Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft
File:                     8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft (raw, json)
Hash identifier:          40OfjT1uSntmO4monsSQBeIzfPcby0MRna3rPCHTnhA=
Subject key identifier:   7C:CD:EF:DA:0E:34:DE:48:8B:B9:2D:C3:C7:75:44:EE:F3:03:F5:32
Authority key identifier: 8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8
Certificate issuer:       /CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8
Certificate serial:       36706509DAEDB26A5559055EA3FFC35B9B2B788A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft
Manifest number:          23
Signing time:             Tue 04 Nov 2025 22:06:28 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:28 +0000
Manifest next update:     Thu 06 Nov 2025 00:05:28 +0000
Files and hashes:         1: 8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl (hash: /GcEgYL3askhrzmCq/PGVtnFOJatI8VM/x0kr4I+PeA=)
                          2: 323830343a393432383a3a2f33322d313238203d3e20323734383235.roa (hash: FzCAE8eUu2sdUtzU7IKkFBXrwi3x7JsqMdGSg0/OQCY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl
                          rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 00:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:70:65:09:da:ed:b2:6a:55:59:05:5e:a3:ff:c3:5b:9b:2b:78:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8
        Validity
            Not Before: Nov  4 22:01:28 2025 GMT
            Not After : Nov  6 00:05:28 2025 GMT
        Subject: CN=7CCDEFDA0E34DE488BB92DC3C77544EEF303F532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:12:0b:56:37:80:57:0a:fc:67:b4:84:f3:
                    65:f5:07:58:37:a8:b1:49:e8:0b:c4:00:b9:64:27:
                    3d:22:c9:0d:68:17:f4:dc:04:f7:b6:79:e3:a8:b6:
                    86:48:f0:d0:45:23:48:66:9f:12:bf:88:78:14:c7:
                    53:46:ac:47:48:d1:41:5e:a3:e9:1a:2c:8e:dd:f6:
                    10:bc:41:25:78:2a:ab:f7:ad:ed:35:5b:14:2d:5d:
                    e3:19:45:f7:13:dc:2d:90:e2:97:ed:f7:ed:a5:44:
                    85:e6:6c:27:e5:62:30:e4:5b:41:7f:55:46:8a:0e:
                    7c:6a:b8:1e:7d:d0:ac:2a:02:cb:ae:d3:bf:a1:c1:
                    9d:59:0c:16:ab:55:98:fd:9a:6f:6e:40:d9:5a:db:
                    52:f5:e5:76:61:81:09:46:e3:f1:c7:77:ee:dc:e4:
                    d9:63:32:2c:c8:5a:c3:76:63:e8:9e:3e:27:20:a5:
                    01:b6:af:76:32:10:8a:ee:4c:a5:d8:ae:f1:e1:7d:
                    d7:eb:7a:dd:8e:49:3c:79:c8:e2:65:0a:cc:06:16:
                    fa:d6:49:b9:38:1d:02:7e:01:59:37:d7:26:bc:e9:
                    8e:33:ab:1b:b7:8b:80:69:d4:87:77:cf:96:74:08:
                    78:d1:50:35:1c:2e:4e:1d:e6:8f:a5:be:80:28:db:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CD:EF:DA:0E:34:DE:48:8B:B9:2D:C3:C7:75:44:EE:F3:03:F5:32
            X509v3 Authority Key Identifier:
                keyid:8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:75:02:c0:1f:03:60:8f:ba:ea:9a:5c:a5:56:03:8f:cd:
         f2:6e:c1:cd:e3:6a:5d:c6:c8:a6:4c:d0:f2:cf:34:20:70:07:
         58:f5:e8:c0:9e:68:53:04:23:99:6b:5c:99:13:b2:41:7b:85:
         d8:dd:6e:2b:ee:54:e0:1d:ef:38:c5:e6:57:d3:f2:9e:f3:1e:
         49:86:c0:9e:e8:b9:6a:fb:bf:02:11:aa:9c:df:a5:55:c9:f0:
         98:3c:74:84:7d:2c:d3:85:46:ba:e7:5a:cc:86:0e:7b:6b:71:
         c1:90:f0:f9:9d:a4:4e:c7:bf:78:78:d5:c5:ab:68:4b:63:44:
         99:38:77:38:13:10:f7:7f:ec:7c:87:d6:e6:3e:9d:6f:f1:1b:
         94:cd:e0:1a:1c:34:26:eb:dd:d3:97:d6:ae:9a:60:ec:89:0a:
         22:12:69:e3:ea:f0:ee:4f:f9:d7:e8:a5:97:f1:3f:3e:7a:35:
         e3:64:0f:ad:40:0b:8b:98:17:58:63:42:92:40:e2:56:ab:2d:
         f3:21:72:20:52:88:31:c5:65:67:89:c1:93:7b:65:57:4c:70:
         61:0a:48:89:03:83:c9:ea:4b:2d:ff:4d:15:27:3c:f5:93:71:
         67:20:de:25:4e:d7:10:f0:53:e0:3f:15:bf:f5:e1:db:2f:14:
         54:d7:41:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNnBlCdrtsmpVWQVeo//DW5sreIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENDNTI1RkRGNzJCODE2QjY2QzFDRTgzNkNBOTM3Q0U5
OUE2ODJFODAeFw0yNTExMDQyMjAxMjhaFw0yNTExMDYwMDA1MjhaMDMxMTAvBgNV
BAMTKDdDQ0RFRkRBMEUzNERFNDg4QkI5MkRDM0M3NzU0NEVFRjMwM0Y1MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMxILVjeAVwr8Z7SE82X1B1g3
qLFJ6AvEALlkJz0iyQ1oF/TcBPe2eeOotoZI8NBFI0hmnxK/iHgUx1NGrEdI0UFe
o+kaLI7d9hC8QSV4Kqv3re01WxQtXeMZRfcT3C2Q4pft9+2lRIXmbCflYjDkW0F/
VUaKDnxquB590KwqAsuu07+hwZ1ZDBarVZj9mm9uQNla21L15XZhgQlG4/HHd+7c
5NljMizIWsN2Y+iePicgpQG2r3YyEIruTKXYrvHhfdfret2OSTx5yOJlCswGFvrW
Sbk4HQJ+AVk31ya86Y4zqxu3i4Bp1Id3z5Z0CHjRUDUcLk4d5o+lvoAo20wHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfM3v2g403kiLuS3Dx3VE7vMD9TIwHwYDVR0j
BBgwFoAUjMUl/fcrgWtmwc6DbKk3zpmmgugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJX
TjIvMC84Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQzUyNUZERjcyQjgxNkI2
NkMxQ0U4MzZDQTkzN0NFOTlBNjgyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJXTjIvMC84
Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVf91AsAfA2CPuuqaXKVWA4/N8m7BzeNqXcbIpkzQ8s80IHAHWPXowJ5oUwQj
mWtcmROyQXuF2N1uK+5U4B3vOMXmV9PynvMeSYbAnui5avu/AhGqnN+lVcnwmDx0
hH0s04VGuudazIYOe2txwZDw+Z2kTse/eHjVxatoS2NEmTh3OBMQ93/sfIfW5j6d
b/EblM3gGhw0Juvd05fWrppg7IkKIhJp4+rw7k/51+ill/E/Pno142QPrUALi5gX
WGNCkkDiVqst8yFyIFKIMcVlZ4nBk3tlV0xwYQpIiQODyepLLf9NFSc89ZNxZyDe
JU7XEPBT4D8Vv/Xh2y8UVNdB4Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:53 2025 by rpki-client