Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.mft
File:                     E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.mft (raw, json)
Hash identifier:          1D3S373W1UxhDGU5ALy4kW5oCWidHFVTjys2MEDwHqU=
Subject key identifier:   6B:33:4D:E7:91:47:E3:0B:F5:60:4A:EE:93:1C:E3:AC:C3:53:A0:F7
Authority key identifier: E9:06:FF:24:63:EE:18:FD:EA:69:EA:21:CE:DC:ED:C3:89:4D:C1:AA
Certificate issuer:       /CN=E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA
Certificate serial:       3E4FEF33A7F75368ADA75529904F05049CA5FEE9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.mft
Manifest number:          FF
Signing time:             Tue 04 Nov 2025 20:07:13 +0000
Manifest this update:     Tue 04 Nov 2025 20:02:13 +0000
Manifest next update:     Wed 05 Nov 2025 22:08:13 +0000
Files and hashes:         1: 323830343a343237303a3a2f33322d313238203d3e20323637353030.roa (hash: mOqtKGmhWEFAR4RFAPmCcV+TxYJ4If2nz3MKbp52q2A=)
                          2: 3230312e3138322e36302e302f32322d3332203d3e20323637353030.roa (hash: Zotg3ps2CeQG7Isl/AW9tsoFc8Hl/CpbxrsBLe2UvtY=)
                          3: E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.crl (hash: t+1ZYDQZGy+SVA6RRIG6BiS+S09ofXAfflqiJKkLZGY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.crl
                          rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 22:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4f:ef:33:a7:f7:53:68:ad:a7:55:29:90:4f:05:04:9c:a5:fe:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA
        Validity
            Not Before: Nov  4 20:02:13 2025 GMT
            Not After : Nov  5 22:08:13 2025 GMT
        Subject: CN=6B334DE79147E30BF5604AEE931CE3ACC353A0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:3c:c4:58:88:52:77:7b:5e:0c:6a:67:40:
                    cc:d0:35:e7:25:f4:01:3c:8f:5e:f3:15:db:1c:e6:
                    e4:32:26:61:ce:16:ab:ee:83:3f:4a:6c:a2:76:63:
                    34:e5:9e:69:ce:8d:28:c0:fa:78:85:05:ee:68:5e:
                    db:35:29:1c:66:e3:77:9c:0a:2b:d0:ac:19:eb:0c:
                    57:61:a2:f1:06:d5:dd:f9:4d:9a:41:45:4c:37:71:
                    05:15:40:c4:7c:69:76:4a:57:94:cc:b0:cd:01:33:
                    e9:d6:f6:44:12:fa:cb:e7:32:92:72:82:01:7c:78:
                    19:c3:a7:d6:13:bb:a0:ef:6d:37:41:b5:ef:42:59:
                    89:81:bb:62:16:5a:79:04:4d:ad:2f:e8:01:f0:13:
                    fa:9a:d2:8f:82:77:61:de:e4:3b:7d:e6:2a:1f:25:
                    6d:ba:b6:88:c7:b8:e6:60:c9:4a:fb:05:6f:f8:f4:
                    50:b5:d7:ce:ab:74:c0:38:b9:e7:84:3f:16:4d:80:
                    ea:f2:29:39:23:79:0a:df:7a:8a:0d:bd:76:27:8e:
                    0c:a0:97:15:3e:a0:c8:2c:b4:0c:57:ff:ae:3d:92:
                    9f:88:aa:7f:44:98:ef:97:dc:b4:56:af:b3:0f:eb:
                    93:d3:cb:09:fc:0c:60:08:a4:64:fb:9b:0e:9f:21:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:4D:E7:91:47:E3:0B:F5:60:4A:EE:93:1C:E3:AC:C3:53:A0:F7
            X509v3 Authority Key Identifier:
                keyid:E9:06:FF:24:63:EE:18:FD:EA:69:EA:21:CE:DC:ED:C3:89:4D:C1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/E906FF2463EE18FDEA69EA21CEDCEDC3894DC1AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:44:12:14:83:40:63:0d:d4:c7:04:f5:0f:f5:56:ad:36:d5:
         18:8b:b0:c2:01:df:0f:71:e3:33:21:ba:30:e7:cb:d1:b8:40:
         a5:b7:06:d1:1e:fd:c7:e6:83:01:16:4d:5d:fc:15:d7:e6:7b:
         52:1e:b1:08:85:aa:01:1c:6a:39:e8:71:da:42:d9:93:15:54:
         05:a4:f2:fa:fd:70:42:5a:8d:2b:3b:dd:3d:37:73:54:98:4e:
         9e:9b:bc:a1:2c:de:13:7d:d6:97:00:c7:ed:d4:24:18:f6:f4:
         d2:71:75:41:59:57:3b:74:f0:aa:e7:11:2d:26:5e:20:f2:57:
         77:56:95:f4:f3:5f:71:e1:b1:5d:48:47:3d:60:3a:7a:98:d8:
         1d:c9:d3:f2:c0:43:0c:16:cf:56:73:59:7d:2e:85:2d:16:c1:
         2b:f4:04:cb:3a:cf:1e:07:7b:e5:b6:9e:a8:bd:d0:60:91:bb:
         fd:be:c4:88:12:38:8c:36:69:27:1f:0e:b5:2d:8e:8d:8b:77:
         b3:7f:9a:da:f6:bb:bf:6e:13:01:15:36:3e:9e:b5:34:1d:6d:
         b6:53:63:f0:c9:3e:6e:05:cf:19:bb:ca:cc:d7:ec:7d:1f:91:
         ab:9d:0e:e6:1f:20:90:ae:98:3a:69:20:e2:b2:f2:53:9e:7f:
         55:cf:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:04:46 2025 by rpki-client