Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
File:                     67B531125B42B4898E018F1D5F2837CCA874EB8B.mft (raw, json)
Hash identifier:          IFy6ucQf20YZumtJdvuEs0B/xACibpF+vLv/38pvkEk=
Subject key identifier:   25:6C:7A:53:9E:30:9E:C2:0E:60:77:77:06:E4:C2:69:BA:43:78:D5
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       02CF41FEAB1CD3372EA4C0B4A9A479112D306434
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 13:10:00 +0000
Manifest this update:     Mon 20 Oct 2025 13:05:00 +0000
Manifest next update:     Tue 21 Oct 2025 13:46:00 +0000
Files and hashes:         1: 323830343a373232383a3a2f33322d3332203d3e20323730383336.roa (hash: 120gjbBXx0yfQx1YOCTOC1yi9vUcqsmbY6nBhxoOhNc=)
                          2: 3138392e31342e3131352e302f32342d3234203d3e20323730383336.roa (hash: xghCQUhXITbXDDs6SCi4o0DY4DL4EzwaJn950+GP9dI=)
                          3: 3138392e31342e3131322e302f32322d3232203d3e20323730383336.roa (hash: O7VQtkUs30aloQdBOpIHte1IOcT1xIYkAe/ep3SJtLY=)
                          4: 3138392e31342e3131322e302f32342d3234203d3e20323730383336.roa (hash: sMnhJJUsbVO2KoBJ+ArWcapiCyElMHdlrAzMy6zzAW8=)
                          5: 323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa (hash: tUwbslxwj6JCvbbHKNRW3YVzxPb1RInrW+AFIFRBrk8=)
                          6: 3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa (hash: JnK4WLtFSwVBa7OOk9m/PvbCaROvtOUz02dMZ10SbVU=)
                          7: 323830343a373232383a3a2f33332d3333203d3e20323730383336.roa (hash: L5sXM8+AV76tvBkuzm/V8QmX0cIOyGfZg43Fmswwbyg=)
                          8: 3138392e31342e3131342e302f32332d3233203d3e20323730383336.roa (hash: oXwtQSEGri45ZCy0UB3ObQpdqfspsConbxznr/n2nwM=)
                          9: 3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa (hash: NlN7NLKjpV4UE1SJvxTxmzulOG/dqN1jnAoHA0vLvUU=)
                          10: 3138392e31342e3131322e302f32332d3233203d3e20323730383336.roa (hash: bUF5Q/lPgP+vDEAWXUAAXixRI78mX48Exw4z7Sb/iBw=)
                          11: 67B531125B42B4898E018F1D5F2837CCA874EB8B.crl (hash: +LhSmT7Yx3u6ULVPuqTtGEriTUk6xdQuwaSbniNZ7zY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cf:41:fe:ab:1c:d3:37:2e:a4:c0:b4:a9:a4:79:11:2d:30:64:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Oct 20 13:05:00 2025 GMT
            Not After : Oct 21 13:46:00 2025 GMT
        Subject: CN=256C7A539E309EC20E60777706E4C269BA4378D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:31:32:63:ac:ca:64:f9:48:04:48:3c:70:
                    4d:d6:d6:a5:99:6b:95:1e:8f:e7:e6:11:ec:b9:8c:
                    bd:c6:2e:2f:a7:02:70:9a:d3:4f:3d:05:a1:19:3e:
                    2d:24:f3:7e:b8:df:a0:5f:26:75:f0:1c:ee:e7:8f:
                    2c:44:79:d4:9b:ce:fd:ab:4f:fb:6b:4a:21:83:d4:
                    09:af:71:5d:2e:e0:60:d9:d5:6f:1b:3f:d3:55:a2:
                    ff:bc:5e:c3:f5:da:07:24:e2:d2:9e:c3:ac:0a:18:
                    70:79:20:91:02:fb:96:3b:36:9a:01:c3:84:a5:f9:
                    10:85:66:2f:0b:60:76:50:8b:1f:e6:3a:df:45:65:
                    4d:87:ba:82:ab:53:8a:7c:8c:4d:ff:81:dd:90:6c:
                    e3:ea:9f:88:bf:89:06:d4:bf:56:ae:27:cf:bc:0b:
                    9d:75:5b:2f:36:0f:3a:5d:dd:6e:7d:fd:fc:cc:80:
                    dc:fd:d5:84:86:34:fb:ab:6d:82:1c:ca:53:b3:d2:
                    46:a4:07:cf:9c:42:09:77:89:06:5a:2e:77:cb:41:
                    36:57:38:e0:27:0e:9b:1d:90:d8:56:d7:c9:72:d1:
                    f7:9d:a4:0a:fc:7a:d1:1e:52:f9:c7:fb:10:91:c4:
                    67:43:26:a1:11:be:be:3a:9b:09:d1:e2:8c:f8:fb:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:7A:53:9E:30:9E:C2:0E:60:77:77:06:E4:C2:69:BA:43:78:D5
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:ac:84:c1:d2:ee:29:57:f7:45:c5:eb:79:fb:0a:82:2b:
         26:68:fe:b0:86:83:5c:d8:6e:10:da:ea:82:20:d5:39:13:7d:
         20:2d:8f:fd:f4:b7:12:19:55:48:0f:d0:fc:44:dc:3b:ca:9a:
         a9:1c:3a:c0:29:d3:56:f3:b4:1f:81:30:5e:d2:8b:cd:23:1d:
         6b:53:9a:8f:8c:11:74:f9:f7:02:39:08:46:84:5e:25:1f:3a:
         4a:79:46:ee:d4:d2:17:80:60:3a:62:08:b2:8c:4c:33:7e:32:
         51:23:df:24:6a:46:a7:21:8b:e6:e9:2d:09:cf:84:68:78:83:
         45:43:12:03:ce:4c:ec:e0:38:86:83:41:82:51:61:9d:f7:90:
         44:e6:7f:f2:8e:59:48:c5:d5:af:1b:2c:5f:fe:db:08:c2:bc:
         f6:b1:78:5e:e0:3f:56:97:b3:a0:94:f3:5c:83:52:ad:a5:2a:
         1b:4c:fc:2c:35:b1:11:bc:6c:b7:74:d3:73:4c:d5:a2:d5:9d:
         10:c8:da:71:4c:74:74:1d:0d:db:b7:34:0c:18:fd:f8:24:59:
         7e:81:ca:a4:ca:c8:27:8c:f5:17:05:7d:15:d5:10:97:51:74:
         2b:39:e6:77:f2:79:10:21:31:d8:c8:8f:65:df:70:3a:b3:58:
         47:83:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:23 2025 by rpki-client