Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft
File:                     D70AEA1061F94850A8A9E906B852D2ED075B6932.mft (raw, json)
Hash identifier:          ipoip998Q8flXk4tv73AuoXFQtaghzx2vF2D91BrGk4=
Subject key identifier:   D4:E4:C2:21:5E:6A:45:63:50:77:40:12:F7:B1:A5:03:40:0F:65:DD
Authority key identifier: D7:0A:EA:10:61:F9:48:50:A8:A9:E9:06:B8:52:D2:ED:07:5B:69:32
Certificate issuer:       /CN=D70AEA1061F94850A8A9E906B852D2ED075B6932
Certificate serial:       40B36AE7697B993EB4A556EB590A727C2158F49C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70AEA1061F94850A8A9E906B852D2ED075B6932.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft
Manifest number:          AE
Signing time:             Sun 19 Oct 2025 20:48:46 +0000
Manifest this update:     Sun 19 Oct 2025 20:43:46 +0000
Manifest next update:     Tue 21 Oct 2025 00:47:46 +0000
Files and hashes:         1: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: 5snb+PpougjVMrUlOkfywVYYeOGnqJlwNH8u42ep6eI=)
                          2: D70AEA1061F94850A8A9E906B852D2ED075B6932.crl (hash: dth/qhfgzl+/hN7OudEWO4QGZR5Mj7u9ez6BKexub4U=)
                          3: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: 2tjv/nUH0etLPn8DX1CXEGYQqhDK/tYwjmI7W5ZDY/4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.crl
                          rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70AEA1061F94850A8A9E906B852D2ED075B6932.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b3:6a:e7:69:7b:99:3e:b4:a5:56:eb:59:0a:72:7c:21:58:f4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D70AEA1061F94850A8A9E906B852D2ED075B6932
        Validity
            Not Before: Oct 19 20:43:46 2025 GMT
            Not After : Oct 21 00:47:46 2025 GMT
        Subject: CN=D4E4C2215E6A456350774012F7B1A503400F65DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:23:fd:cd:7c:63:52:ce:3b:e8:f5:ad:81:
                    97:fc:7c:d7:aa:4f:c7:8b:e2:04:f6:29:9c:5c:8b:
                    2c:6d:a4:a3:e0:b7:e0:76:58:62:41:d5:94:1f:58:
                    2b:84:75:ae:f8:21:68:52:d0:04:f1:80:ed:ea:e8:
                    83:5e:03:3d:e9:82:af:38:5c:cd:a9:ed:d4:8c:c0:
                    84:c3:e0:89:58:40:78:22:3f:7a:81:4d:e2:a0:1d:
                    96:a2:70:f7:0d:bb:ba:c1:99:00:16:10:6f:23:23:
                    57:bb:e5:a4:cb:cd:4d:41:a6:e6:e9:33:4f:b7:c5:
                    72:e6:34:7b:33:13:1d:4a:c3:83:7f:c5:63:94:18:
                    5c:f6:3d:00:80:e0:7e:76:27:35:18:8f:91:ce:6e:
                    9b:45:46:41:2d:11:26:37:18:e7:bd:26:c2:98:94:
                    38:8c:49:f1:de:41:65:38:7a:8e:a4:77:6f:12:b2:
                    c2:3a:99:b5:44:32:ce:41:ef:5c:1b:06:45:ce:eb:
                    5e:7b:c8:84:67:c6:84:4d:cf:42:19:5f:d3:15:0c:
                    46:ba:67:cb:25:e0:80:94:31:8d:1b:26:43:5a:45:
                    29:a5:1d:18:31:d5:70:c6:89:66:2b:d8:fb:08:58:
                    77:75:41:18:7c:aa:50:62:38:eb:39:25:0a:d1:a1:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E4:C2:21:5E:6A:45:63:50:77:40:12:F7:B1:A5:03:40:0F:65:DD
            X509v3 Authority Key Identifier:
                keyid:D7:0A:EA:10:61:F9:48:50:A8:A9:E9:06:B8:52:D2:ED:07:5B:69:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70AEA1061F94850A8A9E906B852D2ED075B6932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:73:f9:91:0d:64:bb:2e:40:db:f4:f6:f4:45:17:f4:47:62:
         04:46:c6:d3:24:f3:04:49:ed:08:7c:0a:e0:1f:19:fc:bf:92:
         14:08:75:6b:84:19:dc:4a:42:99:29:22:7c:d2:0d:b0:26:63:
         d6:47:4e:9f:b5:3e:68:5e:f0:c6:b3:d2:1b:4a:90:21:b6:2b:
         15:70:cd:68:ca:44:3b:47:7c:d5:b7:e0:a7:19:ac:20:b6:04:
         97:bd:52:c1:05:d6:1c:30:ba:db:dd:b7:95:1d:4a:08:be:71:
         9c:e7:89:a9:46:cd:37:89:9b:f3:4a:23:c0:43:f8:66:c0:20:
         1b:52:5f:29:5d:b2:8f:90:d8:14:44:f6:a1:fd:b1:ad:73:88:
         e6:ad:5c:90:b6:c6:b5:a6:9d:b2:e1:05:83:25:3c:87:4c:dd:
         18:69:ed:ff:13:ac:31:9a:67:de:32:5d:02:72:0a:85:7c:71:
         9a:7d:09:70:34:b9:53:5b:31:f3:69:c1:86:f3:fe:04:77:9e:
         ba:e7:a9:ff:66:f7:bc:80:1c:e7:5d:27:f8:bf:d3:33:43:7d:
         76:4b:db:ef:bf:2e:65:e1:d1:33:0a:6f:ab:5b:21:bb:e5:50:
         ec:8f:be:73:05:67:3f:58:e3:c1:fe:08:db:ff:d2:90:e4:a7:
         69:34:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:36 2025 by rpki-client