Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
File:                     88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft (raw, json)
Hash identifier:          BdsN06197DMCiD+jXh6bXSvZjCDZQgFR6Fse0xC+6C0=
Subject key identifier:   0F:84:90:AB:65:A7:45:70:FE:38:1E:D2:C5:48:5D:85:25:9C:82:3F
Authority key identifier: 88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9
Certificate issuer:       /CN=88D55FAA7B5E1E71D137476BA24267E7BDBD54A9
Certificate serial:       04B49B29DB5FAE6F74DAC182DC64E916DF8B0A04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
Manifest number:          05
Signing time:             Wed 05 Nov 2025 08:03:23 +0000
Manifest this update:     Wed 05 Nov 2025 07:58:23 +0000
Manifest next update:     Thu 06 Nov 2025 08:42:23 +0000
Files and hashes:         1: 88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl (hash: A8EwOaSpf5D3XuskOldwICyu6ypSZZ+q/zZ2YSfFEnY=)
                          2: 323830343a373938343a3a2f33322d3438203d3e20323731333130.roa (hash: Ff92MSPuBGea0tOgQwPZyiajCiSgWi2swur7ZJvCo3E=)
                          3: 3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa (hash: cro6hIVcjeEeiAcnH5fnwHU14NKf7FT3DtgKoOW8ojg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl
                          rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 08:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b4:9b:29:db:5f:ae:6f:74:da:c1:82:dc:64:e9:16:df:8b:0a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88D55FAA7B5E1E71D137476BA24267E7BDBD54A9
        Validity
            Not Before: Nov  5 07:58:23 2025 GMT
            Not After : Nov  6 08:42:23 2025 GMT
        Subject: CN=0F8490AB65A74570FE381ED2C5485D85259C823F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:73:55:a0:a3:f9:66:c5:24:54:e2:a2:ef:b1:
                    c9:6b:ee:a1:49:4d:1a:6c:8e:ef:89:ac:93:f2:1e:
                    0b:95:38:35:68:0d:7c:de:23:7d:54:a3:69:a3:25:
                    6f:dc:ac:68:92:60:71:75:b6:d7:7e:a2:54:23:6c:
                    97:55:8a:f2:27:45:b0:ad:25:14:d5:07:ce:46:3b:
                    27:02:c6:ca:15:a8:79:3b:fe:41:0a:8d:df:2a:79:
                    18:08:8a:a6:61:aa:9a:4e:0d:41:89:f1:69:2f:43:
                    4c:b2:3a:5f:8d:87:96:71:40:65:73:1c:de:a5:c7:
                    7f:5c:81:f6:8b:e6:70:a0:2b:8a:76:57:14:96:14:
                    65:66:e3:11:22:c4:45:b5:0f:18:78:13:c3:4d:c0:
                    fc:b3:88:9b:c4:8d:c0:79:07:78:3c:73:69:1b:b7:
                    9e:a8:79:06:35:8a:1f:5b:13:94:34:57:b7:32:4e:
                    96:d1:ea:c8:90:de:0d:44:14:bc:89:82:e5:26:09:
                    3d:dd:c0:c4:c5:17:7c:ac:0d:4c:41:a5:c6:3b:9d:
                    02:48:ce:2e:5d:10:ff:66:7f:6c:5b:e1:2b:da:2d:
                    8a:c5:8f:2a:35:36:30:bc:94:7c:c5:2a:70:07:fc:
                    90:30:9e:d8:ae:e7:72:6a:ed:9a:9e:b1:a1:c0:79:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:84:90:AB:65:A7:45:70:FE:38:1E:D2:C5:48:5D:85:25:9C:82:3F
            X509v3 Authority Key Identifier:
                keyid:88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:2f:82:40:56:ff:35:6b:d7:08:ca:52:82:6e:3f:85:dc:
         78:a1:6c:a3:93:0a:3e:97:c6:a0:d2:a6:48:2d:d2:14:53:71:
         65:f2:e2:f5:e8:75:9f:b1:12:0b:ce:c1:20:28:cc:4f:5e:bc:
         59:fe:61:30:94:d9:7a:b2:0e:3c:26:21:98:d1:ff:76:86:57:
         34:22:81:d1:97:70:4d:18:81:41:c5:60:38:b5:37:78:72:22:
         c1:41:ab:1f:f0:59:46:4c:36:45:8c:ab:60:a8:8e:75:24:35:
         7e:dc:75:7f:e2:78:41:ad:9b:ac:a0:7f:ce:be:52:53:08:95:
         a8:a4:7f:8d:a5:e9:d1:c5:19:2e:49:e2:00:56:4b:b6:3c:14:
         c6:01:1b:31:dc:14:3f:8d:a5:0f:8d:8f:9a:84:34:63:f8:fd:
         80:ff:61:cd:e3:a2:6a:2b:45:72:99:4e:69:cf:64:4a:b8:a7:
         6a:87:3d:7c:0b:e8:fe:29:06:6b:63:3b:08:24:2f:fd:be:10:
         7d:fb:cc:88:8e:9a:3d:b6:00:23:ba:7c:51:84:8c:ea:a8:cc:
         37:7c:6b:a5:c1:0a:fd:65:66:0c:fc:35:d2:d9:49:6b:54:b2:
         bb:f7:b5:2c:77:dc:3c:8f:e6:95:03:1b:30:7b:44:44:1b:dd:
         3a:87:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:18:49 2025 by rpki-client