Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
File:                     D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft (raw, json)
Hash identifier:          6D2Qyjua+a3KDe4dyy6jSbGBfkJjfqpv83ZI40ziPP4=
Subject key identifier:   61:6D:1A:6B:CF:DA:DF:80:90:35:93:69:6F:72:5C:62:E4:56:02:45
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       44044616B89D0AD4B8526853C1D1913729C70472
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
Manifest number:          75
Signing time:             Mon 20 Oct 2025 16:53:32 +0000
Manifest this update:     Mon 20 Oct 2025 16:48:32 +0000
Manifest next update:     Tue 21 Oct 2025 19:45:32 +0000
Files and hashes:         1: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: pCzDonosnG1M/FMYP6mGKnR9D//kOSapxlVj/nSW3nk=)
                          2: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=)
                          3: 34352e3138322e33342e302f32342d3234203d3e20323639323635.roa (hash: xOoERlEhSi9M48UCfsW4Jh3De+JMGZNiha1TchGUW94=)
                          4: D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl (hash: TmB72RwtqKXld3jKVjzv1HmNTNWFA4kDh1BCkjoKHpg=)
                          5: 34352e3138322e33322e302f32342d3234203d3e20323639323635.roa (hash: gDKF4Wwnv8nYlZMHxKheOOJRwPHFzRP2IDSa3GY2Mi4=)
                          6: 34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (hash: mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=)
                          7: 34352e3138322e33352e302f32342d3234203d3e20323639323635.roa (hash: mySaU6fwlINwOm8Fs2UnMlGXQ421idH9Xpz0cducaT4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:04:46:16:b8:9d:0a:d4:b8:52:68:53:c1:d1:91:37:29:c7:04:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Oct 20 16:48:32 2025 GMT
            Not After : Oct 21 19:45:32 2025 GMT
        Subject: CN=616D1A6BCFDADF80903593696F725C62E4560245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:ed:83:33:14:4e:28:7f:a0:18:fe:66:54:
                    7e:d3:8e:fa:59:7f:fd:b3:e8:ba:75:5f:3d:eb:4c:
                    eb:7e:2e:89:92:dd:4c:9e:a2:d9:f9:d4:88:18:f5:
                    38:57:17:16:92:59:48:8f:b0:f1:cf:47:ce:ba:e0:
                    4c:1d:7e:22:92:1d:b6:04:b7:80:a8:21:d3:d3:b3:
                    5d:ab:7f:e7:8c:f3:5a:3b:ab:c1:84:ff:ce:78:f0:
                    38:8a:2b:ee:c9:3a:8b:8e:39:12:7f:88:f0:49:4d:
                    89:88:de:5b:67:05:38:66:08:c3:20:ef:d7:70:d6:
                    3d:5f:07:c7:05:23:d5:63:d4:a6:0b:b8:ab:7b:2e:
                    5e:42:d4:ae:24:a5:f2:8f:2c:b7:95:4e:ea:a8:fd:
                    10:ca:51:3b:56:c8:96:59:64:cc:16:9f:f3:9a:c0:
                    d0:4e:3a:25:05:6e:92:88:23:f5:c0:94:50:68:d3:
                    a4:16:31:e2:9b:a4:a4:ad:54:c1:ff:38:d8:fc:d4:
                    29:83:50:c8:30:ee:ae:9d:e7:92:7b:b8:83:f0:02:
                    e8:3f:03:04:8b:22:30:1a:de:f9:60:3b:40:05:1e:
                    00:b4:ae:15:31:72:0c:69:ec:6f:05:ea:95:7a:39:
                    8a:6d:41:31:1d:ca:48:81:12:2f:dd:be:24:23:9d:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6D:1A:6B:CF:DA:DF:80:90:35:93:69:6F:72:5C:62:E4:56:02:45
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c3:2a:53:64:73:05:46:7f:57:c9:2b:71:8e:4d:32:09:22:
         a1:db:48:54:47:f9:1c:fa:62:7a:74:0c:63:62:8d:be:d7:df:
         50:47:47:10:39:55:72:7b:19:fe:57:5e:d8:be:51:e7:7c:7a:
         19:25:aa:b2:e0:36:7b:eb:7a:e9:97:7b:f8:36:6a:ad:6c:7c:
         5d:b5:4f:ff:89:f0:70:e6:e7:76:10:ab:11:04:ca:a5:41:d7:
         66:6e:8a:2c:1a:ec:5c:15:d8:ad:86:64:8c:8f:24:1e:a8:62:
         fd:5a:d3:99:ae:4e:29:83:23:e1:9f:13:ef:b6:ca:86:04:52:
         dc:e6:8c:c3:4c:2b:79:06:c5:e4:9a:8a:f2:6e:23:74:2b:90:
         58:6c:06:ca:d1:4e:ef:9a:81:83:88:7e:70:9b:65:fe:fe:8b:
         6c:d5:92:25:cd:fd:e8:35:68:a4:8e:dc:db:88:06:45:a3:9b:
         d4:6e:b4:81:59:89:73:29:30:86:1c:6b:f0:c6:9d:08:20:34:
         df:a7:07:70:e8:bc:da:24:79:e4:8d:09:92:90:0a:f8:8a:5d:
         4d:66:9e:8c:d5:4b:92:2f:ec:34:77:5e:52:f3:33:22:05:8b:
         a1:0c:86:cf:d8:0a:01:85:57:3b:b5:e0:19:92:02:bc:8a:18:
         05:3b:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:14:25 2025 by rpki-client