Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
File:                     7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft (raw, json)
Hash identifier:          A0FGoFh3zCMXHd0I2NUyvlSZTtTwncVb2BkOYKTsBwg=
Subject key identifier:   AE:4A:C2:AD:0A:8F:40:00:46:F6:89:5D:E7:93:C6:4D:4D:E6:AC:36
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       111BAFE97EAE60770112824FC66A336E036C6D82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 06:50:00 +0000
Manifest this update:     Mon 20 Oct 2025 06:45:00 +0000
Manifest next update:     Tue 21 Oct 2025 07:25:00 +0000
Files and hashes:         1: 3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa (hash: 4bkZgKiQUw/bCtUNTcBVGW3qimlL8NES5CdU9BpOcmg=)
                          2: 3133382e39372e31362e302f32322d3234203d3e203532363034.roa (hash: ADJcyWrTUrSA2wIn1N23WaRSq+5BCusmLWHHlJv5llM=)
                          3: 7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl (hash: WwGIGnJXbGD4FLowIBLyHhb6tL61rpW3fYffYH1S6M4=)
                          4: 3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa (hash: bRNVOZwBRYHeRLOC9VFJrTZW20aV4eMBJ0UbBc7OJL4=)
                          5: 3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (hash: CDVybznQUICv+97JC1NTzuzJDlRwjzfxqO4x+j+8S9U=)
                          6: 3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa (hash: SdMfwOjgcA1R4Gwfzli7K9nzpPKqJk7EL6mIUoQaN1E=)
                          7: 323830343a6432383a3a2f33322d3430203d3e203532363034.roa (hash: kJjwIHnZZ2V959/qFZXoTKiDtanW1Nmeghj39L8sSQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1b:af:e9:7e:ae:60:77:01:12:82:4f:c6:6a:33:6e:03:6c:6d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Oct 20 06:45:00 2025 GMT
            Not After : Oct 21 07:25:00 2025 GMT
        Subject: CN=AE4AC2AD0A8F400046F6895DE793C64D4DE6AC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:6e:e7:7f:d8:b1:ce:cb:1b:2d:40:22:a3:
                    29:aa:08:10:00:34:34:df:6c:59:ba:d1:d0:fc:20:
                    65:c8:51:b8:bd:73:a2:67:3a:09:6f:3a:bd:2e:1f:
                    28:60:7d:9b:be:64:24:c5:ae:c4:98:15:ea:ad:fa:
                    07:cb:47:74:31:31:a7:27:5c:6d:de:81:40:75:bc:
                    18:9e:2a:b7:4f:a4:43:73:93:4a:2a:04:a6:cc:e7:
                    1e:e4:a8:b0:eb:d9:c4:50:ad:a1:05:23:38:82:5a:
                    16:fd:68:ab:7c:cb:f2:d2:61:70:48:74:57:b7:d7:
                    a5:cd:60:70:b8:80:2f:e8:e8:60:01:0c:27:90:f2:
                    9c:ee:6e:4d:50:61:f8:3d:2c:7c:ba:b5:dd:df:00:
                    ea:a5:8d:f1:56:1f:a9:f7:f4:8f:56:90:64:02:0e:
                    17:57:35:7b:a4:22:68:39:2f:e7:c0:a8:59:89:dc:
                    63:47:24:0d:74:8b:6e:84:a7:38:f9:bd:73:cf:d4:
                    19:b9:b8:04:dc:7c:cb:d1:44:06:58:0a:80:89:0d:
                    b7:51:88:42:e3:f0:9f:b4:bf:b5:82:c5:a8:4f:70:
                    d4:2c:bc:71:48:01:d1:85:35:46:79:69:d3:15:34:
                    f2:59:79:eb:19:35:75:ae:0b:87:55:34:ee:8b:ae:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:C2:AD:0A:8F:40:00:46:F6:89:5D:E7:93:C6:4D:4D:E6:AC:36
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:5b:72:8b:a5:dc:c6:cf:9c:72:2f:0b:7d:8f:2e:cb:b8:
         eb:b9:84:c1:e6:a6:24:c0:aa:6a:89:25:2f:a3:18:d0:3c:9f:
         11:38:6a:02:d7:37:3a:85:d2:de:d3:c5:c1:80:31:5c:30:cb:
         31:7c:64:06:74:ee:4d:ae:34:02:9d:b1:b0:df:b6:a8:d3:30:
         10:d2:34:b9:ab:db:f0:87:70:b2:4e:e0:6c:2e:1a:37:b1:f2:
         ec:c3:5a:61:bf:65:b3:7f:da:4b:a7:aa:fc:20:b2:a8:db:83:
         99:d5:8d:5a:8c:a0:5d:cf:69:17:41:e3:b7:50:8c:a6:1d:39:
         97:1b:2f:db:5e:b9:2f:2b:98:52:24:02:0e:05:d7:6a:ea:d9:
         08:ab:95:26:e3:a4:6c:09:a9:81:b4:5c:04:0e:0e:eb:ed:11:
         cf:cf:00:26:92:8e:41:de:48:74:ea:9c:67:a5:60:47:18:99:
         7f:5d:95:b5:fe:6d:05:70:57:5f:82:78:30:ff:2e:04:1d:6e:
         67:b7:82:2d:14:81:ff:1e:91:ff:03:11:bc:80:de:39:4b:a4:
         d2:de:1e:c5:5f:60:28:54:63:30:41:98:45:14:07:98:9e:a9:
         41:87:d1:d7:e3:4c:52:41:9b:73:e0:dd:7f:bc:c7:44:ed:d3:
         a1:2c:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:45 2025 by rpki-client