Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
File:                     17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft (raw, json)
Hash identifier:          1oJ99nkYtDEOOYS9eTqPVvORnV24bY/xkpUvTbDPaiw=
Subject key identifier:   0E:AB:B6:0F:E1:AE:7C:41:36:7D:2A:44:95:10:E3:2B:D2:20:1C:12
Authority key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE
Certificate issuer:       /CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
Certificate serial:       2A349E67DAAA0BFD9DAB8E744EEC91B549274299
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
Manifest number:          01B1
Signing time:             Tue 04 Nov 2025 15:09:57 +0000
Manifest this update:     Tue 04 Nov 2025 15:04:57 +0000
Manifest next update:     Wed 05 Nov 2025 15:22:57 +0000
Files and hashes:         1: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl (hash: cQ8TYQFcT5fvLz5EzM9VKo/D5KWpK/lJcL2Cuy5MNEo=)
                          2: 323830343a393165343a3a2f33322d3438203d3e20323734363733.roa (hash: s21rNeQfq9YTEKaQ6qP+omsM/9QsW3wpcSyzvCuwbG0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl
                          rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:34:9e:67:da:aa:0b:fd:9d:ab:8e:74:4e:ec:91:b5:49:27:42:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
        Validity
            Not Before: Nov  4 15:04:57 2025 GMT
            Not After : Nov  5 15:22:57 2025 GMT
        Subject: CN=0EABB60FE1AE7C41367D2A449510E32BD2201C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:7d:8a:b5:3f:fb:df:2c:4f:64:f1:be:c4:
                    44:59:2f:3b:41:56:6a:07:51:b0:c9:ba:81:76:d2:
                    4c:eb:18:27:63:d7:14:de:82:b6:d4:e7:78:e4:49:
                    c8:e4:ad:21:12:4c:1d:46:3a:64:69:2a:01:73:4f:
                    6b:0f:74:1f:87:b1:67:4a:a1:4b:f7:fc:36:eb:ce:
                    11:b7:6d:d7:c7:1d:bd:19:ae:29:e7:74:77:90:92:
                    e4:2a:e1:22:85:28:29:83:4b:b7:6e:96:da:f9:c3:
                    b4:e4:b9:f1:7b:01:c4:20:cb:be:1c:bc:24:21:8c:
                    e2:5d:72:b5:fa:72:6a:50:05:ec:d4:1b:74:ab:17:
                    44:ae:8d:ee:72:c5:9f:1b:0d:f3:ef:36:d8:86:60:
                    2a:f3:4f:5a:8c:11:ce:a0:9e:1b:4e:7d:70:ac:4a:
                    56:f6:74:74:d3:6b:ac:d2:6d:05:c4:76:74:74:11:
                    2a:f0:58:dd:5e:3d:da:a1:da:e7:1f:c2:74:6d:79:
                    a2:d5:11:b5:c2:dc:a4:ae:b0:7d:d0:55:de:94:f5:
                    73:b9:fe:d8:08:60:23:44:c5:8f:19:84:84:ad:08:
                    5f:37:8a:6c:22:6a:5b:a2:2a:9f:1f:cb:ed:57:7f:
                    b5:3c:8e:ff:cd:59:6c:e4:6d:3b:ac:fc:00:ef:dc:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:B6:0F:E1:AE:7C:41:36:7D:2A:44:95:10:E3:2B:D2:20:1C:12
            X509v3 Authority Key Identifier:
                keyid:17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:26:7e:fe:01:7e:9e:cb:80:3a:5b:0c:00:c3:1e:52:48:69:
         6a:81:82:3e:fa:a1:99:bb:d9:f2:9c:1f:8e:97:89:9a:f7:d1:
         3a:b0:4c:be:43:22:16:81:37:eb:c4:1c:06:15:41:99:87:5c:
         9b:10:54:45:5d:e1:50:04:62:5b:67:ad:73:9d:0c:f6:8c:13:
         b9:9a:cc:a9:3f:93:9f:f8:71:84:91:bd:03:00:54:2f:3b:9e:
         28:4b:8a:5d:cf:48:40:7a:ca:19:cc:e0:38:02:f5:9d:60:3b:
         aa:c2:88:ab:af:ea:49:27:57:cc:38:df:00:e9:1c:1d:97:7e:
         a8:c2:ca:8f:76:28:02:23:f7:57:12:32:e6:11:44:b4:61:fd:
         fc:62:69:b7:e4:bf:42:0f:7a:6d:eb:fc:1a:a3:fe:a4:af:ea:
         2e:d3:f6:5a:f0:ba:fe:d7:9b:58:cf:8b:73:9b:05:9a:52:d4:
         34:32:e0:03:05:b7:cc:3c:45:ec:f8:88:b7:22:8c:9d:7d:2f:
         0d:d5:b8:06:15:8b:b1:27:3f:b7:37:47:90:76:9c:a1:37:eb:
         35:75:06:82:e8:80:b6:c5:74:e1:81:ad:de:9c:21:d1:b8:f4:
         a7:28:ed:97:5c:a3:ca:a6:b6:6f:19:22:3b:45:5f:1e:ac:54:
         5c:d0:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:46:37 2025 by rpki-client