Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
File:                     E68D8AFF33E9846F7D024674CA13BD85A5518335.mft (raw, json)
Hash identifier:          Iveignrev/W8EUXCD2M4evLGVXjfy9yESHls9V1Cioc=
Subject key identifier:   40:4D:12:B4:54:9B:B1:FA:84:D0:59:AB:5A:42:27:1B:BA:FB:89:CF
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       5DFC8DD2A46BD9B927FDBD34E40F0FDB7D546892
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
Manifest number:          0352
Signing time:             Mon 20 Oct 2025 10:26:00 +0000
Manifest this update:     Mon 20 Oct 2025 10:21:00 +0000
Manifest next update:     Tue 21 Oct 2025 10:26:00 +0000
Files and hashes:         1: E68D8AFF33E9846F7D024674CA13BD85A5518335.crl (hash: vvjYc8xICmfjLYAnUSJRissAakPJGPN5OQQQyPNxAtk=)
                          2: 34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa (hash: 4N/M4ZNmQbfFiyso7RyW3aHjKy2xb+VYN7zXFoTswkA=)
                          3: 34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa (hash: 52COCVsma8UVfyGdCTKZSsunIh+qzMYoLeTSUel4ze0=)
                          4: 34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa (hash: 5mZVBCO7JgwDa1+b+morYIPpj10h4EfCTD8aya9CVDg=)
                          5: 34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa (hash: x3CxMQKlFj1q3YCTXJuzmPjWbBc3rImVUfAsY+vC5Ik=)
                          6: 34352e3137362e3234302e302f32342d3234203d3e20323638393630.roa (hash: HC6jA+9cew3hPn7lWtBGXSIfKdxpUWPV1GivdvQ8T1s=)
                          7: 34352e3137362e3234322e302f32342d3234203d3e20323638393630.roa (hash: +EPdHKoaiubPWflN8yv3uj4eido3sraKGYL0K6febaw=)
                          8: 34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa (hash: 6E3IxTwRKEbwepstOxKRYcTx9QBeRucKa9vu+j0PUiM=)
                          9: 323830343a356434303a3a2f33322d3334203d3e20323638393630.roa (hash: 1h8FK26WXFKDRiweeSBaiTBwqCnmw8PQL+aUFQFv4BA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fc:8d:d2:a4:6b:d9:b9:27:fd:bd:34:e4:0f:0f:db:7d:54:68:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Oct 20 10:21:00 2025 GMT
            Not After : Oct 27 10:26:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:6e:3d:d3:f7:92:66:34:ce:e7:f6:82:4c:
                    9c:e3:52:5d:1e:9e:84:01:c8:c8:11:8d:84:63:58:
                    7b:0b:9c:e8:fe:ac:a0:30:23:d1:33:8d:ba:63:c3:
                    e8:ee:c6:29:bc:a2:46:89:da:95:0e:fa:87:ec:13:
                    37:03:73:50:2b:49:48:a3:9e:5b:13:53:61:f0:19:
                    cf:94:fe:3e:8a:9a:1d:35:0e:e0:82:9a:e1:a1:35:
                    ac:5c:92:87:32:f9:63:28:a0:60:bb:b4:54:bd:6f:
                    4a:d7:07:a4:ef:35:d1:23:14:d3:70:7c:b2:f5:3b:
                    89:9a:02:2d:cb:04:2f:e7:04:c9:03:9d:c2:3c:ee:
                    6c:fd:7c:34:1b:46:29:b6:eb:70:db:50:6b:f4:bb:
                    ff:4b:97:3c:8e:60:2e:00:5d:7e:bc:da:af:da:da:
                    b6:b3:b7:b6:bd:ea:50:e7:d8:4c:ca:ee:6b:dd:68:
                    02:a4:c1:60:05:19:be:b3:4c:2d:ae:43:2f:e8:02:
                    7e:1a:a8:ce:dd:18:c6:69:01:02:f3:c5:77:8a:86:
                    a6:e7:66:d5:c8:b2:2f:98:d7:ea:51:60:b7:a9:41:
                    c1:28:4a:b4:f1:4d:ef:6e:09:ca:0b:e7:d4:27:bb:
                    8c:7c:06:cb:33:ed:86:59:06:95:5d:6a:18:9b:71:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:12:B4:54:9B:B1:FA:84:D0:59:AB:5A:42:27:1B:BA:FB:89:CF
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:46:1d:8c:62:70:48:4b:eb:5a:0b:71:60:10:b0:a1:85:3e:
         d4:10:ae:2d:e3:91:16:b8:96:c3:4e:07:97:5b:b5:20:db:2e:
         a0:2a:1a:1e:ba:da:ac:a4:a4:b3:76:7e:6d:6b:a6:e8:92:6b:
         9e:11:3a:d7:e9:ae:89:fc:36:da:cc:ee:66:00:b3:3d:54:30:
         82:20:4d:c0:26:98:9d:93:04:0e:80:5a:5d:23:78:ff:f7:da:
         d9:fc:e9:c6:50:a4:14:83:a9:ac:3c:d6:bb:fa:d6:fc:57:25:
         f4:b0:cd:6d:2c:26:c6:1a:5e:d1:9e:79:23:8f:62:82:a5:82:
         28:55:32:c4:57:62:c9:71:c4:e9:e9:69:a8:54:83:05:ea:7a:
         a8:1a:21:9d:c0:63:d2:8f:c1:dc:1f:55:b4:34:27:9d:53:bf:
         aa:32:6f:23:9d:e7:9f:41:8d:f5:6f:12:9d:c0:af:f0:e4:55:
         ed:3c:32:d2:3d:ab:2a:84:9c:51:ec:65:49:9a:83:36:31:aa:
         65:80:b7:6c:fc:6c:67:98:26:21:27:5f:a6:4e:e7:18:7c:5d:
         8e:3f:f2:24:64:e2:d9:35:6f:22:a4:96:88:57:58:9c:02:4c:
         51:ba:0c:a4:7f:1b:27:c4:e0:c5:e8:9d:ff:8c:79:17:bd:aa:
         65:17:27:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:50:52 2025 by rpki-client