Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft
File:                     835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft (raw, json)
Hash identifier:          Pt91CpZ7BNpfWBJum5brpA01CdHpoCNYZ8kNjvLO174=
Subject key identifier:   FD:68:F9:E9:CC:D0:6B:F9:A0:45:C3:77:F0:E6:23:4F:83:32:FC:B1
Authority key identifier: 83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11
Certificate issuer:       /CN=835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11
Certificate serial:       102CCD4C95E285602DFD4FD1A78BF070DB7056C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft
Manifest number:          02F7
Signing time:             Tue 04 Nov 2025 12:19:42 +0000
Manifest this update:     Tue 04 Nov 2025 12:14:42 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:42 +0000
Files and hashes:         1: 3137372e31302e3233322e302f32312d3332203d3e20323632383830.roa (hash: us58ootgSowHRioOOeGbnYIDoB3KwEBZz8patElHQPQ=)
                          2: 3136382e3139372e35322e302f32322d3332203d3e20323632383830.roa (hash: ESHj8z/X7dDiPunpMC5DPbUNTv/ZgAzPmAwWxyp7IA0=)
                          3: 3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa (hash: rOUrKxPX+VgdgyjlOQOrpnDWjML32kti8JgTGB9x4Mw=)
                          4: 835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.crl (hash: hDM90miZzHJbP4ufiCKeHkYBrCewUwZ+aEDY1FoLKVk=)
                          5: 323830343a326565383a3a2f33322d313238203d3e20323632383830.roa (hash: hVeFFkrathgPGEgeSZHEisbd0w8g+HHdotiCVEQdgL4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.crl
                          rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2c:cd:4c:95:e2:85:60:2d:fd:4f:d1:a7:8b:f0:70:db:70:56:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11
        Validity
            Not Before: Nov  4 12:14:42 2025 GMT
            Not After : Nov  5 13:01:42 2025 GMT
        Subject: CN=FD68F9E9CCD06BF9A045C377F0E6234F8332FCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:71:ee:96:d7:56:5b:c6:12:8f:40:b4:1b:
                    8e:c4:52:9c:15:fa:a7:83:9e:f8:91:7a:df:be:b3:
                    45:1d:b8:4d:47:c5:59:34:22:56:26:0c:c6:64:48:
                    b9:42:85:9e:48:ba:14:aa:3c:24:2b:9e:63:24:3d:
                    db:46:d4:10:f0:21:73:c6:c1:aa:e3:38:6f:d7:f4:
                    79:d6:f0:1f:de:4d:06:bb:39:51:96:6f:2f:1a:5e:
                    bf:9e:c5:42:a2:d4:ec:b2:76:f4:6c:a6:59:10:c0:
                    cc:11:74:44:37:98:68:56:1f:17:85:db:fe:d6:f8:
                    f3:1e:ff:cc:61:a8:c0:e2:47:3b:3b:4d:03:30:00:
                    28:b8:af:a7:1d:02:25:bf:c4:1f:46:25:2a:01:32:
                    ef:3f:55:5a:72:84:ea:4f:34:02:5c:ec:1a:93:81:
                    a1:71:6d:03:65:4a:bb:7c:70:1e:05:ec:76:1a:be:
                    24:30:6d:10:2a:25:92:e1:17:19:f0:42:63:4c:1a:
                    da:dd:06:e6:c7:d0:d4:42:2b:d5:7d:50:13:7c:66:
                    2c:b8:d7:b8:33:c0:a4:c1:de:ae:9a:a4:a3:38:bd:
                    c5:a0:d7:1d:a1:29:30:03:2a:dd:bb:7b:b5:0a:36:
                    86:8c:b3:2c:8c:9b:b6:dd:6f:dd:41:4a:f4:21:c3:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:F9:E9:CC:D0:6B:F9:A0:45:C3:77:F0:E6:23:4F:83:32:FC:B1
            X509v3 Authority Key Identifier:
                keyid:83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:35:95:60:92:4b:82:4f:e3:13:6d:76:2e:2e:c1:45:84:72:
         01:d0:91:60:f8:7d:da:be:e7:75:f9:c3:57:ac:d2:07:f4:28:
         f1:07:0f:e2:57:75:29:c4:45:99:d5:5c:62:29:6b:26:1b:34:
         64:bd:a7:b0:de:1e:6f:c4:35:7b:95:b4:35:77:b1:b7:de:c3:
         fc:a5:45:32:17:47:f7:6e:b2:00:74:90:9a:38:4c:44:e7:e7:
         e3:51:20:36:d1:36:37:51:86:b4:09:56:e7:f7:5f:cd:94:62:
         bf:0e:52:b0:00:21:c1:13:99:83:48:da:2f:28:84:f1:28:d0:
         ee:b8:a0:f7:71:c3:20:a2:e9:ee:f0:36:8e:e3:10:15:f1:f2:
         e0:b0:35:96:9c:8a:3c:c5:59:45:0d:49:75:66:9f:b1:47:52:
         90:8c:07:20:cc:bb:9a:4d:ab:28:a8:05:65:2b:16:38:7d:a9:
         fc:96:fb:95:e4:5a:b9:88:dc:86:69:91:b5:7b:90:92:35:86:
         06:9b:d4:69:05:f1:9a:00:df:04:85:ad:03:99:71:9b:ed:de:
         51:43:ac:c5:4a:29:04:33:55:b7:49:0a:89:7a:5e:e1:0f:41:
         86:ed:cc:37:e0:09:f1:1f:59:a7:2d:4a:3a:a0:2d:6b:e6:84:
         02:bf:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:06:02 2025 by rpki-client