Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
File:                     624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft (raw, json)
Hash identifier:          X5D52v86BxorfMX4cfvqr73++AmVfIlsz0LZ6NU20oY=
Subject key identifier:   77:0F:8A:76:43:9F:1F:57:87:91:20:F9:A2:21:09:C2:B4:C9:6E:C9
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       675409AEDFEBEB6BBABEE8DFC0898CDCB1123EB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
Manifest number:          1D
Signing time:             Mon 20 Oct 2025 03:38:49 +0000
Manifest this update:     Mon 20 Oct 2025 03:33:49 +0000
Manifest next update:     Tue 21 Oct 2025 04:53:49 +0000
Files and hashes:         1: 624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl (hash: SUqwjKU7IQWIbPetEE235d032qGeYOjAc+GGohbVxtg=)
                          2: 3137372e3138342e3137362e302f32322d3232203d3e203532393233.roa (hash: u0Sm26O6dSQIkWEwWNzVH6cTzHBoxuAHd7V7mjor3vM=)
                          3: 3137372e3138342e3138382e302f32332d3233203d3e203532393233.roa (hash: TWHuYR9a22DnFMDFPjiGOD0mVPC2xZ1bvx2+YvRNKjw=)
                          4: 3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa (hash: 8ZFUoxLgSZ1DxrIPi+lxbHhqxY86uVD8wJvTxZNSkxc=)
                          5: 3137372e3138342e3139312e302f32342d3234203d3e203532393233.roa (hash: t9JuWBdF8ariGshz739nhMxR1KaZZ/nOk6B6uuvmtIU=)
                          6: 3137372e3138342e3138362e302f32332d3233203d3e203532393233.roa (hash: GOSa0WZJcEkjSIjAJl0VUUC/RrHL89Y3FsGcW0WuPt0=)
                          7: 3137372e3138342e3138342e302f32342d3234203d3e203532393233.roa (hash: YUTF7zsVzBErSWBhymJo/CSv9hP9jprAVej9OFoWHpA=)
                          8: 3137372e3138342e3138302e302f32342d3234203d3e203532393233.roa (hash: wfqXQBZkVckrhs9aLlBdM0VKK7cnWTFpqEEG9vNZXKE=)
                          9: 3137372e3138342e3138372e302f32342d3234203d3e203532393233.roa (hash: 0gdtCQnmcKIx4efrwczVva3KQgPI8Xg4VsRZItrz4YM=)
                          10: 3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa (hash: DkCiEKStfIHgO43kbu74AownWatynYXbVIvlhTlEHb0=)
                          11: 3137372e3138342e3138332e302f32342d3234203d3e203532393233.roa (hash: XxYvhV0Nxig+oz+bWXbMEe7YTY9r9oOnbM2o1AeUebA=)
                          12: 3137372e3138342e3138312e302f32342d3234203d3e203532393233.roa (hash: 8ouyOu5AlqqUp8kyJf415n6Iz+l4DoX0MRJdS3PNWuo=)
                          13: 3137372e3138342e3139302e302f32342d3234203d3e203532393233.roa (hash: aGH0GbzEzquqiWX2pe5Gubj3h0eFkZ0vN/npQBFfTmI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:54:09:ae:df:eb:eb:6b:ba:be:e8:df:c0:89:8c:dc:b1:12:3e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Oct 20 03:33:49 2025 GMT
            Not After : Oct 21 04:53:49 2025 GMT
        Subject: CN=770F8A76439F1F57879120F9A22109C2B4C96EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:9e:53:eb:94:1b:d5:b1:b4:6e:98:9a:9c:
                    17:96:7b:35:87:92:10:b8:89:b8:65:94:00:8d:c8:
                    2e:59:1d:9a:39:c4:85:30:98:51:3c:28:ee:e0:fa:
                    38:17:8c:bc:51:9d:b3:2f:37:3e:e8:34:a7:b7:28:
                    08:0a:3a:1e:d8:66:84:2a:dc:99:36:ed:7d:5c:b4:
                    6d:89:a9:94:e0:99:ac:83:8b:71:7b:4e:93:cf:2f:
                    d8:6a:0d:60:7f:88:8d:e7:ab:ee:94:00:99:5c:dc:
                    68:1d:e5:72:f0:24:94:a3:b3:97:49:44:37:ff:cb:
                    ed:17:b3:a0:75:1a:4a:c5:3f:7d:ef:ee:7e:1d:ca:
                    16:f0:8c:9e:27:0e:75:b7:f6:1e:f0:b7:b6:a7:03:
                    c9:2b:0b:0c:dc:e6:7f:2a:f5:db:f5:69:2b:d3:80:
                    69:fd:b5:85:1b:e9:4e:34:90:f3:4a:c7:13:31:4c:
                    aa:57:3c:35:7e:c6:14:17:65:2e:04:b4:4c:0e:3f:
                    07:68:05:21:8b:33:da:13:e5:58:4d:56:be:90:26:
                    3a:41:81:54:ae:d9:2a:0d:9b:1b:fb:fb:9a:15:e4:
                    7e:8b:d2:2c:81:dc:4b:50:c6:8a:ca:b2:16:08:c0:
                    c1:30:02:95:6a:58:c4:a4:5b:60:98:be:98:84:ae:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:8A:76:43:9F:1F:57:87:91:20:F9:A2:21:09:C2:B4:C9:6E:C9
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:08:0a:6a:bf:82:f9:31:60:32:4a:6e:c6:cb:8a:b4:af:57:
         0e:ad:82:34:79:41:1e:3b:f6:8b:bd:02:82:41:b7:45:28:eb:
         df:5c:87:8c:20:39:a8:5b:8f:3e:27:4b:87:32:08:fe:57:55:
         92:d5:ca:3d:ce:26:06:25:7a:c5:44:b0:db:f6:47:80:ee:6a:
         be:3f:22:8f:02:7b:dc:da:10:99:d8:90:12:ed:e7:54:94:ec:
         a5:52:b5:34:e5:d0:a1:f3:3e:83:35:47:69:a6:c6:e2:c0:9b:
         a1:88:79:67:46:75:7e:5c:c9:0d:12:36:1c:b1:63:6f:da:47:
         21:c0:b8:23:2a:b0:f8:61:9e:5b:e6:9c:14:dd:39:71:cd:ed:
         e6:65:1b:07:ff:68:79:03:57:c7:f2:e2:c7:7b:e5:9a:15:cb:
         cb:e0:b6:ac:fa:64:79:f8:59:22:29:9a:68:a9:49:56:02:31:
         52:63:1a:fa:fe:0d:27:80:78:ae:df:99:d4:34:56:bc:c7:4b:
         ef:79:ad:14:b5:06:1f:f8:b5:b6:d1:d2:25:79:72:e9:22:ba:
         40:45:19:b8:c6:41:f8:1a:06:eb:53:d6:01:cd:ae:f7:91:c4:
         02:43:02:73:18:1f:76:3b:a5:1b:29:1a:c7:c3:7f:56:4f:87:
         93:78:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:11:07 2025 by rpki-client