Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          TgJEYCqOrEqQ0/UPc07sTS3FUhGqYbnVxaxcAewITSU=
Subject key identifier:   07:7A:D5:00:C8:7B:41:88:9A:FB:07:1F:28:9E:02:D7:C0:A2:86:4B
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       4AB7F375E85263E7401670F24F463E9F77482785
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          0306
Signing time:             Tue 04 Nov 2025 18:30:06 +0000
Manifest this update:     Tue 04 Nov 2025 18:25:06 +0000
Manifest next update:     Wed 05 Nov 2025 21:20:06 +0000
Files and hashes:         1: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: BjAel+0m0J1QE81I49O4qqu6QPk0YG3/s8Ydic/L4kI=)
                          2: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b7:f3:75:e8:52:63:e7:40:16:70:f2:4f:46:3e:9f:77:48:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Nov  4 18:25:06 2025 GMT
            Not After : Nov  5 21:20:06 2025 GMT
        Subject: CN=077AD500C87B41889AFB071F289E02D7C0A2864B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:53:25:d7:5e:fe:b3:0f:b0:79:77:ab:59:
                    dc:dc:b3:d6:2b:c9:11:51:0a:92:08:c6:d1:95:e2:
                    26:7d:79:ef:aa:f7:18:f9:d3:d9:0a:8f:34:1c:5d:
                    e2:44:81:c5:a1:77:ac:3f:3e:d3:09:bc:10:8b:b5:
                    f1:36:f6:dd:bd:40:ba:ac:9f:96:a9:ac:d8:c7:13:
                    f1:8b:76:15:6c:73:90:f0:dc:d6:c9:93:cf:d5:17:
                    37:bf:70:01:e7:51:52:ed:e8:f8:6a:66:ec:75:46:
                    24:e2:eb:35:43:1f:2f:77:07:dc:b4:b1:6f:79:3e:
                    38:20:c7:59:2d:3b:48:09:7d:50:a5:90:4f:0b:1f:
                    7d:35:e9:99:4b:72:7a:5f:2f:08:a3:c9:50:92:c2:
                    f6:61:82:b1:5b:21:50:06:df:3f:44:cf:9f:86:1d:
                    25:4f:d0:3a:5e:e1:5a:d5:f8:70:7f:c8:0d:66:fd:
                    98:9e:b6:35:58:d8:8f:1c:50:e9:91:77:d6:4d:63:
                    08:7d:48:eb:19:ab:da:9d:04:b4:1b:52:ab:bc:49:
                    c9:b4:20:d8:2e:c7:61:3d:9a:ef:cf:49:97:ac:1c:
                    4a:88:27:fe:35:d0:89:11:9a:d3:62:58:34:9b:b2:
                    d5:77:cc:ac:63:ee:b3:66:be:d2:88:5a:45:76:f3:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7A:D5:00:C8:7B:41:88:9A:FB:07:1F:28:9E:02:D7:C0:A2:86:4B
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:49:c9:62:cc:15:89:c8:9f:ae:47:2e:73:ef:4f:a3:4d:
         98:0f:6e:7b:2b:fc:b0:78:61:4e:55:18:4f:53:35:6a:7b:91:
         53:dd:e4:2f:be:64:97:b3:3b:8a:5d:79:8c:96:01:d7:de:2e:
         cc:f8:11:2c:8c:23:a4:99:c7:47:04:a5:5d:76:c8:c7:22:3c:
         25:a4:35:b4:3f:44:35:09:49:22:ec:6a:e4:c0:98:95:d1:01:
         29:ad:98:5c:cb:54:37:27:3c:76:f0:c2:f2:78:38:02:ad:ba:
         cd:67:86:5c:f3:c6:99:d6:7c:64:4c:ab:ed:81:e6:af:0c:30:
         3b:b6:93:29:58:13:7e:82:57:33:9e:ce:62:00:9b:f8:81:0e:
         35:e5:d9:bf:3f:66:ea:63:d1:1d:85:8a:7e:8a:b9:f7:75:2b:
         5f:55:23:b9:e6:b3:8c:8f:3f:3c:b7:70:10:86:5e:39:42:60:
         41:34:8b:93:d5:2f:4a:af:ef:6e:8e:ab:b8:ea:dc:a2:4b:a3:
         62:bd:a7:a8:4a:79:a8:df:ba:44:52:87:fb:af:b9:ad:ea:cd:
         01:8c:64:77:81:39:20:62:0f:e3:81:e4:de:4d:2f:d5:be:db:
         3b:27:2b:9f:7e:53:4a:d2:e2:0b:2c:b9:b0:e1:d4:74:8c:20:
         f0:67:f8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:32:13 2025 by rpki-client