Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
File:                     89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft (raw, json)
Hash identifier:          Ui1kRBZdnHr2BSsrKBGxSIM0MtXArdgioxavs2c3efQ=
Subject key identifier:   D2:53:56:08:D0:C5:2B:5D:CC:0E:F3:58:D7:36:5A:4D:06:B4:7C:0E
Authority key identifier: 89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3
Certificate issuer:       /CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3
Certificate serial:       08693886353394E15B8C73041CF2B4015C15410E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
Manifest number:          0247
Signing time:             Mon 20 Oct 2025 17:43:24 +0000
Manifest this update:     Mon 20 Oct 2025 17:38:24 +0000
Manifest next update:     Tue 21 Oct 2025 20:18:24 +0000
Files and hashes:         1: 89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl (hash: xgL2ykZ0CLFjqQSGe16ox+VRnzEaEtTXxNdQgJtES68=)
                          2: 323830343a343132303a3a2f33322d3438203d3e20323636303035.roa (hash: nV97SVNkRbxmRecxwSjjFv2+2auwsWvuzIfOnil1acc=)
                          3: 3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa (hash: EsP4rJuhkvpcUehCNgBteatlRFZDM/gl+dekoYRZ47w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl
                          rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:38:86:35:33:94:e1:5b:8c:73:04:1c:f2:b4:01:5c:15:41:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3
        Validity
            Not Before: Oct 20 17:38:24 2025 GMT
            Not After : Oct 21 20:18:24 2025 GMT
        Subject: CN=D2535608D0C52B5DCC0EF358D7365A4D06B47C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:71:0c:14:44:6f:c5:07:66:43:ea:23:1b:
                    e0:cf:f6:77:73:04:d9:66:9d:81:8d:ae:cb:87:c9:
                    9d:eb:0f:83:1c:e8:1f:7a:c2:99:ae:ff:e1:8a:18:
                    48:3b:af:89:bd:f2:5a:1a:1f:b4:c5:07:0e:86:89:
                    f4:ee:fb:85:7a:53:5f:fa:39:ac:ea:b1:f2:ee:73:
                    8d:82:fd:83:34:46:27:fe:ca:29:42:79:fa:3a:c1:
                    6d:03:52:62:ae:eb:79:34:aa:4c:b3:96:30:c2:9f:
                    d9:2d:0a:04:63:5b:5c:8d:2b:38:dd:81:71:30:6e:
                    5e:06:b0:37:de:3f:88:01:a8:e0:2a:6d:4c:1b:d9:
                    58:b4:a3:d6:5f:79:ba:6e:65:b9:bb:87:9a:58:93:
                    b5:12:2e:fd:a1:40:e0:cb:87:85:77:43:85:3c:30:
                    7a:50:15:14:a6:17:e8:bd:96:3f:61:21:46:21:cf:
                    81:92:6a:5c:9e:f4:f8:0e:2b:40:f5:6a:e4:9e:23:
                    22:5c:90:5e:0e:57:de:be:05:2f:c8:f2:5c:10:4f:
                    36:58:fc:3e:f7:f0:5b:68:31:a6:f9:b2:31:11:c4:
                    7d:5d:af:dd:c6:3e:16:45:29:51:3a:f3:30:a8:90:
                    0c:40:e4:21:31:47:6d:fd:46:ab:69:01:d5:e1:85:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:53:56:08:D0:C5:2B:5D:CC:0E:F3:58:D7:36:5A:4D:06:B4:7C:0E
            X509v3 Authority Key Identifier:
                keyid:89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:96:08:d4:99:fc:15:33:7c:f5:2c:f6:88:61:fb:0c:09:
         15:04:38:d0:02:c9:02:65:d0:ec:98:24:a2:72:6b:78:ac:50:
         d2:92:0d:7d:2d:f1:30:f4:cf:9a:3c:8f:72:63:fd:12:64:41:
         f5:20:99:b0:67:c6:a8:68:87:0d:3e:d5:d0:25:f4:52:40:e5:
         52:ee:22:86:de:0c:ac:df:ff:36:ea:ae:8c:79:87:30:5f:cd:
         94:98:66:da:29:72:0a:96:b6:03:ad:50:1e:5c:af:5e:e7:0f:
         b7:c2:dd:88:50:35:0f:61:ca:6b:12:4f:ae:61:ef:07:2e:1e:
         f2:37:33:a8:3d:df:2d:a5:b5:f0:85:1d:1c:dc:03:b5:8a:40:
         6c:36:73:ff:d8:31:0c:b4:0c:45:68:b3:a8:bb:a1:3d:a6:02:
         ac:e2:04:5e:4d:a0:2b:db:36:ba:4a:c6:63:39:08:0b:9d:5c:
         be:23:2c:ed:38:7f:a5:93:bd:84:44:e2:2e:ff:8f:e5:19:ec:
         c5:5e:c7:b2:46:b0:6f:40:f8:ab:49:e7:4b:e2:5d:cc:a3:1c:
         89:d9:ec:33:07:c6:09:06:67:b9:e4:36:26:a3:0f:9b:86:8c:
         61:37:b9:13:95:cd:17:1e:08:8e:85:a3:92:ce:06:48:a2:ce:
         e8:48:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:16:28 2025 by rpki-client