Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          kTylY2vvREIUMdX6fDx81CqlocGDce/VgI7HYPd78GA=
Subject key identifier:   28:08:34:C8:F7:C3:A2:37:E6:EE:48:CA:1B:2D:8E:97:89:7C:55:93
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       53F906160F99D44745F3D08F0CB0441F596972D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          CF
Signing time:             Thu 18 Sep 2025 01:18:27 +0000
Manifest this update:     Thu 18 Sep 2025 01:13:27 +0000
Manifest next update:     Fri 19 Sep 2025 02:22:27 +0000
Files and hashes:         1: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: 7pFJZg33ygAxlXjIYUNjCPDcdVIiaggt4kaSJ8atORw=)
                          2: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: z12jWJsYAgf4Q8uXIp9romFVhEVrF2GPUQ954Q/vCIg=)
                          3: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: Fgdb2V1ajEjSs5A7+TBCGITRfBcAfDTtdOenlLw9X2g=)
                          4: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: SalagO4BMzv1/knGQHz2yAYQVYHEcDvMZE/ItLwvu20=)
                          5: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: kH3S536BXFFRY3Ukkc9PPKI4LEkvpGJ3fV00M/ofsag=)
                          6: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: F+mot+FSQP0fE+UXpORQq/D2rcEErdSMSnaWMURftDk=)
                          7: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: 19y9suZg81aWvWRGbanLF5MDE0/A6R29ASgcaolBFdk=)
                          8: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: pVYTDtKIwEPErOqEGAxTC17UiiZyOr8zRm73AdHH6KE=)
                          9: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: +6WjOz0TdIGXb/bGwzoD0vsZ2ojm0vi6UpIVQFugdE4=)
                          10: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: nPvlApQHq682NNJsbh8dkSCIG7wF3PneEPHVSQXHVHs=)
                          11: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: lUtz7MKekr+hul63UNYZ6gl3ng1S5V5Tq0UmFue47Dc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f9:06:16:0f:99:d4:47:45:f3:d0:8f:0c:b0:44:1f:59:69:72:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Sep 18 01:13:27 2025 GMT
            Not After : Sep 19 02:22:27 2025 GMT
        Subject: CN=280834C8F7C3A237E6EE48CA1B2D8E97897C5593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:f4:82:e6:97:6a:5b:12:9e:4a:87:1c:62:
                    57:3d:f2:79:4f:50:f3:86:e4:7a:2a:24:fd:75:b5:
                    ef:62:df:10:ac:4f:41:08:73:47:d2:62:a8:bc:82:
                    1d:7e:3a:04:01:97:d3:b3:4f:3c:f5:bb:7f:27:01:
                    ca:69:67:53:07:ea:bd:e9:d5:af:4f:9f:9f:9d:da:
                    fe:68:91:4e:c2:3e:c5:a6:44:a1:32:8b:57:24:6f:
                    ff:ae:cf:cd:ca:f1:7e:64:91:d9:6b:4b:6c:58:fb:
                    b2:9b:e3:13:b0:8e:ab:75:5d:18:54:7a:63:0b:8f:
                    b9:01:21:94:b6:1f:fe:b6:01:bc:5c:83:85:20:e8:
                    d5:0f:99:ef:60:78:6d:43:a3:9a:d0:c5:4e:0e:35:
                    51:63:82:ca:bb:d2:a8:88:94:c1:06:f7:dd:2c:66:
                    00:13:21:e4:d6:75:68:45:d9:f0:7b:c2:ee:d7:57:
                    56:b3:05:b9:fa:49:45:8f:4a:9c:07:90:c0:be:a6:
                    98:ab:6d:ce:e2:e2:d2:b1:1a:b1:58:90:81:a5:45:
                    a4:f8:24:f6:3f:2e:ce:47:cf:89:84:32:60:13:04:
                    ab:e4:f7:8c:22:2e:7e:d7:c0:2c:1b:48:06:9c:a6:
                    39:ac:89:b5:c2:a5:b9:e1:44:73:f5:8e:c7:15:df:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:08:34:C8:F7:C3:A2:37:E6:EE:48:CA:1B:2D:8E:97:89:7C:55:93
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2d:61:fe:7c:55:c3:ed:bd:b5:29:7e:b8:1d:7a:9f:e8:ae:
         2b:4b:b2:cf:00:19:41:69:52:ed:3f:8c:20:81:de:17:4b:c2:
         99:d9:18:de:2c:d6:ac:23:1d:19:ed:8e:52:9a:92:8a:2c:85:
         69:53:cb:55:cf:08:43:1a:1a:d3:4e:b6:c4:78:41:07:98:1b:
         91:c6:71:6d:7b:f4:01:0f:a7:ff:9a:65:92:e9:d9:3f:4a:9e:
         5d:bd:9a:6b:0e:ef:c3:fe:15:2f:ee:5b:2e:c8:3c:69:da:21:
         66:cb:96:d3:f8:40:02:6d:40:d2:8b:ee:f8:47:cf:71:45:66:
         f6:f9:62:d9:c7:ac:b7:b2:04:1a:9e:92:72:04:28:2d:a2:20:
         3e:a2:d7:a8:5d:aa:2f:ac:5d:c0:c7:b1:da:1c:93:3e:14:66:
         36:a5:0b:bf:fb:44:d9:97:e8:7c:73:83:f6:eb:d8:1a:3e:5d:
         9c:95:89:a1:c8:07:cb:af:5b:db:87:60:dc:b7:9b:7a:57:7a:
         61:a6:2b:b7:6e:ad:bd:d8:7e:47:54:75:49:0f:b5:95:b9:97:
         b8:f9:80:f1:a0:e6:fa:6d:72:2f:66:74:76:22:5b:1f:7d:e3:
         12:92:34:f8:8c:c9:9b:37:09:37:64:47:4c:a2:94:93:b0:e7:
         61:68:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:39:33 2025 by rpki-client