Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft
File:                     CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft (raw, json)
Hash identifier:          43aaZmBFix71x9pF33i+15seWWxmDSQz0WHN4nnJaPY=
Subject key identifier:   EE:FE:24:CD:16:A4:5C:76:36:C2:55:3F:E0:94:00:3C:D0:58:04:8D
Authority key identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08
Certificate issuer:       /CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608
Certificate serial:       508B428CB777F41974CB8F94D1C0B5A4C42ADF04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft
Manifest number:          FD
Signing time:             Mon 03 Nov 2025 05:39:36 +0000
Manifest this update:     Mon 03 Nov 2025 05:34:36 +0000
Manifest next update:     Tue 04 Nov 2025 09:31:36 +0000
Files and hashes:         1: 3230302e33362e3139362e302f32322d3332203d3e20323731343233.roa (hash: BN0yNSQYHzO/8PLxpClNHqjhVJbCaoMDHFJ1JsHe/LA=)
                          2: 323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (hash: D6UugD7LMSE82MNKuHZ6AsbY2I0FQkZFbm92FJ5UaBg=)
                          3: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl (hash: Qc9RbfTQWqAy4raqx1jru1qlocXbhO7PIUGMGlUQv40=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl
                          rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8b:42:8c:b7:77:f4:19:74:cb:8f:94:d1:c0:b5:a4:c4:2a:df:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608
        Validity
            Not Before: Nov  3 05:34:36 2025 GMT
            Not After : Nov  4 09:31:36 2025 GMT
        Subject: CN=EEFE24CD16A45C7636C2553FE094003CD058048D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:e1:a8:f9:51:43:94:c6:a2:28:45:42:b1:
                    43:e9:bf:50:b3:ae:dc:e4:90:fa:69:0a:60:06:bf:
                    9c:c0:f0:b2:77:ca:bc:27:89:cd:e7:32:34:8e:de:
                    3d:d9:88:fd:17:ba:8f:18:fc:d2:77:42:2c:e5:6c:
                    74:af:80:b0:4b:01:0a:55:7c:de:33:15:59:f4:67:
                    65:8d:f3:99:77:e6:08:be:45:0d:3c:a2:9e:cc:03:
                    e4:bf:a8:c6:a7:5b:1c:de:bc:00:04:b6:1d:a0:e9:
                    56:c6:83:33:97:02:0b:6a:b7:08:f2:37:ba:a1:ee:
                    89:8f:28:90:fb:21:96:94:5b:a7:7f:f6:23:76:68:
                    87:2c:c5:46:60:1a:31:a7:46:1c:98:61:7a:d7:9c:
                    f9:18:a2:7f:da:3d:7e:bd:77:f3:72:91:e4:54:ef:
                    82:05:b2:6c:c7:65:17:a3:a7:9c:c2:a8:fa:7f:11:
                    f3:9c:10:a2:08:cc:c0:7e:53:0d:e8:24:6a:14:97:
                    21:6b:2e:ca:a7:9e:7c:6f:6c:d0:7d:8f:a8:44:e3:
                    22:ac:15:8e:52:f0:f9:9d:b1:e0:a9:49:bd:46:76:
                    e2:ec:0e:c1:f4:e1:0f:37:65:52:52:84:87:0e:ba:
                    7a:71:61:72:e7:73:ab:6d:3c:01:11:61:4d:72:cf:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FE:24:CD:16:A4:5C:76:36:C2:55:3F:E0:94:00:3C:D0:58:04:8D
            X509v3 Authority Key Identifier:
                keyid:CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b6:46:fa:4b:c5:30:0e:89:ad:be:15:a0:29:fa:21:29:21:
         5d:bf:94:20:91:cf:e1:a1:6b:f1:3d:9f:61:eb:e3:70:b0:c1:
         f2:f5:3d:13:88:07:78:ad:82:94:32:38:28:f6:cb:15:e3:64:
         53:34:45:f3:4e:14:cf:24:26:9f:3c:be:c0:05:0e:93:58:1d:
         e8:16:4d:ae:e7:36:52:df:74:ab:79:f0:f8:38:4d:8a:f9:27:
         23:1a:e3:14:36:88:af:f5:91:92:c8:87:a2:7b:6f:d9:69:cc:
         c8:a6:3d:46:3f:f8:23:15:2e:e4:df:c9:ca:d9:5b:9a:96:78:
         ce:a1:1d:56:a1:46:b6:c5:73:91:bf:b1:e3:94:7b:58:2c:8f:
         62:a5:62:65:d0:10:a2:d6:cc:d9:d6:b1:dc:4d:15:b4:5c:d3:
         6a:8c:f9:42:f7:f3:87:b7:84:cb:30:e7:0f:80:45:4a:69:17:
         56:b7:75:c0:50:8f:e6:ef:ee:02:7c:e7:b9:dd:a0:0e:8f:9c:
         45:23:f0:5f:82:41:15:e2:32:58:e3:f8:35:f4:4b:22:f2:44:
         a0:12:87:c0:67:d0:28:3d:d0:30:3b:7d:d6:17:4f:a5:0d:b0:
         1b:8e:e1:59:cf:50:fd:22:c5:2c:e8:2f:f3:3b:62:01:18:55:
         61:c1:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:24:29 2025 by rpki-client