Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
File:                     EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft (raw, json)
Hash identifier:          bGvJfjE7UgptKyPTKIP+qFYy6Aq8MO81MRGUPaxfXyw=
Subject key identifier:   2C:CC:BF:F0:57:15:77:0D:49:F2:0E:C8:1A:64:44:8F:BC:14:58:03
Authority key identifier: EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
Certificate issuer:       /CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
Certificate serial:       10A04828EF0DD5892A6B348A6A5DF1507AF916C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
Manifest number:          023F
Signing time:             Sun 19 Oct 2025 20:09:45 +0000
Manifest this update:     Sun 19 Oct 2025 20:04:45 +0000
Manifest next update:     Mon 20 Oct 2025 22:02:45 +0000
Files and hashes:         1: 34352e3137352e3139362e302f32322d3332203d3e20323638393230.roa (hash: fx6DYvXt9y+O7pKR1zk6o+181Dloz19CVo8Onx1T55E=)
                          2: 323830343a356361303a3a2f33322d313238203d3e20323638393230.roa (hash: q/ezCvpn0L/NBlM1GgwYbIDiBNKtr2cYPmEdialO0S0=)
                          3: EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl (hash: kJ1f1NPWa6VVvSSJtpukcF7kvsJapcyDD8QEROshFwc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl
                          rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a0:48:28:ef:0d:d5:89:2a:6b:34:8a:6a:5d:f1:50:7a:f9:16:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
        Validity
            Not Before: Oct 19 20:04:45 2025 GMT
            Not After : Oct 20 22:02:45 2025 GMT
        Subject: CN=2CCCBFF05715770D49F20EC81A64448FBC145803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:a8:b1:d5:46:27:56:5e:08:6d:81:bf:6c:
                    f7:17:1a:b9:da:e7:51:90:b3:21:2b:4d:4a:d4:9a:
                    d5:4d:0f:2b:b2:28:7c:68:f0:de:c5:18:bc:63:cc:
                    8c:3d:b6:0a:68:0a:97:40:6c:da:75:7c:26:36:14:
                    30:04:3a:70:cb:ae:df:74:62:ca:0f:04:05:01:c1:
                    c2:c1:cf:b2:93:98:2d:8e:5b:fb:ff:71:a6:f4:26:
                    65:6c:c1:09:c6:b8:38:2b:6a:10:fc:56:ae:d4:69:
                    6e:a2:e5:1d:fa:b2:7f:ab:51:3b:3c:e1:3e:2e:25:
                    97:6e:52:d1:25:c9:33:f6:8b:c6:0c:29:1a:07:a3:
                    18:30:de:3f:eb:86:78:18:1b:f0:07:1e:04:e9:6e:
                    a1:17:69:fb:1f:9d:29:41:e0:51:0c:1b:3f:4b:56:
                    c1:79:ac:b4:d3:af:16:8a:02:be:d6:db:39:8e:66:
                    ea:6f:07:87:fc:05:f7:1c:9b:8c:82:16:9f:f3:88:
                    fb:9b:c4:01:41:91:d9:78:15:a0:b7:e3:ec:3e:c1:
                    e4:0d:ba:87:cd:7e:33:18:a2:71:48:ed:96:47:ac:
                    74:80:15:6b:04:d5:31:d6:42:62:b7:db:60:52:64:
                    a7:a7:aa:27:46:e0:91:50:71:19:9e:0f:10:83:e6:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:BF:F0:57:15:77:0D:49:F2:0E:C8:1A:64:44:8F:BC:14:58:03
            X509v3 Authority Key Identifier:
                keyid:EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:91:aa:00:0b:8e:28:af:9f:24:5e:fe:0d:73:b1:e2:12:e9:
         dc:28:b9:11:5f:b7:a1:e1:ab:01:9d:88:37:71:9b:75:da:cd:
         31:73:3d:23:a6:46:77:9c:54:fd:57:cd:6e:fa:0d:0b:c1:03:
         d2:4b:b9:13:88:24:69:65:55:c1:bf:3a:f3:8a:3f:85:e5:34:
         d7:d1:68:7b:cb:5e:27:2e:54:04:39:56:36:4f:30:28:11:34:
         a4:9e:43:98:8a:ad:83:ad:09:bc:42:13:55:34:d1:37:3c:73:
         d0:64:bc:f8:a4:fe:7c:66:1a:94:84:93:40:12:9e:dd:a9:f8:
         f7:12:9e:5f:92:89:56:d4:05:90:cb:2a:d0:50:93:67:02:2c:
         f1:aa:b3:ee:e7:93:3b:da:1a:5f:e2:ef:a1:82:a8:00:dc:f9:
         b0:7a:de:5d:1b:c2:6d:7f:34:36:b9:96:1e:4c:e5:96:09:07:
         df:dc:7b:77:58:2d:9e:ad:9f:ed:34:51:77:13:c5:11:a1:28:
         cd:76:0f:8c:a4:76:1e:5f:3e:37:78:40:80:32:81:9a:6a:1d:
         39:70:5b:0d:b6:f7:f2:60:cf:ff:99:a6:84:84:a5:fc:c6:e3:
         70:3d:3a:d5:ba:4a:7f:b0:49:39:06:c2:1d:17:79:47:67:b0:
         71:1d:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:24 2025 by rpki-client