Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
File:                     99075A5B6164230A73705A6E393D26CF802B45B4.mft (raw, json)
Hash identifier:          3BLyhlzyAqVnTpK8AUmzSHOYYfCn2ZbsFtge5RWDqbg=
Subject key identifier:   9E:F1:C3:70:BF:40:9D:47:76:3F:9F:2D:53:0E:70:E2:A1:0D:43:C7
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       7D3EA5AE1957A613A0F1ED164A436434C24C35F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
Manifest number:          0308
Signing time:             Sun 19 Oct 2025 20:07:09 +0000
Manifest this update:     Sun 19 Oct 2025 20:02:09 +0000
Manifest next update:     Mon 20 Oct 2025 20:30:09 +0000
Files and hashes:         1: 3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (hash: f9KWgO26AF5ltgZSdWEsRCma0z5Mv6UBxqMGaZ8mfTY=)
                          2: 323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa (hash: apxmS+Kfg1td3pUDRJrU3d+FMamvLKgAH5R6sDtk/GU=)
                          3: 99075A5B6164230A73705A6E393D26CF802B45B4.crl (hash: DFwOK3vkB3BSPrTJIDeLmhCTBd9DUMHRcqrBi0h9FaU=)
                          4: 3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (hash: TXXJnWe7prYX7PB4RPNGS69h/7+qBY39Ie8mPpWE9wM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3e:a5:ae:19:57:a6:13:a0:f1:ed:16:4a:43:64:34:c2:4c:35:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: Oct 19 20:02:09 2025 GMT
            Not After : Oct 20 20:30:09 2025 GMT
        Subject: CN=9EF1C370BF409D47763F9F2D530E70E2A10D43C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:f6:b1:91:78:02:1b:5f:25:d2:e8:7b:22:
                    ba:fe:64:f4:48:09:92:ce:6d:17:79:43:0f:e6:c5:
                    a9:09:ce:cc:99:e4:b2:fb:49:1f:bf:d8:5a:2d:67:
                    6e:22:0c:f9:61:7b:7b:30:21:07:0a:d5:9b:d3:0f:
                    d0:d5:3d:de:dd:7a:3d:f1:89:c6:ea:74:63:15:6e:
                    f6:de:26:e9:a6:39:7c:84:5a:3b:37:ca:ab:00:51:
                    c7:c3:b4:6d:0f:dd:32:c4:40:0f:5d:d9:76:2f:49:
                    45:5b:54:d0:66:3a:0b:12:73:53:9e:90:c8:2d:f6:
                    e3:bf:4b:b9:8d:73:52:58:80:a4:91:d9:9b:42:b5:
                    f8:1e:44:90:7d:79:c4:6f:91:97:25:5f:d5:bc:aa:
                    04:02:90:32:3b:94:9d:11:cb:68:16:cf:62:09:ee:
                    a3:87:24:5e:e2:bd:d4:fa:4c:13:5b:59:5c:43:41:
                    0e:5e:32:90:dc:88:30:e5:4c:53:b3:0c:4e:4a:ff:
                    4d:35:bc:1d:79:13:10:bf:af:eb:a3:54:05:76:78:
                    f7:f1:52:3e:0f:ca:15:ac:d6:62:05:c8:bb:6e:07:
                    20:99:19:21:c6:75:6a:67:d6:28:0d:db:7f:d7:04:
                    e8:64:9d:5c:24:e1:e2:59:56:80:cd:4f:6a:80:76:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F1:C3:70:BF:40:9D:47:76:3F:9F:2D:53:0E:70:E2:A1:0D:43:C7
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e2:b1:2b:77:8c:b4:16:d7:66:5e:17:f4:ca:2a:32:0e:ae:
         ae:09:71:21:f9:13:df:ad:4a:ea:4a:ec:18:18:85:ed:43:e7:
         a7:40:48:16:92:02:67:ee:78:99:4c:91:99:e5:d5:eb:78:98:
         5f:42:60:f3:fc:88:84:98:8d:be:70:5f:2a:0c:74:33:fc:e3:
         2a:c9:e0:07:4f:39:81:0d:02:09:bc:2c:d4:c2:31:12:f8:ef:
         76:4c:92:29:ae:ff:53:77:5e:f7:33:fe:0f:bd:eb:02:13:a0:
         24:69:b6:7b:14:5e:03:a1:77:88:84:7e:76:df:e3:1f:d2:af:
         6a:0f:d8:ac:1e:8a:67:36:57:fb:63:3e:c5:4d:22:18:78:5d:
         2d:c5:f2:6b:14:bd:0d:bb:48:18:07:21:27:f6:29:01:5b:f9:
         17:b4:d6:0d:f6:6f:fb:30:a9:d5:d2:47:fc:2c:57:42:26:5e:
         6e:84:50:1d:d3:b2:bc:0f:8c:29:8f:2b:5f:7c:bc:ba:89:2a:
         44:c3:8a:41:ce:7a:56:9d:65:4b:63:44:b7:bd:64:f4:eb:42:
         8c:70:74:46:19:b2:8b:cb:74:29:39:95:2e:24:20:fd:f4:70:
         49:5e:33:88:ea:34:01:6e:88:c4:79:e7:08:e6:ba:49:c2:ff:
         d1:49:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:47 2025 by rpki-client