Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
File:                     EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft (raw, json)
Hash identifier:          BcMHno61itTduXWrxlX19GC++CTZ6+GcDmxtVNcJ51w=
Subject key identifier:   D3:30:99:F4:09:70:F8:1B:DB:94:3B:BA:A7:C3:E7:92:61:9E:00:06
Authority key identifier: EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6
Certificate issuer:       /CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
Certificate serial:       2C9998F3B9FFA10B91100864F63229606D915F22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
Manifest number:          0151
Signing time:             Mon 20 Oct 2025 11:01:04 +0000
Manifest this update:     Mon 20 Oct 2025 10:56:04 +0000
Manifest next update:     Tue 21 Oct 2025 11:36:04 +0000
Files and hashes:         1: 323830343a363362303a3a2f33322d313238203d3e20323639333737.roa (hash: /7XnMicGdZhyziJLgRBhQq7LzcxL6fL5TVn/spvS4Mk=)
                          2: EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl (hash: ZZ0rKreZbpJ841laIMw2CpllyMPK2ZbML2IYe7c4VOU=)
                          3: 34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa (hash: VYOKYWTW4KYHyjWxZPNuftL4qjJ4ZSOyhDAXEVVS9P8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl
                          rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:99:98:f3:b9:ff:a1:0b:91:10:08:64:f6:32:29:60:6d:91:5f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
        Validity
            Not Before: Oct 20 10:56:04 2025 GMT
            Not After : Oct 21 11:36:04 2025 GMT
        Subject: CN=D33099F40970F81BDB943BBAA7C3E792619E0006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:05:fb:45:1c:f9:3e:6e:b2:b2:db:ff:71:
                    31:f2:2c:dc:49:93:81:46:1b:df:19:a0:f5:cb:0b:
                    6e:67:b1:19:75:aa:3b:75:36:c2:db:18:e6:56:b8:
                    42:be:b3:b4:81:4c:71:ff:a1:01:bf:01:ac:2e:ac:
                    69:bd:29:4d:66:a8:ae:31:33:7e:fb:2d:32:af:0c:
                    d1:17:35:f6:2c:67:d9:03:b3:bb:ea:c7:df:85:c6:
                    41:36:4a:24:bf:58:a1:8a:1a:62:c2:fc:fd:9f:7b:
                    35:45:a5:c3:0d:78:72:7e:8b:e1:5a:57:e3:2d:3a:
                    71:5f:04:4b:4d:58:c3:bf:47:49:da:01:59:bc:b1:
                    6d:69:6c:3d:c9:0b:8a:85:4f:e6:b0:ae:c3:a7:c2:
                    74:01:05:1b:44:15:83:34:50:63:d7:05:bd:b8:71:
                    f2:52:59:65:1a:96:cb:d7:58:b4:9c:27:04:8f:1b:
                    d9:f1:d2:bc:d7:2c:9b:d6:77:72:7d:9a:ff:06:b2:
                    c2:78:06:6e:be:35:43:e0:1b:df:c4:1a:09:fd:84:
                    20:86:df:ba:55:06:1e:4d:cf:f6:c6:c3:c8:6e:b1:
                    64:07:7e:b2:5e:48:6f:8c:47:35:fa:18:99:0c:f1:
                    4b:31:b3:c8:e5:77:bc:9f:13:c7:b1:d2:9e:38:2c:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:30:99:F4:09:70:F8:1B:DB:94:3B:BA:A7:C3:E7:92:61:9E:00:06
            X509v3 Authority Key Identifier:
                keyid:EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:13:9d:6a:30:05:e1:98:7c:72:dc:4d:45:6a:24:8b:32:
         ef:43:fc:ea:8e:97:46:d9:70:2e:a7:4e:04:66:58:91:13:84:
         1e:38:81:79:32:b7:9f:a9:4f:1b:8a:9c:32:8b:f5:0d:9a:7b:
         a4:30:97:79:95:b8:b8:39:4a:53:60:5b:9d:dd:2c:49:ba:f5:
         b7:0a:7a:90:49:37:0a:d4:60:08:6f:09:55:ed:fc:47:68:e0:
         0f:6c:fa:e4:cb:e5:91:3a:22:39:f0:53:43:30:ed:42:49:50:
         11:e8:f4:18:85:34:3d:ee:91:6d:60:6a:52:58:30:93:03:26:
         23:85:55:09:99:3d:b7:70:ce:14:cb:af:55:e0:1e:81:a9:d6:
         c6:7d:53:88:cc:3d:a0:0e:35:d4:bb:95:52:e4:5d:90:7e:91:
         0b:48:a0:8d:6a:b7:ce:d2:cc:ab:91:ae:b3:28:22:f3:e3:be:
         e2:9d:22:77:a5:b8:33:9e:8e:65:9f:61:5a:20:d8:4e:b2:2b:
         45:11:8a:e6:38:36:38:f4:72:67:cb:2c:c2:a2:25:8d:29:35:
         64:3d:6f:cd:5f:4d:20:5b:b4:e9:e5:b5:c5:d8:f0:2f:8a:c6:
         ce:34:b8:3a:f6:f5:ee:be:9e:3c:09:a2:b5:24:8c:5d:03:c4:
         c0:1d:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:05 2025 by rpki-client