Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
File:                     D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft (raw, json)
Hash identifier:          dg8X3asj0C90IXhbPQVG59IVbioF+IWF6qnola547K4=
Subject key identifier:   E5:31:0C:72:22:68:98:A9:3A:10:45:BA:EE:44:AA:7E:23:8C:8E:0F
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Certificate issuer:       /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial:       6E2BD2E507ED528A56422667F069C8919F3BE864
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
Manifest number:          02EE
Signing time:             Mon 20 Oct 2025 19:07:20 +0000
Manifest this update:     Mon 20 Oct 2025 19:02:20 +0000
Manifest next update:     Tue 21 Oct 2025 19:35:20 +0000
Files and hashes:         1: 323830343a356332383a3a2f33322d3438203d3e20323638383932.roa (hash: IE1zJNXn6RAOdArFw8Bsas97RLb4ASTXUHeSRlYevWo=)
                          2: 34352e3137352e38382e302f32322d3234203d3e20323638383932.roa (hash: w87/DuMMNL5quM7rpiLUGB40gEl0zQN0r0/6pjpOXBw=)
                          3: D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl (hash: 2R1l5uxdHQHhNb9HBJGcuNuj59RjRojyORhHUA+O4LM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
                          rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:d2:e5:07:ed:52:8a:56:42:26:67:f0:69:c8:91:9f:3b:e8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
        Validity
            Not Before: Oct 20 19:02:20 2025 GMT
            Not After : Oct 21 19:35:20 2025 GMT
        Subject: CN=E5310C72226898A93A1045BAEE44AA7E238C8E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:ef:bd:d8:b0:85:5f:ee:2b:40:52:ff:a3:
                    b7:30:b3:69:38:15:9c:55:c8:74:7b:62:f5:ba:2d:
                    61:e4:05:ed:f7:e1:d7:a2:6c:78:6f:e4:1a:1f:ee:
                    10:8c:38:dc:6a:fc:2f:fb:bf:a8:ed:8a:2d:5b:e9:
                    24:c0:a9:ce:08:4c:58:c5:af:58:d4:d3:a0:02:6d:
                    9b:37:78:09:6f:58:a1:08:c9:a5:bc:38:62:ec:d4:
                    77:f5:8a:4c:21:58:ef:cf:a7:38:be:79:fc:5e:8b:
                    29:9b:c3:d7:4b:1e:02:94:d6:ed:ac:6c:ca:9c:b3:
                    0d:19:cf:ed:e4:f9:73:4e:28:c4:ae:43:e3:f9:73:
                    d4:be:6f:03:5e:c9:23:a1:35:89:cd:ef:d8:1f:41:
                    09:a0:dd:db:08:fd:b8:90:1b:34:83:b5:11:4d:71:
                    62:9c:86:5e:bd:76:ea:5c:6d:00:2e:04:e9:7c:28:
                    9e:35:74:5f:46:2d:3b:64:16:d8:f1:39:57:94:ed:
                    31:9d:95:49:0e:a0:95:97:a7:16:4f:91:e0:8f:44:
                    b5:4f:b4:6f:9f:35:63:8f:73:d7:52:2c:f7:36:e3:
                    0d:ee:1c:13:b6:c9:af:45:10:0b:65:d9:96:b0:a9:
                    9a:55:29:73:ef:9c:be:d8:4d:33:7f:45:64:59:aa:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:31:0C:72:22:68:98:A9:3A:10:45:BA:EE:44:AA:7E:23:8C:8E:0F
            X509v3 Authority Key Identifier:
                keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8f:2e:6b:1e:94:ce:0b:ef:87:4d:d0:3a:fd:25:04:fd:d1:
         80:70:45:d8:fe:cf:79:42:df:85:9f:87:69:c6:f1:ae:1f:71:
         2f:bc:47:ec:69:b7:44:ef:a8:92:d2:6d:bd:7d:59:7c:af:d4:
         df:68:3d:84:4b:2d:54:a6:67:61:eb:70:54:5e:f1:fb:e9:3c:
         a7:4f:3e:83:ef:28:8e:ac:00:a0:2b:2e:5b:29:18:8e:0a:25:
         a8:c7:48:bc:e8:37:df:ee:1c:f7:56:33:3d:c8:73:a7:ee:57:
         0a:a7:69:32:37:d1:63:b5:68:e7:5f:b1:03:d3:19:87:e0:bd:
         81:2f:89:d2:dc:3d:4a:31:19:b1:04:d9:41:fe:ca:af:54:63:
         09:3c:d7:10:78:ba:ec:ae:19:8c:4f:26:b6:82:2e:6a:3a:88:
         d4:96:4a:79:e6:16:80:97:e2:3d:5b:f8:48:1a:65:48:d0:44:
         e5:54:5e:dd:bc:d6:86:66:e1:5d:8e:5a:9c:95:d6:87:2e:9d:
         4a:2b:d9:73:d4:16:9e:5a:f7:ce:3d:8b:85:2e:e5:56:64:55:
         5a:50:8b:c4:83:67:f6:18:34:7c:35:7c:24:89:5c:29:0f:d0:
         85:a9:88:33:b6:ef:ec:db:d8:87:fb:7f:bf:c9:c2:eb:6c:92:
         e3:88:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:39 2025 by rpki-client