Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
File:                     9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json)
Hash identifier:          H6QL6IoWpYpKgGOVNCMLeYUn8hFCUQDdifR+Z/Y/FyE=
Subject key identifier:   CE:F0:73:E7:E4:F7:8F:F9:36:9B:B8:C3:65:C1:E9:20:8F:9F:AC:4F
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       776E56BC5615BDB32C026B2D6DD236AEC728563C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
Manifest number:          0301
Signing time:             Mon 03 Nov 2025 18:16:31 +0000
Manifest this update:     Mon 03 Nov 2025 18:11:31 +0000
Manifest next update:     Tue 04 Nov 2025 20:47:31 +0000
Files and hashes:         1: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=)
                          2: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: 5ZN1muaZE+9PsMxSVQ+PoppA5Wp65C1bBeChn3ZgnJs=)
                          3: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
                          rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6e:56:bc:56:15:bd:b3:2c:02:6b:2d:6d:d2:36:ae:c7:28:56:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Nov  3 18:11:31 2025 GMT
            Not After : Nov  4 20:47:31 2025 GMT
        Subject: CN=CEF073E7E4F78FF9369BB8C365C1E9208F9FAC4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:65:1e:90:25:da:80:da:86:b8:69:de:5f:
                    ee:34:dc:2e:43:df:44:81:5e:5f:cb:cf:2d:02:aa:
                    42:09:68:18:70:d9:2f:b7:01:bb:84:6e:9a:09:41:
                    e9:68:41:f3:3f:09:4a:c5:c8:32:8b:c9:9d:bd:58:
                    76:38:54:80:29:f0:cf:9d:05:c3:a5:7c:c6:28:8e:
                    72:eb:c4:a7:43:a2:77:82:9a:92:a7:ad:a6:87:9c:
                    c0:ec:4e:c6:18:b6:e4:0e:ab:eb:13:25:3a:b1:80:
                    93:3a:df:fb:77:29:86:d5:c9:ef:ea:33:93:77:0d:
                    3b:82:a5:44:49:2a:b2:70:aa:15:c0:1a:b7:12:29:
                    93:49:b7:ba:9b:8a:34:30:f0:3e:a7:23:db:f7:1a:
                    10:52:02:10:10:87:f8:72:83:83:44:bd:8f:1e:7a:
                    3e:ae:bc:4d:68:cd:b0:0c:e5:df:4e:82:42:4f:f0:
                    a5:7a:24:c8:26:fe:fa:43:08:4d:74:81:8d:d2:83:
                    dd:98:55:e4:63:c2:5b:94:a0:62:00:95:55:e1:53:
                    ab:7b:bd:a2:9a:f0:97:e5:84:ca:f3:39:88:64:ad:
                    50:a0:ca:38:76:56:58:56:56:7e:c7:34:59:9c:7d:
                    d4:01:c2:f9:9b:a0:cb:46:ff:c9:f4:8b:0f:61:fa:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:73:E7:E4:F7:8F:F9:36:9B:B8:C3:65:C1:E9:20:8F:9F:AC:4F
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:41:5e:50:11:26:7d:35:e4:ca:0c:14:c7:43:e2:c8:e5:53:
         ca:b0:8a:3c:d9:00:ce:c2:47:a5:a4:0b:e6:52:6f:10:9f:18:
         49:bf:92:50:be:43:65:85:3f:ea:14:3e:cd:64:10:6d:ac:3b:
         03:cb:a3:e9:04:99:9c:b6:30:0e:d9:5e:b4:cf:22:38:07:1c:
         1b:37:e4:b1:72:20:d4:ff:76:65:4d:35:dd:1f:1d:af:46:03:
         60:10:ea:c9:3d:df:f7:fa:25:99:cf:ff:4a:c6:30:0c:87:80:
         48:37:d5:49:31:32:9e:66:6b:16:d2:1f:f9:9b:08:ce:c8:58:
         7c:d1:fb:99:c9:dc:78:04:f2:fa:cc:a0:ff:86:b6:c3:e0:96:
         14:f2:74:e7:87:7b:91:ba:d2:61:18:5b:16:ec:6e:eb:3e:8f:
         93:e3:21:a5:6c:1a:b3:eb:2b:a8:ee:55:27:03:48:c9:0f:73:
         00:ad:40:0e:fe:b1:7a:18:1a:50:74:71:6e:ae:a7:22:31:3a:
         93:8e:41:01:ac:6e:79:36:e0:76:0c:70:38:1d:66:3a:cc:1a:
         3e:04:55:be:b1:80:7a:7c:76:f9:49:1f:b9:61:c5:64:03:d4:
         9a:4d:e5:09:a5:bc:d7:4e:95:0b:82:d3:8f:56:2d:e5:4c:a8:
         3a:06:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:34:51 2025 by rpki-client