Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
File:                     2CE7EAA613A389D3132F70754E25E343490494C5.mft (raw, json)
Hash identifier:          cPwtEJBpGgwRxygY1/zjITj87uvwSSvPHo6zHxSjzEw=
Subject key identifier:   17:A1:0C:17:62:F7:A6:26:98:35:23:FD:0D:23:A4:C5:73:E9:BD:CE
Authority key identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5
Certificate issuer:       /CN=2CE7EAA613A389D3132F70754E25E343490494C5
Certificate serial:       4089995C656919C9EA8570578592E9B478125F63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
Manifest number:          F3
Signing time:             Tue 04 Nov 2025 19:06:12 +0000
Manifest this update:     Tue 04 Nov 2025 19:01:12 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:12 +0000
Files and hashes:         1: 2CE7EAA613A389D3132F70754E25E343490494C5.crl (hash: ysrvydcfof8yRzbBi9crPo2qteP2U1iBBb6vNRrsOI0=)
                          2: 323830343a373266633a3a2f33332d3438203d3e20323730383838.roa (hash: Fx4/J/MqE9BRJ4Sq52LysZLWf5WyvTX4Otl3HqF/CM8=)
                          3: 323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa (hash: kdmXgNEvhfXURz4occhN0+YijpnG+3hZFeIKjD3tDkw=)
                          4: 3137372e3132392e3234302e302f32332d3234203d3e20323730383838.roa (hash: 5nGGZwTpebh0OCnrveEjEI/2RNQ7fU0miuQxZHXO1nA=)
                          5: 3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa (hash: IhdcOrs5pmeTTrvWH7LYozCkFl0rY30SxmvROM58D5c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl
                          rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:89:99:5c:65:69:19:c9:ea:85:70:57:85:92:e9:b4:78:12:5f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE7EAA613A389D3132F70754E25E343490494C5
        Validity
            Not Before: Nov  4 19:01:12 2025 GMT
            Not After : Nov  5 23:00:12 2025 GMT
        Subject: CN=17A10C1762F7A626983523FD0D23A4C573E9BDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:ce:6b:0b:18:a5:f6:d4:ba:ed:9a:73:60:
                    57:5b:fe:ae:b9:60:80:34:e6:79:f1:c5:69:d7:f1:
                    0e:50:d3:0a:75:5f:ca:01:4a:ba:2a:c7:ce:b3:42:
                    75:06:c6:1a:c4:a7:d6:38:49:c5:d1:52:40:d4:7d:
                    80:0f:de:aa:a6:7f:f3:98:42:fe:b4:71:9c:8b:a3:
                    c5:64:2e:72:62:91:7c:3c:01:d0:03:b6:24:95:47:
                    77:4a:90:c7:d8:5f:f6:1f:3a:f4:07:0e:dd:bf:5f:
                    6a:3c:ba:8a:b8:3c:22:1d:a7:a2:2a:f8:8d:ae:5d:
                    bf:60:56:41:c5:55:d3:11:86:54:c6:a6:04:f7:fd:
                    34:eb:99:7d:95:30:63:25:59:47:6f:60:b2:bd:17:
                    84:c9:ce:33:8b:3d:e3:ac:3a:97:e1:a0:17:8f:f5:
                    b9:67:69:61:97:c8:16:e4:d6:fc:4d:27:ea:74:cf:
                    87:9c:77:d5:ff:92:ee:8e:07:fe:82:dd:94:a4:ed:
                    2e:aa:56:ad:81:89:7c:65:e1:9b:ad:19:b0:3f:79:
                    4f:d5:28:e4:9f:b2:bb:a8:88:1a:0f:0f:a8:a7:20:
                    4c:5d:19:d9:21:6f:2c:1d:23:bb:a7:7a:95:20:17:
                    ae:e7:e4:39:2a:ff:aa:25:09:73:2d:1d:a6:77:d0:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:0C:17:62:F7:A6:26:98:35:23:FD:0D:23:A4:C5:73:E9:BD:CE
            X509v3 Authority Key Identifier:
                keyid:2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b4:ed:94:a9:8d:d4:86:4b:e8:e7:b9:6f:06:8f:5b:20:8a:
         e1:8a:60:82:bd:4d:dd:57:cc:0a:f2:1e:20:0d:ee:76:a4:c0:
         ef:d0:f6:51:a2:05:5f:93:22:f9:62:1e:03:c9:72:20:0e:cd:
         fd:cd:a4:e8:97:f2:6a:c6:49:34:99:b1:58:e3:0c:91:b2:c3:
         92:bf:18:5d:41:61:f2:af:2d:c9:1e:b4:2d:fa:c6:a1:62:35:
         78:82:5e:63:01:d1:d4:fc:9c:2a:b1:55:e5:cb:5f:72:ec:95:
         84:bd:54:9d:ac:49:8b:1e:cc:01:a1:8e:5c:82:37:8c:21:e4:
         87:a5:15:e3:35:0f:3f:8f:b7:68:59:ea:91:63:8a:f4:59:35:
         da:38:c4:a6:5a:32:a3:bc:d0:ca:91:f8:fa:e1:47:40:4b:57:
         91:88:6b:1d:02:8e:01:1a:fc:8f:ef:57:00:82:4d:c7:d9:7b:
         b0:54:4c:0e:7b:4d:8b:1b:c8:8c:ba:61:1f:76:e5:a1:ba:54:
         44:51:74:06:ff:1a:cd:35:5b:1c:59:9b:a7:89:80:c3:96:1a:
         f1:4f:87:1c:5e:6f:8c:69:5f:53:d2:75:22:5a:46:43:91:73:
         1d:b8:8d:43:5b:05:94:9b:9c:0d:90:16:a9:5d:bd:33:a9:10:
         a9:f3:7c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:47:49 2025 by rpki-client