Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
File:                     57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft (raw, json)
Hash identifier:          /hP/GImIt4mk212lmov0jNUZF9SMwRrBEplWiZfHz+s=
Subject key identifier:   45:EC:B8:8F:83:D7:1C:F0:3B:31:D5:E0:88:E7:3C:57:74:9E:43:F5
Authority key identifier: 57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8
Certificate issuer:       /CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
Certificate serial:       5C62C9867657EA34904D8A46DDBB2F6F9C6D274D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
Manifest number:          02F7
Signing time:             Mon 20 Oct 2025 01:24:21 +0000
Manifest this update:     Mon 20 Oct 2025 01:19:21 +0000
Manifest next update:     Tue 21 Oct 2025 02:17:21 +0000
Files and hashes:         1: 3137372e3132342e3133342e302f32332d3234203d3e203238313333.roa (hash: VXZXx5MDjCUocYXdBumu7SvgLNibfOJ15PJjIGeIOF0=)
                          2: 3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa (hash: v7A59cNihVuoQ8xCnbIa1ITZ+P+AUUV0pKC0LhjQEnQ=)
                          3: 323830343a3334383a3a2f33322d3438203d3e203238313333.roa (hash: GLgJrOP1uIGgDwT+S1DeZCFHwRhmGbqjknuYkNxeykk=)
                          4: 3138372e34352e33322e302f32302d3234203d3e203238313333.roa (hash: H6FQM6oLIlnRm9VE1YWYabzhQWldfb9niywpmJyB5y4=)
                          5: 57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl (hash: r3M9dWLemDXHn5/QmQDxA1sDCWzfeWJ98un4ywpcKcQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl
                          rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:62:c9:86:76:57:ea:34:90:4d:8a:46:dd:bb:2f:6f:9c:6d:27:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
        Validity
            Not Before: Oct 20 01:19:21 2025 GMT
            Not After : Oct 21 02:17:21 2025 GMT
        Subject: CN=45ECB88F83D71CF03B31D5E088E73C57749E43F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:b3:38:98:59:a1:01:9a:70:06:7b:4a:c1:
                    77:17:05:51:bb:1c:73:77:5b:67:cb:77:18:35:ae:
                    35:62:8f:2c:e3:e8:43:21:5b:34:23:b2:46:8f:51:
                    ba:01:a2:6b:13:cd:e0:8b:53:f7:99:d0:bb:34:fc:
                    43:bc:c4:ae:6e:b7:5d:37:fc:3d:54:95:09:89:6e:
                    c0:f8:14:1f:5e:ce:9c:b2:77:32:78:0a:a3:5a:9a:
                    6c:01:ce:c1:1c:17:d0:9f:ba:1d:2b:c3:63:c6:e0:
                    f2:e1:84:6b:5b:30:d8:5b:15:2f:45:28:c1:a9:85:
                    ba:94:9e:c3:98:9f:9c:3e:4d:e0:76:50:9a:7c:89:
                    17:29:d2:0a:e8:b9:92:4d:52:57:2a:c4:50:50:0b:
                    15:df:2e:7b:d2:e8:6d:58:3d:d3:c5:37:46:98:e6:
                    39:2b:44:5a:88:68:08:ef:e1:84:c2:0c:65:b5:86:
                    1d:6a:c3:ab:c5:6c:0b:b2:f2:fd:37:76:a0:e0:af:
                    95:38:89:a0:92:69:1b:05:46:ed:57:70:1a:cb:9a:
                    47:ad:21:c1:0d:66:a7:0a:2c:e7:39:6f:49:2a:48:
                    2e:eb:d2:75:8a:eb:02:52:a6:db:26:78:74:6d:52:
                    58:02:f9:ef:77:76:69:36:8b:c1:b9:df:61:7b:e9:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EC:B8:8F:83:D7:1C:F0:3B:31:D5:E0:88:E7:3C:57:74:9E:43:F5
            X509v3 Authority Key Identifier:
                keyid:57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d5:e5:5f:90:f6:5d:bd:d9:7a:05:60:1d:64:0e:8b:8b:fd:
         1e:67:32:41:6e:8d:59:fc:d5:1b:12:d7:fe:eb:63:97:11:3c:
         5e:bc:ac:3f:6b:c0:94:ec:3a:01:7d:cd:b6:c8:ab:32:82:c6:
         86:fb:a0:f9:ac:2c:b8:52:b5:f1:e5:10:86:a2:08:49:78:16:
         38:3c:e2:e4:04:00:fd:0a:6a:6f:07:36:24:22:e0:87:c0:a2:
         2b:ba:1f:77:9e:3c:21:c1:c7:3d:05:39:47:c1:96:39:6a:3f:
         41:6a:af:1a:8d:41:34:f8:50:4a:d5:b4:5f:02:28:ad:fb:c2:
         66:05:47:69:d1:da:15:10:6a:0a:a3:94:c6:bd:55:20:2a:98:
         3d:85:c1:54:d6:e3:ea:e8:da:c2:fa:60:5a:69:ff:70:1c:e3:
         ef:4c:b1:fd:24:47:63:20:40:3e:01:fa:7a:c4:33:3f:89:16:
         92:e9:80:32:78:4b:05:10:d8:86:6b:c7:ca:13:0c:37:ba:74:
         b5:43:7f:de:1a:25:2b:d2:36:e5:1a:b7:56:4f:8f:ce:a0:9e:
         82:54:86:b5:be:fe:b6:5a:a4:05:9a:6e:49:0c:dc:54:8f:6b:
         fa:70:38:b8:75:a7:05:27:23:aa:f1:40:91:03:11:fa:03:ac:
         31:f3:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:46 2025 by rpki-client