Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
File:                     DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json)
Hash identifier:          hwZUejsLCdaoYLxlDBD8JuZGl4+O24rpQWd3xRtpr6w=
Subject key identifier:   77:76:96:7B:0A:AA:57:19:3F:B7:5F:75:46:05:36:04:11:DD:7F:9A
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Certificate issuer:       /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial:       63281B3D100B24F621D25F6D972EDB99505F19E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
Manifest number:          02E3
Signing time:             Mon 20 Oct 2025 01:35:17 +0000
Manifest this update:     Mon 20 Oct 2025 01:30:17 +0000
Manifest next update:     Tue 21 Oct 2025 02:03:17 +0000
Files and hashes:         1: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=)
                          2: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: OgpcU82X8AVlESiz9atu/DbW4v0AwV9BE31viz8XpDA=)
                          3: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:1b:3d:10:0b:24:f6:21:d2:5f:6d:97:2e:db:99:50:5f:19:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
        Validity
            Not Before: Oct 20 01:30:17 2025 GMT
            Not After : Oct 21 02:03:17 2025 GMT
        Subject: CN=7776967B0AAA57193FB75F754605360411DD7F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:6a:3f:8c:1b:af:9a:4e:b2:cb:fc:75:b2:
                    be:8e:6b:4d:3f:9c:01:99:a6:f6:80:e7:ae:8c:98:
                    53:a9:83:ed:59:77:75:25:8f:ec:4a:95:5f:94:a5:
                    27:4a:c6:d5:c8:1c:f3:a0:46:8e:f4:30:5e:e1:57:
                    fa:74:2f:40:75:d9:a6:b8:8f:3b:49:06:92:d8:5f:
                    16:9c:6d:2a:1c:ac:b2:d0:f0:0d:20:44:6b:b9:cb:
                    d9:c4:2e:19:0e:44:1e:99:85:a9:71:51:50:f1:b3:
                    e2:a6:e8:a1:ce:27:95:5a:b0:c7:18:0e:08:5c:f0:
                    98:cc:10:bc:4c:90:1c:e5:de:e4:57:95:3e:42:d8:
                    f3:60:7e:da:3a:3d:90:8b:e1:4e:f9:f0:75:e4:1a:
                    a0:31:5d:98:47:69:f2:1e:61:c3:77:02:1c:d9:ff:
                    26:9c:6f:93:9e:94:bc:b9:a2:0d:44:e5:20:06:d0:
                    8f:a8:83:d7:77:28:ef:f2:6f:4c:ba:a3:b6:b1:4f:
                    36:ab:a6:a6:4f:0c:fa:ce:09:66:90:fc:2a:bd:d1:
                    20:f1:24:7d:a0:df:c3:2a:fe:9a:77:1b:2e:21:9c:
                    a8:5b:fa:e3:a1:09:3e:78:f4:38:86:ab:71:11:90:
                    25:f1:72:23:ea:50:96:94:d1:00:5e:04:48:9d:1c:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:76:96:7B:0A:AA:57:19:3F:B7:5F:75:46:05:36:04:11:DD:7F:9A
            X509v3 Authority Key Identifier:
                keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:20:ec:40:2e:c4:0e:08:f0:ab:8f:f4:d4:90:38:c8:d3:16:
         96:45:f4:b6:77:14:3d:45:93:92:5a:b4:63:77:59:50:31:8e:
         01:52:76:30:c4:1d:8c:86:87:5a:a5:1c:d4:05:fa:68:34:ff:
         e4:dc:19:58:10:6b:ba:24:f0:5a:a9:8b:26:b2:19:08:9d:45:
         55:12:10:cd:f6:d1:4e:76:c7:ea:03:61:42:24:db:7a:a5:85:
         36:90:0b:66:73:66:34:dc:3c:36:33:61:83:7f:d4:2e:a7:76:
         17:3d:37:5d:44:36:20:74:96:08:c3:65:eb:e8:b4:ae:ab:55:
         83:57:d1:6a:8d:58:bf:eb:4c:db:7b:71:c6:56:34:8e:61:72:
         26:ce:55:2b:b0:a7:9a:40:e9:7a:77:96:e0:a1:75:da:35:ed:
         b3:cb:a0:1a:57:13:82:57:86:3d:c0:cb:0d:7e:c3:c8:8a:3f:
         eb:67:6c:76:fa:d2:d8:99:e1:1f:82:d5:7a:8a:9b:d6:42:a5:
         3d:4a:7f:51:cc:01:e7:6f:ea:01:80:de:eb:93:34:fe:c0:37:
         1a:4f:93:9f:24:1e:8b:27:cf:92:79:ad:a1:c2:d6:c4:ef:ee:
         2c:54:6b:2e:e7:e2:5d:42:71:21:3c:b5:56:aa:f3:05:28:1d:
         fd:12:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:47 2025 by rpki-client