Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft
File:                     77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft (raw, json)
Hash identifier:          v4XgjbwS1ysXromaMGd/OIimRhKgOnPtsk83HxSyJAM=
Subject key identifier:   5B:23:3D:4E:4F:32:2B:06:F3:4D:24:2F:87:A0:C1:9E:9E:DE:A5:27
Authority key identifier: 77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1
Certificate issuer:       /CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
Certificate serial:       22CC9235ED73DC773FB9EF5591C421CE7CE6F38E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft
Manifest number:          1C
Signing time:             Mon 20 Oct 2025 12:49:22 +0000
Manifest this update:     Mon 20 Oct 2025 12:44:22 +0000
Manifest next update:     Tue 21 Oct 2025 15:43:22 +0000
Files and hashes:         1: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (hash: rpQMLZb7BcLM7sA1WL+lf/Bek/hzUfkvH81sAwk/erA=)
                          2: 77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl (hash: FkcHRok42yDe1uaPsU76ldZQVJhPPyDd2GEY1zFbh8I=)
                          3: 323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (hash: Jgbac0riOJUgN7URLxriehRE7j3/ToQ4EHNWzUeccPs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl
                          rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cc:92:35:ed:73:dc:77:3f:b9:ef:55:91:c4:21:ce:7c:e6:f3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
        Validity
            Not Before: Oct 20 12:44:22 2025 GMT
            Not After : Oct 21 15:43:22 2025 GMT
        Subject: CN=5B233D4E4F322B06F34D242F87A0C19E9EDEA527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:ac:58:56:42:dc:24:60:d1:4b:7d:d1:8c:
                    1c:a5:ef:ec:e1:aa:5a:99:67:24:96:38:0c:6f:43:
                    26:20:44:f3:c3:20:d8:36:63:ff:ef:9e:d4:f0:dd:
                    79:2d:02:8f:3b:c9:e8:44:4c:ac:f3:7e:52:8f:1d:
                    12:35:2e:af:58:d2:66:bc:02:b3:dd:20:af:d4:2f:
                    2d:36:d9:4b:83:7a:38:70:ef:35:5e:a3:93:30:e3:
                    e8:50:04:9a:54:2d:ed:4f:dd:33:a8:79:e5:35:bd:
                    c2:b8:bd:f0:c2:25:8e:e5:ed:6e:3e:0c:b4:dc:70:
                    3a:19:93:9e:53:d7:96:94:ba:70:c6:cc:53:85:ab:
                    eb:0e:1a:2d:a7:5a:c2:24:6b:2c:3c:aa:4b:73:df:
                    a0:35:9a:86:fe:ce:1d:a8:df:45:01:81:a3:e3:1b:
                    3d:d4:33:c1:7b:96:ed:e0:c0:2c:5e:84:90:bf:61:
                    eb:bc:66:93:d2:d8:f1:82:97:f7:6e:c7:75:ee:9a:
                    d2:d7:9f:2c:f7:87:d9:c8:68:75:6d:26:af:54:77:
                    be:ec:a1:6d:a8:2c:01:bc:a5:a1:0f:b8:e4:50:1f:
                    4d:be:62:3d:60:9a:50:75:8e:52:c4:2d:6c:77:07:
                    5c:6e:4a:07:67:9f:f4:9d:04:3d:fd:13:ae:80:94:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:3D:4E:4F:32:2B:06:F3:4D:24:2F:87:A0:C1:9E:9E:DE:A5:27
            X509v3 Authority Key Identifier:
                keyid:77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:e2:5b:dc:b6:d2:8e:3a:4f:1f:30:b1:9f:0c:8c:3d:31:
         bc:c6:10:69:51:0f:98:21:f6:49:f0:3c:94:16:53:99:01:b8:
         7c:77:54:82:96:8e:e2:cc:2f:a8:f1:8b:2f:9d:7a:68:4f:15:
         05:e9:c6:d8:33:f7:4d:0b:b3:d5:61:74:aa:7d:b1:12:2e:c8:
         27:90:0d:e4:f1:69:42:9f:30:e7:3e:8b:68:f4:88:85:99:b5:
         ad:a8:39:be:11:66:b4:d2:14:9b:d4:4c:74:6e:96:b1:3a:82:
         e9:23:91:01:15:9e:d7:34:9d:e4:45:7f:81:9a:85:72:b3:81:
         a9:42:e4:d4:12:d7:ed:35:1e:74:1d:85:8c:fa:0d:bc:44:7c:
         a1:82:02:cb:f0:9c:42:ca:a7:f2:1e:15:e5:6a:a6:cb:bc:6d:
         0f:cc:ae:0d:e4:91:80:4e:93:dc:2f:a5:c1:86:70:94:a7:90:
         60:45:02:8f:e5:13:76:b2:c3:56:a6:2d:a6:98:6c:30:3b:22:
         00:c4:ee:b9:1e:4f:83:c2:dd:b9:77:44:86:ae:1f:f0:72:9b:
         dc:73:00:c3:b0:11:92:c3:cf:78:2f:38:67:2d:38:1a:e2:1d:
         24:ad:f7:87:5c:c9:49:ed:7a:b6:f2:bb:83:92:25:82:24:3e:
         c4:f7:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:57:07 2025 by rpki-client