Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
File:                     24C0BF59215339684BA80028158EEDE0FD534D91.mft (raw, json)
Hash identifier:          3xASVSOXcaF3zUMIZt1u+21E/JUdRvqNPnIJY+2TIfw=
Subject key identifier:   CA:A9:74:CC:21:D3:26:11:68:15:F1:3A:14:B0:B6:FD:20:AA:5B:AC
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       4B93BBC844BB783B187827DDA1A3BB631B0661FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
Manifest number:          0166
Signing time:             Mon 20 Oct 2025 20:20:54 +0000
Manifest this update:     Mon 20 Oct 2025 20:15:54 +0000
Manifest next update:     Tue 21 Oct 2025 23:54:54 +0000
Files and hashes:         1: 323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (hash: PVq+hF7vsW69/LZUNpWq+A3qzKDzP7Q3cU3sANu0X9Q=)
                          2: 24C0BF59215339684BA80028158EEDE0FD534D91.crl (hash: A7Cl2brPXmxJfbGub2kM2ODutsrDav+CbV8rzJzoA0s=)
                          3: 3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (hash: IbbwJfvVHD7NWuSEOlKiZedgV+CkNrEUse8OowGtH+M=)
                          4: 3138372e39342e31322e302f32322d3232203d3e20323730353737.roa (hash: f0A0SW8C/83W4VceZCY58OSq5wvSOi5qTCw783wE0J8=)
                          5: 3138372e39342e31342e302f32342d3234203d3e20323730353737.roa (hash: eBYm42+1W1fGcFwuZmXMRlKyQCOL5aYpZefRvtpQWhA=)
                          6: 3138372e39342e31352e302f32342d3234203d3e20323730353737.roa (hash: b0tQygd01X8y9cU9NeVEUawK0KgmCDr/R/oGSGB9r3U=)
                          7: 3138372e39342e31322e302f32342d3234203d3e20323730353737.roa (hash: b67cK4a/rsVCTeyWhTLwvGRtbmz+Hxq6t70ISE4OC5U=)
                          8: 3138372e39342e31322e302f32332d3233203d3e20323730353737.roa (hash: Mzm6LEaGyjjyqpnZ6FeNic1af8TjOs4d2L3eGTSkHGI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:93:bb:c8:44:bb:78:3b:18:78:27:dd:a1:a3:bb:63:1b:06:61:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Oct 20 20:15:54 2025 GMT
            Not After : Oct 21 23:54:54 2025 GMT
        Subject: CN=CAA974CC21D326116815F13A14B0B6FD20AA5BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:14:fa:94:82:6b:5c:39:b3:ff:13:8c:ba:
                    18:d9:0e:11:a6:2d:89:f3:1e:3c:4c:12:ed:f3:a0:
                    e5:a3:ac:a1:b1:7a:c9:d4:a8:e5:30:66:a7:0f:cc:
                    a3:d2:57:37:b1:75:4d:48:ca:66:d8:21:93:6b:98:
                    ae:32:3d:99:95:65:4a:70:81:ce:51:29:b2:7d:d0:
                    5b:82:32:3d:5b:fc:47:f3:2a:f9:54:2f:c6:8b:b6:
                    99:f2:0d:c3:e4:70:65:23:5d:d0:af:4f:a1:ce:89:
                    b7:6e:f7:6c:db:9f:59:c0:a7:95:dc:fb:07:2a:e5:
                    29:d4:0d:41:b8:29:7e:1b:f4:f1:4a:dd:b8:56:57:
                    fe:c4:f4:26:ec:3a:06:b1:e9:a4:68:58:19:d2:a2:
                    ef:56:3d:40:7c:33:4b:b0:56:1e:50:3e:f8:c5:09:
                    06:5c:aa:46:6c:31:09:ca:0f:39:3c:f4:27:fc:31:
                    38:9c:dd:1f:1a:10:4e:7d:cc:1d:09:b3:20:db:33:
                    06:e7:9f:9c:05:c5:cd:59:ef:79:fe:c6:38:bb:8d:
                    08:84:bc:bc:f6:79:ec:c7:31:d9:c1:b5:31:d1:f4:
                    1b:ac:d3:e5:08:21:3a:79:ef:c1:a6:90:e2:5c:06:
                    38:6f:08:02:42:b7:d5:0e:84:1b:62:17:93:bd:fd:
                    f8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:74:CC:21:D3:26:11:68:15:F1:3A:14:B0:B6:FD:20:AA:5B:AC
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:32:5e:5d:1a:f9:a5:c0:fd:b0:a0:48:13:46:6d:95:2a:
         3d:39:78:ec:ef:7f:7a:e9:f4:6f:47:9e:40:9f:b8:74:0e:ea:
         41:77:dd:1a:16:e2:e9:58:98:35:07:cf:71:23:1a:2c:11:97:
         9b:fd:81:c0:5f:aa:32:f2:f4:40:77:f3:ae:b2:73:9a:34:16:
         fe:ff:75:5c:f3:04:db:ff:99:94:0e:5a:06:17:f5:87:a3:c4:
         d5:5d:8b:7d:03:a1:5e:49:1b:f5:c1:8f:36:92:f6:23:7e:9d:
         10:48:c0:0c:01:70:72:6f:69:61:48:3b:69:fa:a8:60:9a:75:
         79:0b:4c:1c:ad:ee:15:ab:2e:ec:e6:03:14:07:f2:12:93:ea:
         0a:ea:d1:2f:c1:1e:bb:c9:25:fc:0f:01:47:a4:93:29:6c:d0:
         07:3a:04:c5:62:19:45:63:4b:99:b2:21:d9:1c:a2:7c:96:2c:
         68:b2:4f:b2:9c:de:40:7e:bd:1b:55:ff:ba:d0:e8:e5:41:3c:
         35:18:ce:45:d0:fd:87:f0:ad:c8:55:62:26:8b:39:8a:d3:78:
         45:96:e9:c5:36:c5:ab:e8:89:0e:3c:d7:a1:94:1b:53:09:36:
         11:37:c6:f2:d1:d9:32:9a:21:b6:65:1c:b3:94:fc:9d:d2:a6:
         8f:c0:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:09:19 2025 by rpki-client