Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
File:                     DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json)
Hash identifier:          TuFtHKoKMGLudHXs16mBZ1oN9vEn2RsVz01wmlP75c8=
Subject key identifier:   32:45:AB:6C:1F:78:00:51:7E:07:C0:D4:08:10:42:58:FA:95:31:89
Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D
Certificate issuer:       /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
Certificate serial:       11C0B7E954FD64E8E409BAAD6721719B8CCC98E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
Manifest number:          010C
Signing time:             Mon 20 Oct 2025 03:02:08 +0000
Manifest this update:     Mon 20 Oct 2025 02:57:08 +0000
Manifest next update:     Tue 21 Oct 2025 04:38:08 +0000
Files and hashes:         1: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: V86kNco5ZHxMjKrWgLTi/qoHVEZvpbWtFOyczBdYZAU=)
                          2: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: EBy3rQwQ+8YvV1n0NbcOpSkf6ZX3JhodQDIQP6f8oCY=)
                          3: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: 0VGsrlANSpaB5diWPorD5Q8mnyPS8LVwg5gFddGGdok=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl
                          rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c0:b7:e9:54:fd:64:e8:e4:09:ba:ad:67:21:71:9b:8c:cc:98:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
        Validity
            Not Before: Oct 20 02:57:08 2025 GMT
            Not After : Oct 21 04:38:08 2025 GMT
        Subject: CN=3245AB6C1F7800517E07C0D408104258FA953189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:6e:f6:aa:f1:d9:95:a1:8e:d3:3d:12:c5:
                    b6:5a:20:d2:1f:50:37:60:7a:db:1d:bf:93:db:37:
                    d1:5e:1b:d3:80:8a:03:d6:c8:55:a4:29:b1:89:e4:
                    92:d7:f1:42:18:c6:83:c6:2c:c7:48:20:b2:1c:40:
                    57:ac:8a:a3:e0:f1:bc:2f:56:b8:5a:ec:dd:11:77:
                    c1:f8:06:6f:b8:ef:4d:45:0b:b6:4e:7c:b2:df:d1:
                    18:1f:55:da:f8:97:37:14:0e:15:1e:81:5c:ca:72:
                    59:84:48:38:71:21:e1:0f:fa:1c:dc:70:b8:95:81:
                    90:5f:f3:40:8d:c6:4f:a2:05:a7:84:96:d9:cb:40:
                    c5:ab:90:fb:3f:0f:53:72:8e:ff:5a:df:2e:9b:52:
                    fc:d6:23:38:ab:cf:1c:2c:49:b7:e8:4d:5f:4e:ae:
                    77:c9:68:07:d7:42:cf:c6:17:92:0b:53:a6:5f:8e:
                    b1:26:69:3a:db:1b:23:17:84:0b:69:94:e4:3c:da:
                    a6:ab:bb:7d:f8:bd:3b:fc:86:b9:6c:19:a2:00:44:
                    a7:34:e2:4b:b5:e6:7c:5f:fb:dc:74:8c:af:1a:91:
                    bf:07:3e:3b:a7:08:c9:01:8b:04:ad:9a:3f:85:45:
                    b7:d1:3c:f2:e7:ff:36:37:47:23:4e:5c:5e:4d:d1:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:AB:6C:1F:78:00:51:7E:07:C0:D4:08:10:42:58:FA:95:31:89
            X509v3 Authority Key Identifier:
                keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:71:85:13:8b:5e:c0:ed:8c:c6:ca:2b:66:ae:79:ec:66:a4:
         2c:ea:68:f7:f3:64:3e:06:9a:e2:c2:84:4a:4d:0c:8e:71:fa:
         18:d5:4a:0d:99:09:71:61:aa:df:49:46:e5:2d:79:5b:c3:c3:
         0d:37:d2:bc:a8:84:7e:6c:5e:b9:4f:39:c2:2c:53:a0:81:91:
         13:92:cc:12:d2:92:93:5a:e4:d4:10:57:8f:14:4c:9a:87:44:
         be:d3:84:69:ec:62:12:34:32:f9:56:34:38:b9:23:02:6d:1d:
         6b:e0:59:fd:31:93:3e:f0:d8:c4:73:36:a3:2e:29:6e:e3:60:
         71:97:2b:69:f7:33:9b:b9:ba:79:2b:fb:97:11:ba:93:61:3b:
         fc:d3:fb:ed:d5:42:f9:fa:e9:d1:5b:3b:3d:68:c9:4b:4f:35:
         4b:76:5f:4a:d3:58:fb:e6:99:79:e9:c0:73:09:23:be:15:5d:
         26:6b:59:a8:a2:2f:18:2c:f9:e4:30:7d:01:9a:a4:49:8b:95:
         20:90:fb:70:cd:1b:fd:38:ea:00:85:8c:04:7c:41:d3:92:56:
         50:3f:f2:f3:bf:eb:1b:ba:da:6d:10:9a:3e:80:c4:81:fe:ab:
         f2:e3:ed:2f:85:d4:29:ee:43:8b:0c:90:b7:de:55:f9:d6:e1:
         6b:83:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:56 2025 by rpki-client