Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
File:                     421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json)
Hash identifier:          3+FmFSeg6xwFqYr1J0bzxx8cnnb8FrSVFrh3YBdWCbE=
Subject key identifier:   05:61:8D:46:CE:8E:F4:4D:02:ED:D5:57:B3:0F:EC:66:3A:29:E9:8E
Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
Certificate issuer:       /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Certificate serial:       7FB19B534130CDEA514C9075AE5B56C4BA784F09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
Manifest number:          0127
Signing time:             Sun 19 Oct 2025 20:45:47 +0000
Manifest this update:     Sun 19 Oct 2025 20:40:47 +0000
Manifest next update:     Mon 20 Oct 2025 20:46:47 +0000
Files and hashes:         1: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: lUaWnM4Kjr2fUAzDzA+tipRBz7FOXjh0MYMTHMTTp/Y=)
                          2: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
                          rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b1:9b:53:41:30:cd:ea:51:4c:90:75:ae:5b:56:c4:ba:78:4f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
        Validity
            Not Before: Oct 19 20:40:47 2025 GMT
            Not After : Oct 20 20:46:47 2025 GMT
        Subject: CN=05618D46CE8EF44D02EDD557B30FEC663A29E98E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:a7:68:5f:5f:77:96:eb:4c:20:2d:d3:15:
                    23:72:09:f0:55:a4:58:b2:4f:17:2b:2f:57:0c:32:
                    57:89:63:e2:ae:2d:da:39:06:c3:6b:45:e9:18:d6:
                    5b:00:19:b0:c8:2e:6f:f4:b7:74:49:5f:d7:7f:06:
                    2d:6f:57:78:3d:95:8b:86:bf:9d:93:b5:ce:45:d3:
                    c2:4d:f5:aa:c5:4e:59:39:02:e3:9d:74:f5:5b:1b:
                    8c:e6:67:eb:a8:dc:37:bf:03:70:c6:7d:07:be:50:
                    ae:30:f2:b7:ba:6b:47:8a:3a:16:28:3b:b5:5d:0c:
                    78:8a:36:60:05:cc:eb:48:a9:8b:6e:f7:be:15:74:
                    1a:08:09:39:d1:d4:e0:0c:c3:a7:b4:36:37:30:69:
                    e8:63:dd:ea:51:b3:e0:23:68:1a:a0:5d:a7:8d:59:
                    ba:2b:a0:7c:57:72:c6:34:42:a4:da:9a:2b:48:0f:
                    4f:17:97:8c:8f:03:38:65:4a:ff:68:2f:ec:09:0e:
                    36:6d:d8:f9:8f:60:b2:a1:dd:c5:23:43:3c:58:4b:
                    3f:15:45:38:99:1c:c2:79:1b:a7:0b:07:4e:e0:6a:
                    25:f7:d9:5e:4b:3d:1f:ee:a9:cd:46:5f:ca:b0:92:
                    0e:79:99:80:ef:04:de:44:59:50:6b:bc:f8:c9:9d:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:61:8D:46:CE:8E:F4:4D:02:ED:D5:57:B3:0F:EC:66:3A:29:E9:8E
            X509v3 Authority Key Identifier:
                keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:71:5c:85:9a:fa:3a:38:de:b3:ac:28:d4:b4:46:93:d4:
         8d:35:95:be:34:0c:f6:74:ac:83:5c:27:c2:d9:a0:0d:e3:8f:
         41:69:6c:3a:7f:26:86:12:11:41:87:9a:af:32:d6:f5:fd:34:
         42:4f:d8:b8:fb:8b:a6:9b:39:eb:dd:65:4a:2b:51:e3:78:1a:
         f6:af:9f:19:91:4b:7b:9a:69:ab:95:6c:b5:b4:b9:72:5b:3a:
         fb:7d:af:8b:3f:a7:da:18:46:af:92:e1:bc:02:20:2a:3c:3c:
         15:5d:a5:6b:ad:d2:a4:2c:0c:f1:1c:ad:bd:af:9b:f4:fd:b1:
         33:90:e9:a3:c0:06:b6:a8:76:3d:14:d4:30:5f:1d:87:23:01:
         25:03:44:18:da:ae:38:d6:72:a0:aa:4d:9c:a7:d9:eb:b7:b2:
         05:02:dd:c1:61:0f:55:28:28:9b:b6:e6:6e:87:e4:22:6e:6b:
         05:99:02:a3:08:67:e8:e7:80:b9:14:a0:0f:4b:c5:26:8d:3e:
         35:e1:17:a3:7a:4b:c6:fd:c4:78:77:91:21:14:be:ae:fe:e0:
         e9:1d:29:80:5c:01:c0:c7:5a:af:1b:e1:06:94:d1:12:b7:f0:
         fd:29:0e:ac:64:90:dd:9d:85:67:3d:37:8e:a6:a7:2f:27:5d:
         e4:10:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:29 2025 by rpki-client