Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft
File:                     9E4879406B65EF8221038D32E538827A3EECF4BA.mft (raw, json)
Hash identifier:          ZQu9DWRJIkDOhUbN9l/r7ZjZBEzloPfZEd4Q0JORMbQ=
Subject key identifier:   DC:CA:77:54:6E:35:CD:07:BF:99:45:15:D4:70:C8:D5:00:6D:9F:AD
Authority key identifier: 9E:48:79:40:6B:65:EF:82:21:03:8D:32:E5:38:82:7A:3E:EC:F4:BA
Certificate issuer:       /CN=9E4879406B65EF8221038D32E538827A3EECF4BA
Certificate serial:       2FFF35EA42A0733852238BDBC21FB2A19696C2B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft
Manifest number:          1D
Signing time:             Mon 20 Oct 2025 09:08:49 +0000
Manifest this update:     Mon 20 Oct 2025 09:03:49 +0000
Manifest next update:     Tue 21 Oct 2025 10:07:49 +0000
Files and hashes:         1: 9E4879406B65EF8221038D32E538827A3EECF4BA.crl (hash: 3Y4RI46H5It5K2QjKME6PRE1nW5q1byhVUhYU9KyYuE=)
                          2: 34352e3136372e34362e302f32332d3233203d3e20323638303530.roa (hash: vkcq7ewTfVMzG730cc6lY9sIXO3PP4Ac2fQO3ga1HOg=)
                          3: 34352e3136372e34342e302f32332d3233203d3e20323638303530.roa (hash: aNORjxhlTSUHtVXKZieQ8wfokZ/T0y04jgWrQ3Mv6dc=)
                          4: 34352e3136372e34342e302f32342d3234203d3e20323638303530.roa (hash: bMR89hrvvP8DXXQQoXsS2lNkIaUeLBjSaEJGV1P0brY=)
                          5: 34352e3136372e34342e302f32322d3232203d3e20323638303530.roa (hash: rrJ+t/uPzPVSo2fnqpoXZyOtw7S+kiE8d9qnvH8GwUw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.crl
                          rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ff:35:ea:42:a0:73:38:52:23:8b:db:c2:1f:b2:a1:96:96:c2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E4879406B65EF8221038D32E538827A3EECF4BA
        Validity
            Not Before: Oct 20 09:03:49 2025 GMT
            Not After : Oct 21 10:07:49 2025 GMT
        Subject: CN=DCCA77546E35CD07BF994515D470C8D5006D9FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:c8:5b:5b:d7:fc:c1:83:2c:ac:72:1f:74:
                    7d:7e:c4:87:a4:7e:4a:37:ce:a0:fa:0e:ba:97:2d:
                    ac:b2:3d:28:5e:10:1f:8e:fe:d8:11:52:e6:dd:c6:
                    82:12:8f:c8:75:eb:97:6a:c0:84:9c:40:23:b8:50:
                    62:d9:52:b1:50:44:b2:25:e4:c8:c8:fc:99:69:d8:
                    72:dc:4e:3c:e0:50:35:f4:63:84:72:2a:be:e9:df:
                    e8:35:07:d8:a6:cb:a4:83:79:43:2f:48:a1:00:54:
                    64:a5:0f:fc:bb:5a:5a:de:d0:d8:b4:4e:c1:1c:46:
                    0f:36:32:79:07:ef:4b:3d:58:bf:dd:d8:dd:e7:03:
                    af:c3:8d:68:24:d5:71:04:e2:74:36:dc:b4:c2:9b:
                    a4:8f:b5:c4:04:fa:39:da:6d:33:a6:01:37:1d:96:
                    6d:f0:f9:92:e3:bb:15:cb:3b:3c:80:79:46:66:29:
                    1c:45:f5:16:82:0c:b6:60:23:8f:82:ce:76:8b:b9:
                    a1:e9:d4:34:89:9c:93:b4:80:f2:3d:16:3e:e2:77:
                    58:c4:33:91:28:74:40:f9:e9:55:6f:5f:d2:f5:b6:
                    4a:c0:af:0b:75:4d:0d:ab:3f:7b:38:97:80:ab:64:
                    27:7d:ff:2e:a5:ae:f9:8c:62:1c:bc:4f:62:b2:b4:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CA:77:54:6E:35:CD:07:BF:99:45:15:D4:70:C8:D5:00:6D:9F:AD
            X509v3 Authority Key Identifier:
                keyid:9E:48:79:40:6B:65:EF:82:21:03:8D:32:E5:38:82:7A:3E:EC:F4:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:b2:7c:f1:b2:d5:13:c6:a9:f4:8a:7a:27:3e:e4:4b:07:
         4f:ec:bf:f9:34:47:d3:3f:0b:a7:39:d8:53:e0:b2:08:93:a3:
         3b:27:ee:a9:d6:a5:df:2e:e8:f0:3f:9f:79:91:d1:16:71:ad:
         fa:d3:52:e6:d0:3e:29:7a:a7:8b:81:88:10:0e:05:53:c2:63:
         58:a0:56:9d:f2:88:b0:d1:a2:22:03:93:f4:90:09:f1:30:17:
         f8:94:ca:95:71:4b:db:f3:34:46:ba:6b:36:4d:83:af:3a:e9:
         99:21:64:2c:df:4e:e9:c3:38:e2:f5:21:dd:89:40:10:ba:c3:
         5f:5d:a5:fb:7c:a2:35:05:cf:d7:2d:75:f0:8b:50:1f:38:28:
         32:1f:bb:b5:88:f4:83:39:9e:cc:a6:86:35:e3:84:86:85:c6:
         9c:23:ea:96:14:ba:49:d7:4e:b6:9a:72:59:82:59:e4:e1:9e:
         65:11:58:4e:66:aa:bb:fa:4f:fc:a0:7b:8a:ee:27:12:9f:cf:
         82:2a:64:c4:52:e8:9a:1b:42:37:1d:b9:78:88:6d:d9:cb:b2:
         f7:b6:aa:80:18:fe:9d:97:98:c2:2b:53:c1:a7:d8:dd:0b:79:
         90:78:b7:10:eb:42:5e:02:65:77:8c:5e:d3:32:f5:40:c5:5c:
         03:83:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:21 2025 by rpki-client