Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.mft
File:                     EA41EA4B343A73C6DA276C8B60D6FF873F791A82.mft (raw, json)
Hash identifier:          YbGCWpoKTzRyxzWbRDlGslQXmVWvyKYeY7oEBIND0qw=
Subject key identifier:   E3:1A:A8:A1:15:C5:05:54:C0:93:D5:CF:78:80:C4:EA:6C:CA:03:52
Authority key identifier: EA:41:EA:4B:34:3A:73:C6:DA:27:6C:8B:60:D6:FF:87:3F:79:1A:82
Certificate issuer:       /CN=EA41EA4B343A73C6DA276C8B60D6FF873F791A82
Certificate serial:       1C8911A6F366053A97467E7559F98625C8E9BDCA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.mft
Manifest number:          01AF
Signing time:             Sun 02 Nov 2025 21:08:25 +0000
Manifest this update:     Sun 02 Nov 2025 21:03:25 +0000
Manifest next update:     Mon 03 Nov 2025 22:59:25 +0000
Files and hashes:         1: EA41EA4B343A73C6DA276C8B60D6FF873F791A82.crl (hash: MpLe0kgv49GWtaArLoR4/CCjCrMp+AGFhtY9G1JQ+OE=)
                          2: 323830343a343565343a3a2f33322d3438203d3e20323632353637.roa (hash: 9tXAtorso9ZN9hnwsqW519R6FtrC9Jj/X6p0m7o9H8s=)
                          3: 3139312e33372e3139362e302f32322d3234203d3e20323633343034.roa (hash: M74WGLwrtjr5QluuL+40/UwPcOArxPvoKoM2/TXXSNc=)
                          4: 3137372e37332e39362e302f32312d3234203d3e20323632353637.roa (hash: 0DDvovuPytBbXjj+InAo1882Ri3zLX3NeQx1/Nujyu8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.crl
                          rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 22:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:89:11:a6:f3:66:05:3a:97:46:7e:75:59:f9:86:25:c8:e9:bd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA41EA4B343A73C6DA276C8B60D6FF873F791A82
        Validity
            Not Before: Nov  2 21:03:25 2025 GMT
            Not After : Nov  3 22:59:25 2025 GMT
        Subject: CN=E31AA8A115C50554C093D5CF7880C4EA6CCA0352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:a3:e3:69:9d:8d:72:0c:fc:da:d6:89:2f:
                    ee:7e:74:d0:24:13:a0:80:7f:ba:55:bf:1d:df:02:
                    7e:3b:25:f3:fb:03:51:3d:48:13:79:16:86:6b:77:
                    81:41:37:b6:ef:1d:51:e0:b6:59:0f:12:a7:c8:04:
                    1f:df:bc:e0:0a:25:6c:7a:f8:3c:b9:19:0b:23:af:
                    84:93:e2:02:b9:5a:e6:89:30:c1:ad:c5:8d:08:2e:
                    94:15:c9:6d:9b:fb:b5:9c:7e:58:91:da:78:a3:37:
                    bd:99:ec:bd:49:b9:6d:3e:b3:55:79:bd:c2:56:db:
                    5a:c2:f1:a8:7b:46:0d:32:19:14:f5:54:45:6d:c6:
                    57:0d:66:65:80:3f:57:cb:bf:ae:40:8d:71:6e:ab:
                    97:a4:20:d9:7f:27:d5:20:71:35:11:36:53:c2:35:
                    cd:e4:83:3b:12:30:74:cf:03:95:9d:02:a3:09:3d:
                    f7:66:f2:9d:d5:a8:b8:aa:ed:f8:b7:04:ca:2a:50:
                    bc:fe:62:0b:48:65:ad:d1:74:2c:3b:04:42:75:64:
                    7c:c2:ff:39:3f:7f:f9:39:86:30:6d:b6:6c:ef:5a:
                    97:8e:04:07:74:fd:3e:ef:85:4b:a9:44:c0:f8:1c:
                    3a:f5:77:3c:f2:ab:97:a4:63:c5:a9:e7:85:25:3f:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:A8:A1:15:C5:05:54:C0:93:D5:CF:78:80:C4:EA:6C:CA:03:52
            X509v3 Authority Key Identifier:
                keyid:EA:41:EA:4B:34:3A:73:C6:DA:27:6C:8B:60:D6:FF:87:3F:79:1A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:ca:dd:0b:2b:85:f7:f0:fa:ee:a5:58:fd:ed:0b:c6:22:
         58:71:9b:81:11:00:54:0c:9c:35:b0:53:37:7d:1f:16:5c:ff:
         0e:66:8a:11:d3:db:c3:37:d6:66:7e:fb:c2:08:5f:f9:d7:89:
         10:69:ce:32:d9:a1:8f:d2:8a:f8:fe:63:55:56:35:6d:d9:56:
         5a:44:83:b2:99:d6:3d:87:8a:71:b7:29:9e:e5:61:a2:e1:9c:
         ad:7a:f9:64:f1:ad:88:9d:ab:16:e0:2c:1c:f7:0f:e7:80:5f:
         41:ff:82:b6:2b:69:4a:d5:d5:59:c6:27:14:e7:ec:88:df:06:
         d5:5e:a2:b6:b7:9d:71:57:ce:c8:70:47:b4:5f:43:98:75:cb:
         4f:8e:ea:42:72:61:bc:19:be:bd:f6:1a:e5:9e:eb:14:53:c1:
         d9:b6:14:d9:36:a3:92:18:62:57:e9:61:53:e6:ae:f1:12:2b:
         13:25:dd:bc:4d:59:b1:62:08:77:7f:47:14:8f:c9:ca:91:75:
         8a:b4:6c:af:08:bf:40:73:cd:b0:53:b9:e5:c6:9b:c3:61:ac:
         16:4d:31:06:8a:37:f6:b5:39:63:0d:0c:bf:fe:c7:6d:88:21:
         4e:a1:94:2e:9b:41:13:a5:64:bd:ae:87:3b:01:69:b0:7e:43:
         9b:63:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:55 2025 by rpki-client