Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
File:                     E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft (raw, json)
Hash identifier:          7AKLVWgYfzgD5+7iv0rNfv9nNGBhm9RnwU4ghkGHPfM=
Subject key identifier:   94:83:D2:25:9C:7A:C5:79:A1:A0:D4:9A:00:47:CE:7F:73:98:05:C3
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       2D23A19A0EA3FE01B3B0B90203B0B557EEA0DDBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
Manifest number:          1D
Signing time:             Mon 20 Oct 2025 05:54:57 +0000
Manifest this update:     Mon 20 Oct 2025 05:49:57 +0000
Manifest next update:     Tue 21 Oct 2025 06:14:57 +0000
Files and hashes:         1: 3134332e3230322e3233322e302f32322d3332203d3e20323637303033.roa (hash: QInAZJHOKDo8IYE3bjn2eUM4bc8hiByZJFollhVPo+E=)
                          2: 3138372e34392e34382e302f32302d3332203d3e20323637303033.roa (hash: paEezRGTE1flBI5b/gN1D5Azq6i2fHuD9YMw3JQZdwE=)
                          3: E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl (hash: 8GY2T3FxFzQyrPjCRHKQy2rQuTtZ0d0cm5d+69uz9i8=)
                          4: 34352e3232352e3133362e302f32322d3332203d3e20323637303033.roa (hash: 6FczHtkx7T+NSuypo3Fmnb3I+gQoKA0rG1mPUpfm4BQ=)
                          5: 3138312e3139312e3139322e302f32322d3332203d3e20323637303033.roa (hash: HqWe8buUMSqbp3alWOkDGtGwT+ExAYh8P2CIBWIytIM=)
                          6: 34352e3137382e3132302e302f32322d3332203d3e20323637303033.roa (hash: YPyFEHlG/8hqiItGFIYqnaQQ3UrGwW5uXRiQ8cIo2Lo=)
                          7: 323830343a343661383a3a2f33322d313238203d3e20323637303033.roa (hash: o5a7RA1yY3vqJgpTqI6f/c1/6/ajxZ9bIZF62aHJWAU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:23:a1:9a:0e:a3:fe:01:b3:b0:b9:02:03:b0:b5:57:ee:a0:dd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Oct 20 05:49:57 2025 GMT
            Not After : Oct 21 06:14:57 2025 GMT
        Subject: CN=9483D2259C7AC579A1A0D49A0047CE7F739805C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:de:71:2b:63:c0:a4:64:4e:79:13:e0:43:
                    cd:8a:9a:73:cb:7c:4a:10:5a:21:1c:25:de:58:ec:
                    eb:2c:f3:74:61:9a:50:6e:bd:46:0a:61:7f:1b:41:
                    90:9f:a5:a7:72:e9:83:45:7e:8e:ea:ef:2e:3c:52:
                    10:2b:46:a8:f7:03:97:e0:22:96:08:41:48:14:94:
                    96:e4:97:1c:72:a6:f6:d1:15:b2:e6:7e:eb:03:12:
                    e1:52:6c:a2:9c:b6:9b:54:1c:46:46:d1:36:f9:11:
                    18:cc:d3:74:84:63:39:cd:2e:1c:05:da:58:48:35:
                    76:2d:85:02:de:c3:70:bc:ad:ae:00:d7:4b:cf:67:
                    c6:a8:b4:19:c0:ea:52:eb:e1:99:24:20:da:e6:23:
                    0d:b2:f9:e7:20:bb:3f:8b:27:d1:4d:69:8f:1e:15:
                    2a:e8:d1:68:c6:75:63:c1:39:fc:ca:8a:38:a7:f1:
                    a8:1e:2b:99:28:7b:e8:da:c1:c6:2f:e3:47:5c:bd:
                    99:40:de:a2:1e:5f:ea:dd:88:83:87:b5:94:7a:9d:
                    e6:2a:c6:15:09:ff:d1:1c:fc:40:50:6a:09:76:cb:
                    64:ac:93:f3:d2:ca:9c:cc:3c:09:ec:50:ba:b5:c6:
                    8c:b4:75:0d:65:55:c3:c6:ca:58:e7:98:d4:4f:25:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:D2:25:9C:7A:C5:79:A1:A0:D4:9A:00:47:CE:7F:73:98:05:C3
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:7a:d2:88:4f:10:1b:b5:47:ea:6b:a4:eb:ba:65:60:ff:
         44:ea:e8:11:73:a8:75:6c:18:73:dc:a5:8b:ba:28:91:0f:08:
         72:5b:2b:ac:b1:42:5a:9f:ef:e0:57:5f:73:cf:44:38:b4:bb:
         5c:3c:1e:b9:f4:ab:ec:c8:08:de:11:d5:8d:60:2b:62:3d:95:
         49:6e:49:cc:bd:b9:fc:9f:b0:bd:01:b6:2d:15:9f:2f:b1:0e:
         f8:24:b2:6d:e0:6a:34:28:3c:8f:1c:c4:2b:69:52:f2:b3:45:
         50:2f:6e:92:d0:52:13:00:f2:f3:35:37:4e:14:38:f1:c8:55:
         4c:6c:b4:65:72:23:dc:f2:9f:cc:eb:35:49:7c:b9:f9:9c:26:
         99:15:58:2e:cb:c6:75:9b:4a:3b:7f:f3:0d:a3:78:5c:15:01:
         ad:01:ce:6e:7a:e5:55:52:58:08:9a:30:67:93:dc:75:28:f7:
         e1:c3:1e:3f:7f:15:06:3e:83:a1:09:ae:72:b9:c8:2f:d3:9d:
         22:b7:2a:b2:b8:a6:9f:6c:39:0f:83:82:dc:7c:7b:70:a5:8c:
         3c:3e:66:60:85:21:89:f3:56:44:e3:dd:6b:e4:28:8a:e3:4b:
         4a:51:ca:8a:51:1a:22:97:29:0d:66:8a:40:20:d0:a6:a4:99:
         76:75:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:56:30 2025 by rpki-client