Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
File:                     CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json)
Hash identifier:          sfRgh8EA8xzvIAZv6qeICEvt2lgsikaukZv11rkw994=
Subject key identifier:   85:F2:E5:D2:9C:FD:BF:A6:2C:15:99:58:93:D6:36:AD:DB:D7:F8:7D
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       7F3723418058A732BF7BAE1C8BFB7C01DEF0FDB1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
Manifest number:          0305
Signing time:             Tue 04 Nov 2025 18:13:28 +0000
Manifest this update:     Tue 04 Nov 2025 18:08:28 +0000
Manifest next update:     Wed 05 Nov 2025 20:56:28 +0000
Files and hashes:         1: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: I5x1cCqjvj9B+iuynDFs7uH0TQxnAhyUg1ZBrpkpt+4=)
                          2: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: 5G9Dy/D8jUa6k6N7o6A0OHuAONqqnFUQzjSegVsSatU=)
                          3: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: 0I6R76WFWVe6GvnC6HPSO5DNoIpkRloxekrdv5uaocA=)
                          4: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: xee9sI4lZhpA/ae1SfSHZt6s0IIwr6d9n4pRuri1Uv0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
                          rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:37:23:41:80:58:a7:32:bf:7b:ae:1c:8b:fb:7c:01:de:f0:fd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Nov  4 18:08:28 2025 GMT
            Not After : Nov  5 20:56:28 2025 GMT
        Subject: CN=85F2E5D29CFDBFA62C15995893D636ADDBD7F87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:da:ec:7a:f5:83:f0:50:2d:f7:02:fa:4e:
                    ee:c3:b6:10:d8:97:91:65:79:24:86:fb:3e:24:1e:
                    9c:7e:f3:79:bb:81:8f:86:89:e4:39:c4:19:d8:bd:
                    2a:68:ba:f9:90:e8:79:23:64:0c:ac:0a:0a:e1:f4:
                    bb:48:e7:0a:0c:0d:9b:6d:79:ab:12:b7:63:fc:69:
                    e2:46:a7:e7:2b:10:42:4a:10:de:6f:2b:09:3b:4d:
                    c0:16:da:67:51:22:3a:ef:2e:11:c8:c6:68:b9:43:
                    71:d6:17:92:9f:7e:39:c0:c6:e6:fb:0e:a0:fe:d6:
                    74:00:4c:f0:49:f1:2f:be:88:13:01:29:9d:c1:1e:
                    a5:6e:12:55:87:0b:7d:9e:b6:a3:1f:04:f1:a4:2e:
                    2e:77:7e:d3:79:93:10:88:f9:92:90:57:8a:55:10:
                    18:ee:5d:0e:7c:cf:b3:0b:79:74:87:88:f5:33:86:
                    10:48:56:97:c3:36:09:45:8a:98:bf:d6:9f:56:50:
                    16:58:50:62:df:f6:2d:90:7c:38:2a:5a:91:03:ba:
                    e1:2b:4a:12:cf:ad:c6:9b:1e:eb:63:0b:e7:33:8b:
                    bc:81:0c:14:fb:2b:5c:a2:59:52:f5:7b:65:ee:72:
                    d0:2e:00:9d:c5:a7:97:17:9a:e3:68:9e:ca:3d:0b:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:E5:D2:9C:FD:BF:A6:2C:15:99:58:93:D6:36:AD:DB:D7:F8:7D
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:a5:ca:97:3f:c1:ad:69:2a:f6:cf:f5:12:55:a1:e2:da:
         24:45:04:2c:94:d6:f1:2b:05:05:94:13:4a:f1:aa:f3:f1:90:
         db:ae:05:ab:9e:9f:1e:be:e3:8c:2d:9d:55:f0:f8:f3:4f:69:
         1f:92:77:03:73:d2:1d:75:31:19:a2:09:0f:97:0b:f3:3d:43:
         73:55:44:e8:cd:2f:a8:68:13:58:91:45:bc:9e:ba:b6:5e:fa:
         eb:c7:06:fb:04:a9:68:50:70:c4:e0:1c:1d:0d:0c:72:1c:43:
         c8:01:7b:f4:f5:d1:66:a1:33:f1:12:1d:2b:72:12:0c:98:51:
         03:07:02:17:53:2f:e2:93:da:9e:f6:f9:76:03:a1:6c:3c:d0:
         e9:da:63:1f:d2:38:7c:b9:f7:cb:c7:1f:78:07:0f:d9:b4:a3:
         9c:9a:99:e6:7c:8b:c1:8e:54:50:bb:71:7d:c3:58:e4:b7:39:
         de:22:f3:32:d9:71:97:c2:fd:c9:a0:ae:b0:c3:f4:73:9f:00:
         20:89:f3:61:48:a7:75:27:5f:29:f2:9d:f5:dd:bb:7a:24:16:
         4c:b0:dc:1b:77:60:6a:63:3d:33:c0:0e:eb:ae:89:0e:73:15:
         46:09:c2:f8:62:04:17:0d:02:32:c7:11:9a:fd:20:6f:81:e6:
         2c:73:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:20:09 2025 by rpki-client