Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft
File:                     01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft (raw, json)
Hash identifier:          WYcKuq9urO8sGw4ycNOAFuUVnWO5lIMNZ0WK/CiLOBU=
Subject key identifier:   D1:01:BB:F5:53:B6:2B:2D:04:C7:6F:26:95:38:1D:A5:49:9E:9F:37
Authority key identifier: 01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2
Certificate issuer:       /CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
Certificate serial:       214B5ABFB3E464BC1FBD003B8A80E198C3B91E49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft
Manifest number:          02EF
Signing time:             Mon 20 Oct 2025 10:44:32 +0000
Manifest this update:     Mon 20 Oct 2025 10:39:32 +0000
Manifest next update:     Tue 21 Oct 2025 13:08:32 +0000
Files and hashes:         1: 3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa (hash: oGLigczFTLXuThM0F8nW2MnLg1DEISackrG60iDFbkQ=)
                          2: 323830343a313434383a3a2f33322d3334203d3e20323633333234.roa (hash: IdJz6+vbswjg1cJ8PW+Gsp8Vqx2xM44mRodSuApQcto=)
                          3: 01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl (hash: xxX6wug6qplmywXwzFKJUXKqJah7YaPEPsICr6mD0Qs=)
                          4: 3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa (hash: QUqL7EegktpJWCZsO1trp0a9I++41+ShMilIMn0eHRU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl
                          rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4b:5a:bf:b3:e4:64:bc:1f:bd:00:3b:8a:80:e1:98:c3:b9:1e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
        Validity
            Not Before: Oct 20 10:39:32 2025 GMT
            Not After : Oct 21 13:08:32 2025 GMT
        Subject: CN=D101BBF553B62B2D04C76F2695381DA5499E9F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:65:12:b4:8a:38:3f:12:6b:4d:14:ef:0d:
                    ff:3d:c7:b3:78:e2:42:5a:80:f4:d7:dd:5e:db:f4:
                    a6:0a:c9:36:33:1f:43:2f:84:c9:39:74:7c:bb:ec:
                    bf:09:a4:e4:6c:60:51:38:15:7d:01:04:9f:5b:04:
                    7f:19:6b:df:4a:3e:47:a1:e4:28:18:af:1b:31:35:
                    d0:72:d4:c3:b1:aa:f3:44:49:98:60:45:ad:60:d6:
                    f6:63:86:38:69:e1:05:3a:d1:25:a9:d6:b8:2e:79:
                    3e:e5:4e:79:46:e6:9a:54:3b:f4:8a:fd:e8:9f:61:
                    c9:fa:95:95:2e:3c:89:8c:60:03:74:c5:42:70:a4:
                    ae:bc:65:fc:8a:7c:0b:39:14:f0:0f:da:79:24:1e:
                    87:7c:d5:dd:5d:ad:3a:9f:5d:4b:be:42:8b:31:e8:
                    0a:da:66:00:ff:21:2c:6b:e3:17:f8:16:2b:fd:56:
                    93:32:b9:75:a4:25:aa:b4:9a:e4:ba:41:5d:35:11:
                    a9:7b:29:09:ae:5a:00:03:b0:ee:c7:9b:c7:e9:c8:
                    71:1c:9f:24:02:d4:60:6e:53:4f:a9:b7:9f:f5:56:
                    76:af:62:35:37:bf:5a:de:5c:db:fa:9b:9f:ae:d4:
                    e1:cb:82:64:7a:d4:6e:57:a1:9e:02:86:de:45:0e:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:BB:F5:53:B6:2B:2D:04:C7:6F:26:95:38:1D:A5:49:9E:9F:37
            X509v3 Authority Key Identifier:
                keyid:01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b2:0c:3d:98:84:1f:ba:c1:bb:ec:54:0e:0e:5d:ac:95:96:
         43:c2:f8:81:02:ea:d6:99:aa:99:97:79:50:77:3a:5d:fd:66:
         09:c7:c9:df:d0:ad:b9:14:e0:1f:59:e0:44:97:d4:c2:00:6f:
         d7:1e:b5:28:0f:28:5b:f9:83:62:ac:58:53:ba:7d:11:3e:ba:
         90:14:e1:82:f1:dd:44:55:b4:d9:28:ed:39:fe:c3:7c:ee:68:
         6a:49:b7:17:4a:85:76:9d:18:68:37:ca:50:21:70:0e:fa:0e:
         f5:05:bc:e4:12:a2:b1:2a:1a:1c:91:a5:08:ec:50:7a:ab:08:
         d0:f2:25:69:30:8d:52:60:91:1a:dd:89:1b:f1:89:bb:c5:01:
         d3:20:f8:1b:f8:e1:9a:cb:f8:7f:b9:d1:4b:db:cc:b0:4a:fe:
         d8:db:ba:89:37:65:07:09:f6:d1:44:fa:3f:51:b4:5b:34:9e:
         9b:b0:ba:ee:2c:bf:47:f8:64:4e:01:59:05:d8:08:97:6a:9d:
         e8:ed:ca:ca:be:1c:4f:70:de:97:bc:91:64:cd:04:c4:76:6e:
         e4:30:ac:19:06:b0:6c:42:da:f5:c7:63:e7:bb:cf:3b:d4:17:
         6a:8b:d3:80:c1:a4:69:bb:5d:96:1e:46:72:e0:14:9a:42:27:
         34:d9:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:14 2025 by rpki-client