Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
File:                     C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft (raw, json)
Hash identifier:          fqJZ/F2kTdt+n9wavzrC+eKV7DfCNlQ5VzyjW7JmOp0=
Subject key identifier:   8D:39:64:08:B6:41:68:CE:BF:CF:04:6D:7E:8E:A2:E6:DD:18:18:31
Authority key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
Certificate issuer:       /CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Certificate serial:       1FCCED12355F7E52A5F0F96D8ED7787C4E5E66BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
Manifest number:          0221
Signing time:             Mon 20 Oct 2025 12:30:00 +0000
Manifest this update:     Mon 20 Oct 2025 12:25:00 +0000
Manifest next update:     Tue 21 Oct 2025 12:30:00 +0000
Files and hashes:         1: C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl (hash: QvTF5HM1yF/0MjSw4ZTWAziJZOhNW+XNMrWQa/3/W4o=)
                          2: 323830313a38313a38303a3a2f34382d3438203d3e20323734363637.roa (hash: 7wu5oiUK23LRH2Drnng0f/NEk4nvCBaEhZbICHa8ke0=)
                          3: 3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa (hash: Wa+7rbFzpB9MTRromlNAQCukB1dXttOnu1rdds7sowY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
                          rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cc:ed:12:35:5f:7e:52:a5:f0:f9:6d:8e:d7:78:7c:4e:5e:66:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
        Validity
            Not Before: Oct 20 12:25:00 2025 GMT
            Not After : Oct 21 12:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:3f:d8:12:cb:a9:a3:b3:1e:f1:e8:b6:0c:
                    4e:4f:4b:55:70:f0:d8:c2:25:ce:e1:5a:f6:08:1a:
                    d6:03:49:83:8f:e4:58:27:50:65:6c:61:12:60:c8:
                    a3:d7:99:1d:c2:d6:76:c3:fc:dc:c2:88:48:be:10:
                    5c:8b:c4:50:14:00:2d:42:6f:6a:32:9f:e6:ab:f6:
                    46:c2:74:ee:50:a1:15:ee:6a:90:eb:97:a3:72:77:
                    e6:a1:dc:ab:5e:7c:b4:93:66:67:51:66:a2:6a:a7:
                    cf:c8:3a:a0:35:44:a3:2b:5b:3f:56:68:f4:b0:ae:
                    2f:c9:a9:78:3b:1b:d7:be:77:75:85:3a:9f:45:07:
                    1a:0e:08:d9:9e:e8:45:6e:e8:a5:0e:43:8c:61:57:
                    d4:c0:50:91:82:6d:5d:3b:1a:4e:ff:84:0d:83:00:
                    57:2a:79:3b:f9:09:ab:93:4c:39:46:de:7a:2c:e7:
                    98:fe:09:35:3a:c8:38:6d:9c:95:e5:30:41:c9:16:
                    18:1e:4b:cb:b6:5f:46:56:e6:e4:6e:8f:5c:bb:6d:
                    fc:d1:57:9a:c6:fd:dd:e4:ad:2e:57:af:1a:48:ef:
                    99:0f:f3:05:47:36:ca:60:98:46:1d:01:a8:55:39:
                    ec:95:84:56:83:8a:4e:5e:6a:b8:bd:03:da:c7:3e:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:39:64:08:B6:41:68:CE:BF:CF:04:6D:7E:8E:A2:E6:DD:18:18:31
            X509v3 Authority Key Identifier:
                keyid:C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:0c:e3:09:86:c5:46:21:21:3c:fc:3d:d9:98:74:05:e4:
         4a:c8:28:34:34:ba:ed:98:6a:5c:94:44:d2:c4:a5:fd:71:23:
         2b:92:e6:4e:7b:2e:57:4e:60:a2:e4:77:11:53:0f:da:af:05:
         61:d2:eb:2a:bd:0f:6d:22:8f:68:63:02:59:fb:d8:d8:70:6b:
         ea:9e:c5:07:cc:bd:64:79:58:15:fe:5e:b4:04:58:ec:62:9c:
         cd:9b:4f:95:e8:fc:76:8e:51:15:c4:38:37:b3:22:ca:46:00:
         84:f7:07:36:c4:15:fb:44:20:fd:89:9d:ec:03:48:22:f5:51:
         00:c0:6b:6b:be:44:6f:a7:3e:dd:f7:9d:e6:d0:aa:c1:78:b8:
         df:86:58:57:b8:b7:62:e4:c6:d2:de:5c:ea:66:79:94:69:dd:
         13:aa:ab:5b:93:f7:f0:53:d7:22:be:ca:90:ff:fe:b3:e3:bc:
         41:61:63:a0:53:9d:45:e1:c3:5e:c0:86:e1:61:58:4b:ba:ee:
         23:98:97:15:87:57:6a:15:ac:30:4a:1a:a7:07:11:e5:d6:4c:
         59:19:40:88:3f:09:6d:fd:40:0c:2e:cc:6e:82:fc:3a:49:ee:
         e6:aa:dc:27:c1:dd:b0:b0:fe:ad:f5:ec:5b:2d:65:e2:f2:e9:
         b5:c2:22:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:56:58 2025 by rpki-client