Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
File:                     068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json)
Hash identifier:          TDrr0wySFWhoIg3l7R8klxqfHxA7ll/zlLTXM49eMRQ=
Subject key identifier:   E3:1F:59:1D:1F:E3:FB:AA:62:96:A9:E2:3C:FD:72:D2:ED:B0:7E:A1
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       3FEE1D39708BD58DDCD85F59F22D643817BD6B39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 00:55:35 +0000
Manifest this update:     Mon 20 Oct 2025 00:50:35 +0000
Manifest next update:     Tue 21 Oct 2025 01:16:35 +0000
Files and hashes:         1: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: HjjXC4rJXuijpDI27LoK72BavxivOpSsmqZ98QrCXgw=)
                          2: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: Bzk4dZzrNC2Jl6ZUDrTLxTfoojkN5yomvgAkgomW3v0=)
                          3: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: uQbx9J4xqOZ9ulDsiq8PH8RnyLqo6V/EHfZIYzuiAOU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ee:1d:39:70:8b:d5:8d:dc:d8:5f:59:f2:2d:64:38:17:bd:6b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: Oct 20 00:50:35 2025 GMT
            Not After : Oct 21 01:16:35 2025 GMT
        Subject: CN=E31F591D1FE3FBAA6296A9E23CFD72D2EDB07EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:8c:82:0d:9a:c3:fe:5b:18:9e:d5:51:4b:
                    7e:72:57:a2:cc:8f:1f:ea:e8:06:c2:4e:b0:a2:dd:
                    b0:e2:2e:04:87:92:4f:e0:9e:4f:31:46:6a:eb:ea:
                    b8:9f:d3:a0:ff:c3:dd:c0:b4:f1:7e:95:4a:32:86:
                    85:54:bd:65:77:3b:3e:80:17:cf:15:ed:38:56:b2:
                    b1:70:6c:ad:67:44:73:a8:93:fb:b2:b5:a7:f4:75:
                    c1:79:fe:90:52:1d:ae:6f:45:ed:bc:7d:ae:ac:29:
                    50:04:91:10:88:50:c8:c0:48:59:b1:53:49:e2:5d:
                    dd:bf:c8:b6:27:c3:98:11:5b:00:b2:3b:1b:ff:59:
                    a4:9e:6c:cd:54:bc:26:c1:1c:b3:16:94:28:fd:c1:
                    db:01:15:ef:81:e3:80:0e:8a:9e:47:75:23:c1:a3:
                    b5:09:d0:c0:d8:69:d6:3a:45:f9:6f:6c:42:a3:ea:
                    5f:83:05:d8:d1:99:01:d5:f9:79:60:7d:d4:bc:05:
                    89:b9:58:57:30:1c:e2:56:d8:f3:5f:04:29:77:31:
                    6a:d6:c7:91:11:0d:2f:48:6d:22:05:a6:d9:c5:cf:
                    7a:93:8b:c2:3a:fe:bd:42:c3:70:e5:0f:cb:4f:c0:
                    ab:1d:86:c1:31:ae:aa:1f:f1:d9:17:dd:3d:03:09:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:59:1D:1F:E3:FB:AA:62:96:A9:E2:3C:FD:72:D2:ED:B0:7E:A1
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bb:73:0e:05:82:ca:55:d2:d8:cd:28:fe:5d:97:3d:7e:2f:
         4c:d6:26:87:3a:8d:66:12:06:13:8c:c1:1f:7d:af:17:1a:c8:
         14:a4:e8:ba:00:45:c6:4f:10:ad:f5:9d:37:0f:33:46:fb:df:
         da:bf:fc:6e:16:1b:b1:07:04:89:df:3d:03:c6:7e:b2:7b:3b:
         4f:6b:e8:38:20:3e:b5:30:fa:e3:cb:95:ad:76:73:c5:86:43:
         07:b1:c2:e4:e0:d9:61:23:17:9c:c0:1c:31:e4:73:6c:bd:00:
         18:65:2a:12:37:b2:00:7e:6b:09:4f:db:92:9e:39:5d:2a:cd:
         c9:3d:13:c8:06:a4:a1:80:02:58:30:e5:f7:12:47:d9:7a:b5:
         a3:d7:52:d0:70:a8:f7:58:a7:84:f6:0d:44:1b:b3:50:1e:64:
         d4:2e:4d:00:0e:07:72:3d:c0:52:87:72:22:79:8b:2a:63:49:
         84:db:bf:ce:0c:e3:76:11:f1:80:fc:c0:66:ce:45:09:92:da:
         16:d9:d8:6a:60:01:0a:06:81:f1:06:df:d2:db:01:a1:a9:66:
         68:61:9c:e9:26:9b:76:ab:ca:8e:c6:fd:ff:58:0f:1f:b4:8c:
         28:34:10:ec:6f:5a:a6:a5:17:2f:9a:ff:1b:94:f9:79:c3:4f:
         21:87:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:07 2025 by rpki-client