Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
File:                     CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json)
Hash identifier:          +bcBhgiFCy5Kf1kubE0rgVP4NTHEv5gm03efR4E7bug=
Subject key identifier:   33:E4:10:FA:D0:1D:5E:08:15:81:B2:3F:08:28:65:CA:CD:9B:4E:A3
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       6E532BC386C284996120A07A9DF2437967820D67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
Manifest number:          0316
Signing time:             Tue 04 Nov 2025 20:29:27 +0000
Manifest this update:     Tue 04 Nov 2025 20:24:27 +0000
Manifest next update:     Wed 05 Nov 2025 22:27:27 +0000
Files and hashes:         1: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: KuSiYG8j9V8i7DhHcGxa6Twligll3obqppn8kvZkEWc=)
                          2: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: pWacx1NTt02D42bFq04vbBmqRB/XXWUQOecty6CnIa0=)
                          3: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: mWceP2rzR05Egi1VVd5zyaviINwwnfTfMxgvkPFbjos=)
                          4: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: ssuLAytq/OHz9ywB7G0F/3NjIxPtlXCrc4g55U9IvkI=)
                          5: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: RJSiz6X40u1exZ0lylVroJmRjsSn1sj876c4G/oZyzw=)
                          6: 3137302e3233332e3131322e302f32322d3233203d3e20323635303738.roa (hash: C8nl6i1YJBXuY7KqnNcHZ82XxRjwU4qb4KZwT3Ruswc=)
                          7: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: 6qqQly8fj1pIk6aSIlrvnSFvdMYQB2GBvscX+DADI14=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 22:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:2b:c3:86:c2:84:99:61:20:a0:7a:9d:f2:43:79:67:82:0d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Nov  4 20:24:27 2025 GMT
            Not After : Nov  5 22:27:27 2025 GMT
        Subject: CN=33E410FAD01D5E081581B23F082865CACD9B4EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:6c:2d:1d:4f:62:b8:84:42:9f:db:0f:f0:
                    0a:da:d1:7d:da:f8:2d:79:4c:1a:c3:b5:72:89:81:
                    13:20:11:d1:92:79:5c:d8:aa:18:56:64:7d:d4:f3:
                    86:78:3b:9b:e0:a8:f9:02:29:38:39:be:ee:d0:a6:
                    56:cd:cf:dd:2a:fe:31:39:0a:b9:71:43:2b:87:3d:
                    8f:1f:15:09:eb:ca:f9:56:ba:38:0d:b8:7a:4b:64:
                    13:d9:ea:64:36:07:a4:cb:30:45:25:a2:d8:8d:c8:
                    8e:60:f0:e1:4e:c7:1e:50:11:69:d9:9b:02:eb:12:
                    a7:df:f4:8a:4c:ca:5f:f8:ca:f3:c3:8f:da:80:4a:
                    c9:21:f0:ce:af:75:55:4d:55:7c:bc:25:9c:3e:b1:
                    c6:ab:2f:8d:4b:78:ce:24:53:4e:9b:2b:51:ac:44:
                    04:2e:18:a8:be:dd:42:cb:81:42:e1:1a:56:e6:0b:
                    b3:17:f9:e1:5e:84:cc:d8:79:37:4b:29:87:db:08:
                    2b:da:97:c4:e3:16:e8:6c:45:5f:cc:7d:a9:f7:27:
                    62:b7:68:1b:5f:05:0d:31:84:72:2f:97:3a:df:bd:
                    0a:ce:94:b9:ab:64:25:03:08:bf:ac:61:55:8f:c5:
                    4f:cb:f1:da:1a:f0:ba:27:94:45:61:61:73:77:a4:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:10:FA:D0:1D:5E:08:15:81:B2:3F:08:28:65:CA:CD:9B:4E:A3
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:82:d7:bc:41:19:3d:b2:7b:9a:8d:8f:45:61:1f:76:80:1e:
         6a:d2:9e:61:2f:51:5f:cd:d4:e4:92:50:61:3c:50:9b:79:21:
         eb:8a:1f:e6:f3:b6:f8:2f:08:47:eb:42:2e:8c:5a:05:54:e4:
         f7:87:d8:25:ff:e1:93:09:9c:e7:76:3c:f3:23:b3:8d:53:aa:
         99:5e:5d:f7:93:b2:a2:23:e5:57:7d:48:97:dc:30:ec:5b:2d:
         fa:71:07:95:0a:8e:dd:31:9f:84:9b:ac:51:e4:0b:b0:dc:c8:
         b0:70:a4:a0:b3:db:56:9e:50:c2:11:4b:7a:8c:bc:ae:08:b4:
         e0:ba:74:f4:77:50:2b:1a:13:e7:80:9f:8e:34:01:48:47:3e:
         8c:ca:7b:3e:86:f1:60:f4:4a:dc:e1:d7:b9:8f:f1:de:c6:09:
         b3:2e:37:f5:43:20:be:22:4e:76:cc:06:96:8f:c0:57:6f:23:
         83:2c:ac:86:cf:33:d2:de:33:41:ec:d5:5f:33:3a:3c:02:34:
         0e:c3:a8:4d:4b:d2:38:a9:dc:be:79:9c:b9:b7:8b:80:1e:9f:
         83:85:40:ce:4a:e2:8d:48:3f:fd:7e:cc:44:f2:27:4a:73:8b:
         d6:43:6b:ca:45:1b:8e:21:10:af:22:df:99:0e:93:a9:4d:f6:
         6b:fd:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:46:05 2025 by rpki-client