Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EE22BA35CF34F128B35621D9C25D3D563C20B50A.mft
File:                     EE22BA35CF34F128B35621D9C25D3D563C20B50A.mft (raw, json)
Hash identifier:          yeHtLCCDM4lE6SK9bGGpgcBw4KkeXyATJzrGxcNbApg=
Subject key identifier:   40:5A:B1:F1:B2:2D:21:B4:C0:00:EA:C8:E2:A9:94:D8:1C:C8:3F:6D
Authority key identifier: EE:22:BA:35:CF:34:F1:28:B3:56:21:D9:C2:5D:3D:56:3C:20:B5:0A
Certificate issuer:       /CN=EE22BA35CF34F128B35621D9C25D3D563C20B50A
Certificate serial:       6943FB3E06BDD1DF214B1BC412E0C7CAF0522D5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE22BA35CF34F128B35621D9C25D3D563C20B50A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EE22BA35CF34F128B35621D9C25D3D563C20B50A.mft
Manifest number:          41
Signing time:             Tue 04 Nov 2025 09:58:37 +0000
Manifest this update:     Tue 04 Nov 2025 09:53:37 +0000
Manifest next update:     Wed 05 Nov 2025 13:42:37 +0000
Files and hashes:         1: EE22BA35CF34F128B35621D9C25D3D563C20B50A.crl (hash: 932DabYs9yrK+t+9owDaakU61vb4DGFp6jMMEj2RTLc=)
                          2: 323830343a333438633a3a2f33322d313238203d3e20323635343634.roa (hash: oXYGEwgQSMcNjq/s2U0HgQdrR7dD5TjCP3BYbBj0bXg=)
                          3: 3136382e3139362e36302e302f32322d3332203d3e20323635343634.roa (hash: SOwvuWe0OMhFUaYPG8XzU1svGIq61/67Gj4iTbAvbAc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EE22BA35CF34F128B35621D9C25D3D563C20B50A.crl
                          rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EE22BA35CF34F128B35621D9C25D3D563C20B50A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE22BA35CF34F128B35621D9C25D3D563C20B50A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 13:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:43:fb:3e:06:bd:d1:df:21:4b:1b:c4:12:e0:c7:ca:f0:52:2d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE22BA35CF34F128B35621D9C25D3D563C20B50A
        Validity
            Not Before: Nov  4 09:53:37 2025 GMT
            Not After : Nov  5 13:42:37 2025 GMT
        Subject: CN=405AB1F1B22D21B4C000EAC8E2A994D81CC83F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:dc:a1:f3:63:cf:e0:c5:d0:57:7f:0b:32:
                    e8:68:1b:ac:63:45:b0:fc:ac:ab:35:de:a9:20:68:
                    fe:0f:51:28:99:a8:c8:09:4a:4c:4e:57:69:75:86:
                    9a:84:db:7c:6b:69:bd:9f:ae:e6:d3:0a:85:34:cb:
                    8c:ae:2c:1d:3b:85:31:36:72:59:84:45:fb:4f:a5:
                    44:45:96:0d:61:7b:b5:69:47:1b:9e:7b:ca:e8:72:
                    3b:05:8a:04:60:77:1e:40:fb:5c:d7:67:15:c0:c8:
                    37:b2:fb:c4:1f:46:76:cb:6e:55:9d:69:b3:89:76:
                    6f:4b:24:47:e2:dc:c9:c7:4a:ae:c7:38:f7:90:01:
                    97:68:08:86:17:60:c0:81:f9:cb:df:09:84:d1:fc:
                    97:fa:51:f7:77:78:23:97:88:d1:33:ae:27:29:f8:
                    28:6e:e1:90:c5:66:2a:59:af:92:b5:4d:1b:67:8e:
                    77:23:89:e5:8a:29:bf:6c:80:e3:eb:7e:de:54:34:
                    e6:16:e0:67:2d:1e:3b:c3:6e:60:ef:ca:3d:56:ef:
                    1a:47:9b:88:6f:2d:69:46:b2:95:cd:e7:01:73:8d:
                    e1:a3:d2:c3:7b:a0:1b:77:54:e0:2e:95:a0:2b:79:
                    c0:3d:32:23:f4:c3:89:7f:7f:13:ae:4e:98:b1:c3:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5A:B1:F1:B2:2D:21:B4:C0:00:EA:C8:E2:A9:94:D8:1C:C8:3F:6D
            X509v3 Authority Key Identifier:
                keyid:EE:22:BA:35:CF:34:F1:28:B3:56:21:D9:C2:5D:3D:56:3C:20:B5:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EE22BA35CF34F128B35621D9C25D3D563C20B50A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE22BA35CF34F128B35621D9C25D3D563C20B50A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EE22BA35CF34F128B35621D9C25D3D563C20B50A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6a:42:a9:fc:a1:95:f0:5c:e9:96:11:98:6d:1a:7d:ed:5a:
         73:59:35:2f:27:d0:63:e0:a7:39:a8:45:80:d3:9b:94:36:2a:
         c2:38:23:fa:8b:ca:63:38:36:aa:7c:3b:31:d7:eb:b9:88:91:
         b8:f2:b0:39:42:cb:61:f6:1a:20:56:92:7c:54:42:4d:79:f4:
         62:a5:a3:d5:f1:21:c7:17:c0:c0:6f:25:bb:46:6c:3b:f4:42:
         09:63:6c:67:b2:cc:ac:36:c7:92:e2:6a:bf:96:85:98:4b:f2:
         42:83:66:85:8c:13:c0:60:bf:48:00:94:ae:08:82:26:ad:11:
         fa:a7:10:ee:cc:5b:3c:6a:dd:f2:70:f1:0c:54:4e:eb:fd:1e:
         d4:f7:dd:5d:e2:ca:88:09:c2:61:1e:67:31:93:1a:ea:ce:a5:
         bb:59:90:49:68:2c:af:e6:b5:17:1c:e1:1e:dc:79:73:a7:0a:
         30:31:a6:eb:48:4b:0e:95:93:c9:b7:dd:51:fe:fc:96:13:e9:
         5f:f7:a3:10:7a:61:bf:54:8f:52:3b:21:49:9e:ab:a8:cf:00:
         0e:1a:cd:9c:ad:18:c3:a2:8f:46:bd:eb:ae:52:11:32:d7:3c:
         fe:e9:dd:03:f4:f8:12:4f:4d:bf:b2:30:65:a7:20:4f:ed:e3:
         98:e9:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:36:51 2025 by rpki-client