2:19:3a:5a:cf:61:
                    fb:6c:1a:24:c2:18:d2:ab:e4:ab:b4:81:e2:00:fd:
                    83:bc:66:65:fe:c1:f1:83:7f:d1:69:21:0c:7d:ba:
                    ff:ef:67:57:59:20:e2:8c:f7:bf:cc:da:8b:bc:5e:
                    91:fa:cb:6e:e9:04:b2:66:2d:00:00:7b:57:d9:b6:
                    ad:b8:73:9b:20:29:37:ad:f7:15:be:8b:f2:b8:a2:
                    e5:4d:a6:fb:79:2b:4f:e7:a7:6a:65:e6:63:b5:77:
                    26:b8:35:97:57:13:89:28:e1:a4:dd:66:ad:05:00:
                    bb:38:a5:0c:94:d9:b2:18:46:2d:e4:f5:31:c0:4f:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:0A:FD:2F:7A:11:1E:1E:63:7F:6D:E7:69:11:67:63:19:10:DA
            X509v3 Authority Key Identifier:
                keyid:DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:d6:e8:68:26:55:e0:9f:dc:7f:59:ed:7e:df:12:aa:15:
         02:ce:2e:42:2d:24:5c:fa:a6:7d:61:6f:e2:33:8b:bf:65:13:
         72:97:74:8a:a0:6e:bf:e8:d9:e6:0f:c5:b7:a8:3a:d2:bf:a9:
         34:c7:3a:96:5a:2e:76:5e:20:87:dd:83:f5:7b:af:ac:71:a6:
         16:61:1d:40:e4:e9:61:86:5b:df:54:8b:00:f9:b9:19:c0:2f:
         d1:e7:54:90:5a:dd:c5:f0:54:87:9e:05:09:eb:d4:e0:6b:68:
         f3:11:e3:75:69:d6:e9:61:2a:35:ca:e8:77:66:8b:e8:b8:b5:
         3a:ab:b0:46:ce:f6:4b:d9:00:0f:cf:e3:e5:27:5f:1d:21:41:
         ce:a6:d7:b6:09:12:ae:a7:17:3a:8c:1d:c4:bc:06:7d:5f:70:
         94:be:b1:71:ad:f7:62:ee:a9:bf:2c:e6:12:74:e5:b8:58:75:
         59:2b:11:6b:95:e1:ff:41:7d:68:78:b7:90:81:d2:be:c0:6a:
         25:47:1a:2c:93:95:62:09:75:dd:1b:19:5f:c5:d0:0f:d1:8e:
         cd:78:e4:4e:f5:f1:e2:32:f2:fc:92:3a:29:0e:75:5e:6b:ec:
         9f:93:a3:be:22:69:c8:c8:8c:87:5e:1a:89:5e:c3:b4:4a:6e:
         90:aa:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:31 2025 by rpki-client