Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
File:                     9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft (raw, json)
Hash identifier:          W7nz0PO0CRvSHVzkXOJMdzDq61MSJRoWMT0bwa3pGn4=
Subject key identifier:   3C:4B:6C:BB:01:AC:29:74:69:B8:D3:5D:E2:84:16:B7:C3:52:A3:19
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       7CE438179952FFC93E1E4936E15227ED3ACF19F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
Manifest number:          E4
Signing time:             Sun 19 Oct 2025 15:10:25 +0000
Manifest this update:     Sun 19 Oct 2025 15:05:25 +0000
Manifest next update:     Mon 20 Oct 2025 18:32:25 +0000
Files and hashes:         1: 3136382e302e39342e302f32342d3234203d3e20323635323331.roa (hash: 1qlhPXsbe2YqvzA3+1VrC0oc1BrSaTzO8dGHX3NX6iw=)
                          2: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl (hash: DLiCZHKtwbt1ltlUu5RmJgecu/Bh63nS/wJMW2qffkk=)
                          3: 3136382e302e39322e302f32332d3233203d3e20323635323331.roa (hash: dRH1WvpSwekmglWG3rDq1VTpWxYqnyPGTxeGGy/2bxM=)
                          4: 3136382e302e39322e302f32322d3232203d3e20323635323331.roa (hash: ZU9qJeLM9IJt8wNEyuuoMiWoz4PvdDcmyDLtRxf/I3Y=)
                          5: 3136382e302e39332e302f32342d3234203d3e20323635323331.roa (hash: m+x74TcCn/ocgyBc3RM05glLKi8fYIlFUhBKwpn4K2c=)
                          6: 3136382e302e39342e302f32332d3233203d3e20323635323331.roa (hash: boARMv+KextnY0lTD91sQDog/0RZ6aWlWkvUEJ9jy6M=)
                          7: 323830343a326361303a3a2f33322d3438203d3e20323635323331.roa (hash: NmLkvgmPWpP3+AIUgkQshTGCVh+ID6Htu2PNGa7de/0=)
                          8: 3136382e302e39352e302f32342d3234203d3e20323635323331.roa (hash: wQlYnivjl5FtxYxNCOs7C52xmlf9Le1Ei0u+ubyv6zQ=)
                          9: 3136382e302e39322e302f32342d3234203d3e20323635323331.roa (hash: F7tTFMg2I2nUQcrRSqdu9LIlpqNtaAYXjo2W8vgNxAA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 18:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e4:38:17:99:52:ff:c9:3e:1e:49:36:e1:52:27:ed:3a:cf:19:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: Oct 19 15:05:25 2025 GMT
            Not After : Oct 20 18:32:25 2025 GMT
        Subject: CN=3C4B6CBB01AC297469B8D35DE28416B7C352A319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:02:e5:49:6b:fb:18:ce:b2:7f:36:c6:c7:
                    b0:c5:05:b3:15:76:56:92:ca:40:8e:9f:7d:f5:5d:
                    ad:ee:ec:b1:ce:5c:de:11:d6:08:87:c3:52:56:bf:
                    75:45:fe:93:a0:0a:2b:42:ef:52:57:e5:a6:96:fd:
                    dd:70:3b:04:68:d4:d7:06:07:82:8b:fd:a4:55:59:
                    15:14:53:dd:cd:23:80:03:b2:c8:47:2b:53:87:22:
                    a0:9c:fa:77:ac:1d:92:64:9c:a3:2c:9f:04:28:74:
                    a3:69:1f:61:67:1d:12:b7:9e:97:66:b5:44:e8:98:
                    14:25:41:2d:21:57:86:47:7e:ee:b1:fb:51:15:7a:
                    66:7c:71:75:b8:3a:1a:66:69:b0:6f:ab:27:fa:f5:
                    3e:fd:41:79:f8:1b:04:b5:8a:1f:3d:80:c5:21:6d:
                    60:ab:14:b4:57:f8:5b:bf:37:ca:00:66:81:fe:78:
                    b1:11:d2:f3:c3:19:c1:c8:47:f4:f2:78:ee:eb:b2:
                    c6:53:8e:5a:2b:24:62:e9:e2:02:83:8e:e6:4b:ae:
                    68:3a:5a:48:63:99:bc:86:19:12:67:a1:28:51:6a:
                    6a:b1:f0:c9:7a:29:a6:ee:0e:74:ce:9e:d0:5d:43:
                    29:3c:d0:ff:9f:1d:5f:69:5a:1b:70:71:35:4f:5c:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:6C:BB:01:AC:29:74:69:B8:D3:5D:E2:84:16:B7:C3:52:A3:19
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:82:23:02:cf:77:68:26:17:aa:ff:ba:0f:9b:ab:ea:b4:
         6e:39:eb:2f:d6:9d:58:91:84:06:23:cb:d4:97:83:ba:56:33:
         23:0b:ed:23:03:de:78:e0:8c:b4:8f:6d:e0:a6:0f:e0:d2:e7:
         6a:0e:96:68:20:ef:c8:23:8e:d9:19:1b:f4:83:ec:25:0a:07:
         cb:2f:f6:81:27:8d:f3:38:d5:cc:a5:ce:f3:28:f5:4f:9f:1f:
         b4:04:7e:88:e2:1f:54:0a:c7:30:0c:fd:6d:e1:9e:6e:7a:05:
         97:a7:88:51:7e:b1:2b:3e:e9:b5:32:81:dc:89:55:03:72:50:
         0c:76:cd:23:33:92:76:e9:2c:bd:12:08:3d:f2:b4:b1:5b:43:
         d8:e7:40:2d:ac:c9:9c:ed:87:56:a9:3f:ee:4f:ba:3f:a5:77:
         e1:aa:9e:94:73:b8:20:71:3e:9a:0f:28:e0:ae:73:fc:41:2d:
         9a:e1:84:6e:bb:61:ca:63:33:07:65:8b:cc:ce:9e:ac:63:e8:
         b9:94:1e:75:72:82:dd:5d:09:cc:ac:35:5e:ef:14:8b:37:bb:
         0f:ae:f1:85:04:c9:b4:e4:bf:38:2a:61:bd:ad:6d:cd:4f:4a:
         a3:40:5d:53:89:5f:10:20:c0:8a:0c:c6:95:6a:b1:48:68:b4:
         ca:b6:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:50:47 2025 by rpki-client