Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
File:                     1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft (raw, json)
Hash identifier:          hlke9ddS5p+ZxbSVfbn42WGaiGJRT4+L8J4fW9Bg97o=
Subject key identifier:   E6:0F:79:B8:4B:AB:EA:9B:35:3D:AA:1A:42:96:9E:A1:07:6C:D4:A0
Authority key identifier: 1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF
Certificate issuer:       /CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
Certificate serial:       49032FF8145A1AC2289AC0F21549FAE7A95C5FF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
Manifest number:          0240
Signing time:             Mon 20 Oct 2025 13:16:28 +0000
Manifest this update:     Mon 20 Oct 2025 13:11:28 +0000
Manifest next update:     Tue 21 Oct 2025 17:00:28 +0000
Files and hashes:         1: 1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl (hash: iHjiF+5bIP7ZBrE8ErkvB3i01FU2YCct5YdWZpa0G7A=)
                          2: 323830343a366539303a3a2f33322d3332203d3e20323730363035.roa (hash: zw6UCq4MOPS2SDzuqoD0dsraoU4SV05cUlyk16FJOes=)
                          3: 3137372e3230302e3232382e302f32322d3332203d3e20323730363035.roa (hash: IFEckCwoB8Z55hrB0cIzDmwXqQiVlP3FQFUuZEzRuyE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl
                          rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:03:2f:f8:14:5a:1a:c2:28:9a:c0:f2:15:49:fa:e7:a9:5c:5f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
        Validity
            Not Before: Oct 20 13:11:28 2025 GMT
            Not After : Oct 21 17:00:28 2025 GMT
        Subject: CN=E60F79B84BABEA9B353DAA1A42969EA1076CD4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:5e:31:d0:c4:f8:f2:7e:91:be:84:f1:32:
                    c1:f0:f2:b6:65:7a:92:f6:c0:29:28:e1:8e:d7:8f:
                    b1:e7:f9:49:f9:a3:32:53:2b:27:53:f0:26:95:1e:
                    ea:39:8e:0f:99:b2:15:ea:6b:3a:3a:86:c2:44:e7:
                    08:18:fa:c5:72:89:c3:29:6a:4d:15:81:0d:10:79:
                    84:3f:de:44:27:aa:79:c1:55:e4:84:f5:10:d6:7f:
                    90:c7:5c:67:1c:cf:a3:47:96:1d:5a:23:fd:0e:3e:
                    5d:35:33:18:18:68:25:75:f2:76:60:6f:7b:b7:f0:
                    78:9d:6b:ea:f1:52:5e:92:90:5b:b5:36:45:7f:9b:
                    d5:6a:0a:a5:18:13:7d:e3:d6:59:7c:e8:3c:c4:ab:
                    ed:52:56:3c:61:5d:a2:a5:0c:99:dd:89:3d:ad:bd:
                    50:1b:38:2b:de:3c:e9:80:86:a4:30:a8:58:4f:97:
                    0d:a9:0c:ec:93:66:68:f3:b4:d8:26:7c:ef:4e:14:
                    9f:05:e3:3e:31:70:15:5c:68:b4:e9:48:6c:f6:df:
                    48:09:5c:d0:2e:51:85:fe:d0:5a:94:42:a5:56:9b:
                    ff:b2:66:57:f1:03:f4:38:2a:ce:5b:e8:7e:4e:f7:
                    67:0d:27:f3:b3:dc:ad:57:06:bb:10:76:3a:46:8e:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0F:79:B8:4B:AB:EA:9B:35:3D:AA:1A:42:96:9E:A1:07:6C:D4:A0
            X509v3 Authority Key Identifier:
                keyid:1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:63:8d:3f:2f:da:5c:d9:73:44:2d:92:2b:f1:5d:c7:36:
         b0:e4:bd:c7:da:6f:71:00:82:ea:db:52:f1:d9:3a:b7:ff:da:
         19:97:13:3d:04:9f:32:41:ef:da:38:62:f7:91:13:63:8c:c3:
         81:10:b8:a2:c7:0d:75:57:2d:f3:d4:41:b5:ed:54:8e:8a:9e:
         a3:4a:88:35:9a:c6:04:3a:c1:a0:42:9f:b1:ad:35:5c:ff:71:
         42:c4:22:d5:89:fc:5e:88:5f:32:8f:74:a8:ba:09:32:d1:2b:
         ee:b8:c8:0e:8a:96:58:f6:ad:11:37:e1:ca:fe:80:78:9f:44:
         22:7b:9e:36:e3:f2:6a:77:f2:cf:4f:01:c1:61:70:5f:e8:ba:
         54:28:1a:b2:0f:63:a7:06:b4:d8:4c:92:2e:0f:2e:69:cc:16:
         fa:71:d2:60:f6:8f:93:8f:84:3a:64:b2:25:14:0f:53:b6:9c:
         e1:5a:64:53:e9:fd:dc:8a:78:3d:82:9f:1d:26:ba:1d:fa:47:
         9f:38:99:ff:30:46:b8:7e:5b:f1:b1:54:a9:f1:6e:21:fd:d1:
         8c:6b:b5:5b:19:f5:43:3e:3c:56:2b:76:f8:d6:8a:7f:70:55:
         4e:e8:6c:b4:7b:c1:b3:1c:df:c2:3a:96:14:3a:d1:73:da:e0:
         43:a6:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:57 2025 by rpki-client