Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
File:                     C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft (raw, json)
Hash identifier:          tEg8tF3mWmIJiyTuSe0M1nm1yKdGk+Ndg90vCL5+oCo=
Subject key identifier:   2C:FD:20:70:1C:10:9D:3A:9A:B1:04:B4:3A:D7:AA:FD:7D:FF:0A:4C
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Certificate issuer:       /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial:       58A2944DFD7BBBA5B9A4A96B4503636A32085473
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
Manifest number:          71
Signing time:             Wed 05 Nov 2025 01:59:58 +0000
Manifest this update:     Wed 05 Nov 2025 01:54:58 +0000
Manifest next update:     Thu 06 Nov 2025 04:54:58 +0000
Files and hashes:         1: 3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa (hash: iVJno2DRUNvYOw0fi3CRClqrNAAnWQhLIERSk2jcYG0=)
                          2: 323830343a323763303a3a2f33322d3438203d3e20323633393230.roa (hash: /r3PcgERgJ45Sa8m0u/izoO95Z5adsvX0cA0azm8B8c=)
                          3: 3133382e3138352e3234302e302f32342d3234203d3e20323633393230.roa (hash: 4x1rp4Ud8mDyOiKUDp0v85bPNjDPNDViHqDK02rGVgo=)
                          4: 3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa (hash: Tr7fHp+T6Rna7ne5raBAeRnK9Ry4NlOEHktnSkWKl1U=)
                          5: C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl (hash: WN3jB0K4VU6KpaO9TrdWIuv0G1FwuHJI9bGrr0GjorA=)
                          6: 3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa (hash: DhxROd/MG/eJwMRaCh6dLLXSgyj6KwaETcbMSC78Rck=)
                          7: 3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa (hash: FA7pllzomTZtMxKRTRmnNiEG2GJ878cgSEVc9pJQBzs=)
                          8: 3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa (hash: WLyJPpW/RhefJCbfVpwMun3QfCQU0tbzDHnWziwzN0g=)
                          9: 3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa (hash: WocO9G2FJ4Y3NA/VvRDK1jr/jgat9qKUYqyu7nN+InM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 04:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a2:94:4d:fd:7b:bb:a5:b9:a4:a9:6b:45:03:63:6a:32:08:54:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
        Validity
            Not Before: Nov  5 01:54:58 2025 GMT
            Not After : Nov  6 04:54:58 2025 GMT
        Subject: CN=2CFD20701C109D3A9AB104B43AD7AAFD7DFF0A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:2d:31:82:af:45:43:34:55:b8:6f:69:65:
                    ff:12:c6:44:4e:00:80:b0:95:35:04:dc:25:11:17:
                    37:7a:69:7b:ab:0f:f4:a2:a7:43:f0:ea:20:49:49:
                    03:05:b4:6d:eb:81:fe:6e:62:a6:96:7d:76:3c:d7:
                    47:35:d6:b0:c2:2a:25:7a:27:d5:b3:e4:bf:f9:ab:
                    ee:f1:30:71:db:d2:54:ac:39:55:30:c5:a6:87:1b:
                    e8:d7:44:f8:bf:ee:82:d6:21:9d:26:13:14:a2:fb:
                    c6:81:38:d2:6b:b9:b5:5a:d8:26:ba:64:ba:ea:d2:
                    50:28:f1:44:e7:1d:f0:0c:0d:31:d7:2f:84:fa:17:
                    b0:b7:8f:cd:1e:e6:e9:37:8d:8a:2c:63:78:ca:1e:
                    b0:7a:bf:45:6e:4d:fe:19:90:18:90:04:66:8e:62:
                    ba:df:39:36:8c:f1:9a:d6:03:2f:16:d6:b5:61:83:
                    47:49:f5:1a:c4:0e:1f:fa:57:26:2e:ae:ab:88:2c:
                    ae:5e:cc:cd:18:5c:50:ee:56:71:7a:74:0f:a4:ef:
                    33:52:1d:c7:93:2c:7b:be:24:c2:d2:00:23:57:82:
                    76:45:28:6a:86:1c:34:11:c8:5a:96:4d:ec:60:0a:
                    bc:9c:82:84:7d:75:e4:22:4d:41:3e:35:f4:11:38:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FD:20:70:1C:10:9D:3A:9A:B1:04:B4:3A:D7:AA:FD:7D:FF:0A:4C
            X509v3 Authority Key Identifier:
                keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:07:4b:56:78:55:90:87:66:53:45:45:8b:09:24:1b:2e:8e:
         0d:86:5f:4f:3a:ff:e5:13:b6:8a:00:34:bb:b2:eb:9c:5e:cf:
         e3:f5:ec:99:ea:6d:5c:ad:0f:11:9e:5c:38:9e:52:70:2b:ea:
         7b:13:61:8a:ae:95:e7:e4:05:9c:ee:ca:25:76:56:81:5a:c7:
         42:11:6d:eb:a5:ba:b4:b6:a0:99:a1:8a:8c:fe:57:f2:22:e2:
         d0:b3:00:65:37:df:ea:2c:63:35:57:6c:8c:27:29:ad:c8:68:
         38:22:13:52:31:7f:b7:88:8e:70:0b:3e:3d:31:50:00:95:80:
         88:71:c7:16:9f:ae:f3:ff:8c:c0:37:bf:e8:a4:ed:c3:26:87:
         de:5f:96:bd:11:38:4c:74:7b:62:0f:bb:a1:db:87:fc:e5:fe:
         37:05:91:cd:48:d8:85:96:a7:2c:fe:d0:ff:a0:05:60:fc:0a:
         40:60:9d:9a:7f:31:76:87:f3:07:6f:7e:54:b1:f1:43:90:ab:
         96:98:bf:77:fa:36:c1:61:e1:03:48:5f:59:a0:2e:b1:9d:8b:
         fd:5d:1d:10:4e:36:fb:ac:04:22:59:01:44:32:35:97:db:62:
         e7:20:1f:fc:07:b0:a1:f5:29:e5:13:3b:a4:87:c6:0c:b9:0b:
         88:ac:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:50:26 2025 by rpki-client