Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
File:                     D88B454BC594C5A1800134E375B465D91C070DFD.mft (raw, json)
Hash identifier:          m67GC1O1+wU6eLCckIzEhc4SAEOHE0PuUnp9JrQttK0=
Subject key identifier:   85:0A:C1:F5:E2:58:66:63:55:F8:B9:B7:D7:95:FE:E1:F1:89:9E:04
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       109CCBD824E44130F03AEDA14296D7C751B7B581
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
Manifest number:          D0
Signing time:             Tue 04 Nov 2025 23:03:17 +0000
Manifest this update:     Tue 04 Nov 2025 22:58:17 +0000
Manifest next update:     Thu 06 Nov 2025 01:10:17 +0000
Files and hashes:         1: D88B454BC594C5A1800134E375B465D91C070DFD.crl (hash: 3lhV976cSGWWcOcIRM1gczrOpgBYNjK/qBaz9O1mgbM=)
                          2: 32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa (hash: B0g0/6dpDwpXEPB2OXlQQy2yzhoKUdtgY5moX7NXSJg=)
                          3: 323830343a326564343a3a2f33322d313238203d3e20323635333639.roa (hash: CMPuVa43M/mtSeZmA5q7/xTl8XIpukeF40GbTH+b8DU=)
                          4: 3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa (hash: JYM/ddqp6VUTUxpc3tV7MQMhhwucHwZ22I/OI4yVnUs=)
                          5: 3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa (hash: KbZ+qNpkBGT3I9oVhnyT8DmgMDvWtfrQzIY/Ox8k91U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9c:cb:d8:24:e4:41:30:f0:3a:ed:a1:42:96:d7:c7:51:b7:b5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: Nov  4 22:58:17 2025 GMT
            Not After : Nov  6 01:10:17 2025 GMT
        Subject: CN=850AC1F5E258666355F8B9B7D795FEE1F1899E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:2b:f9:60:55:a2:ef:74:2c:b1:59:8b:19:
                    8c:4a:f1:3e:b8:f7:b8:74:ea:0a:4b:3a:2c:fc:8a:
                    9c:40:a9:b0:02:cf:2c:8a:3c:55:fc:9b:29:2f:b8:
                    b0:da:2f:bd:91:0d:f8:67:d2:03:87:53:f7:4b:20:
                    31:b9:d4:a7:04:d7:c2:f2:9a:ce:8a:bd:84:f8:48:
                    9c:17:65:e9:69:84:5b:ec:21:ac:42:c8:8a:de:34:
                    1c:8f:71:5d:2e:20:70:9f:d8:01:64:48:a4:af:a2:
                    9a:a6:ae:fe:d1:a2:63:07:47:3b:43:e9:5b:9e:32:
                    9b:dd:5b:3d:56:a9:b5:9f:b8:ea:2a:a2:e5:8c:ed:
                    38:52:a2:e9:a1:e7:a9:fe:7f:92:b4:73:97:01:9e:
                    57:31:8d:5b:53:8f:27:64:05:ef:bb:98:18:0d:a5:
                    89:89:20:02:af:b8:18:5b:25:c2:84:e4:87:67:e2:
                    37:d0:36:7f:2b:86:75:87:3b:3b:d2:cc:0f:a6:f0:
                    e2:6e:fe:d2:d3:6c:fa:e6:3f:d4:17:64:5b:13:b0:
                    44:57:f1:88:62:f2:ad:32:f4:b1:4d:ee:19:92:5e:
                    03:35:49:d7:8e:26:3a:6a:bb:e7:f3:01:cf:0b:3b:
                    18:e3:60:37:5c:91:94:36:df:00:1b:76:dd:bf:1c:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0A:C1:F5:E2:58:66:63:55:F8:B9:B7:D7:95:FE:E1:F1:89:9E:04
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cd:95:39:86:c6:a6:bb:74:a4:f1:46:c2:18:ab:5f:da:8e:
         49:3f:b7:64:38:d9:48:28:92:ea:9d:3e:3c:ee:12:4d:aa:34:
         dd:11:de:2d:32:89:19:8e:5f:64:60:cd:18:18:dc:bd:0b:80:
         05:af:36:6e:c3:98:0b:70:da:b8:d6:24:d7:f3:fa:00:37:7a:
         69:72:bc:56:6d:61:c8:ed:7d:fb:10:4d:79:23:88:69:33:12:
         1f:0a:14:0b:cb:5f:5f:60:6a:3d:65:b2:18:92:2f:35:53:95:
         4a:64:e9:3e:53:f5:70:47:f8:d3:34:9e:e8:10:06:35:74:e0:
         21:97:d1:35:cb:2e:c3:ca:2b:c9:75:eb:84:98:4b:aa:e4:44:
         56:20:4c:92:35:e8:5b:5f:e5:db:ea:5d:2a:e1:ce:8c:3b:a7:
         25:b1:ed:93:6a:13:03:56:27:be:04:8a:94:86:bc:72:31:bf:
         08:96:ab:ff:fd:80:22:3d:dc:e3:d8:c8:6b:ec:f1:a6:7b:25:
         ae:b8:f1:e3:50:c0:e1:9a:e7:76:12:fe:de:29:f3:6f:98:71:
         7f:57:01:52:1d:fc:1c:fe:9e:4d:b0:c3:cd:f6:57:79:70:13:
         ed:39:40:64:ce:9a:44:bf:58:56:f0:fd:43:b9:41:07:2a:3d:
         4b:69:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:05 2025 by rpki-client