Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
File:                     9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft (raw, json)
Hash identifier:          i7E40RMH1BiX6hFeF09R6v04tVLgwi+I+mIqGAID+48=
Subject key identifier:   8C:63:6F:7A:26:97:D9:37:03:7E:B9:78:E0:02:6D:88:08:65:BC:8E
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       524C00A7D2E7CFB95E20FD6BA29B59455A6136BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
Manifest number:          88
Signing time:             Mon 11 Aug 2025 02:45:15 +0000
Manifest this update:     Mon 11 Aug 2025 02:40:15 +0000
Manifest next update:     Tue 12 Aug 2025 06:30:15 +0000
Files and hashes:         1: 3136382e302e39342e302f32332d3233203d3e20323635323331.roa (hash: boARMv+KextnY0lTD91sQDog/0RZ6aWlWkvUEJ9jy6M=)
                          2: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl (hash: 1cRlD4D4c1qWrcPXOsXS2WYxkn+SW1lS154dDldJnp0=)
                          3: 3136382e302e39322e302f32332d3233203d3e20323635323331.roa (hash: dRH1WvpSwekmglWG3rDq1VTpWxYqnyPGTxeGGy/2bxM=)
                          4: 323830343a326361303a3a2f33322d3438203d3e20323635323331.roa (hash: NmLkvgmPWpP3+AIUgkQshTGCVh+ID6Htu2PNGa7de/0=)
                          5: 3136382e302e39342e302f32342d3234203d3e20323635323331.roa (hash: 1qlhPXsbe2YqvzA3+1VrC0oc1BrSaTzO8dGHX3NX6iw=)
                          6: 3136382e302e39322e302f32342d3234203d3e20323635323331.roa (hash: F7tTFMg2I2nUQcrRSqdu9LIlpqNtaAYXjo2W8vgNxAA=)
                          7: 3136382e302e39352e302f32342d3234203d3e20323635323331.roa (hash: wQlYnivjl5FtxYxNCOs7C52xmlf9Le1Ei0u+ubyv6zQ=)
                          8: 3136382e302e39332e302f32342d3234203d3e20323635323331.roa (hash: m+x74TcCn/ocgyBc3RM05glLKi8fYIlFUhBKwpn4K2c=)
                          9: 3136382e302e39322e302f32322d3232203d3e20323635323331.roa (hash: ZU9qJeLM9IJt8wNEyuuoMiWoz4PvdDcmyDLtRxf/I3Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4c:00:a7:d2:e7:cf:b9:5e:20:fd:6b:a2:9b:59:45:5a:61:36:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: Aug 11 02:40:15 2025 GMT
            Not After : Aug 12 06:30:15 2025 GMT
        Subject: CN=8C636F7A2697D937037EB978E0026D880865BC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:df:56:00:75:86:31:e1:b5:4e:15:5a:fb:
                    25:8b:0e:47:12:eb:2a:6a:5d:6d:80:1c:6f:54:45:
                    a2:9f:b0:60:61:f7:06:88:fc:e5:0f:9b:ce:6c:a0:
                    cd:a0:d8:74:be:0c:bf:3a:26:fa:c7:7e:48:2c:c7:
                    e7:bd:20:17:22:f6:a8:3d:b5:aa:8d:47:c1:2c:40:
                    23:b6:42:26:dd:e3:03:f0:e8:49:fa:a9:02:de:5d:
                    69:9d:bb:60:98:5c:1e:fd:01:a0:c0:b6:d8:10:04:
                    70:61:9f:b1:a5:49:92:d4:25:d9:cd:cb:bb:c4:df:
                    bb:73:07:9d:e4:20:dc:64:52:b8:74:17:59:db:04:
                    29:5e:1b:11:47:ab:5e:c0:a9:ef:4f:93:c7:94:37:
                    a4:a2:4d:56:94:9c:4c:d5:68:bb:d8:cd:2d:51:c7:
                    8d:40:0d:07:57:39:34:06:3b:d8:2e:0d:1b:40:86:
                    4b:12:2d:cf:8d:fe:db:7d:60:7c:2a:b1:6e:0c:46:
                    30:47:54:2f:c1:d5:88:93:d5:b3:1a:f7:b7:1d:67:
                    ee:3d:2b:85:28:65:dc:14:eb:34:f7:3f:20:1b:2a:
                    27:d0:9d:e9:53:7a:90:7e:29:d8:3f:13:0f:22:f6:
                    4e:26:07:98:27:09:ea:d7:11:be:16:4a:ed:2d:75:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:6F:7A:26:97:D9:37:03:7E:B9:78:E0:02:6D:88:08:65:BC:8E
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:3e:16:39:50:66:3f:2d:ad:6b:9d:d0:18:17:3f:d0:33:
         7f:89:03:2e:54:3a:15:f0:95:65:49:b4:a6:f8:d6:ec:04:63:
         c7:3d:95:08:cc:25:01:74:20:bf:21:b1:2d:cf:e1:40:57:89:
         06:fa:28:43:a8:f7:4d:12:9d:63:f6:d5:0a:8e:73:c5:a2:0d:
         2a:2c:c9:78:27:d7:ff:8a:d7:55:7e:67:ba:14:50:ed:dc:7c:
         f3:42:8d:c5:d9:df:26:b1:46:62:d4:37:2a:91:02:72:2a:5e:
         e8:f0:07:7b:2c:cb:a0:32:04:55:d2:70:86:63:8a:bd:1f:df:
         9b:67:8b:d0:94:19:56:17:fc:c1:a9:be:0e:28:f5:c8:0d:be:
         8b:01:31:c2:ac:68:c0:94:da:08:fd:98:31:b8:65:56:ab:70:
         fa:bb:43:18:9e:37:e4:c4:50:1e:f8:65:51:5c:69:39:32:fd:
         48:37:8b:52:42:33:9a:f8:d5:b2:cc:17:eb:71:dd:52:ca:ca:
         6f:07:e3:d6:31:72:e6:87:f2:6c:21:6c:32:fe:39:95:82:90:
         29:d7:01:2b:51:0b:e5:9b:b7:58:ea:95:9a:90:22:f2:6b:32:
         13:4c:ee:81:da:65:f8:28:7e:a0:ba:6f:2f:28:dc:67:c6:ce:
         af:0c:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:39:18 2025 by rpki-client