Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
File:                     0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json)
Hash identifier:          Ojfb0alLXf/VSYmPIv8gdVepezXvw7CFgs6VwdeVlsg=
Subject key identifier:   DE:7C:EB:3B:2B:5E:FC:A9:38:27:79:88:B9:34:2D:B9:9D:39:BC:09
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       1CEA3568A670104181F5FF84BE882FEE18E3FDB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
Manifest number:          02CE
Signing time:             Thu 18 Sep 2025 01:50:15 +0000
Manifest this update:     Thu 18 Sep 2025 01:45:15 +0000
Manifest next update:     Fri 19 Sep 2025 02:21:15 +0000
Files and hashes:         1: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: QWRXVY7pWl39ZmOoL965i+jLqU1Liw70GEKCMX5vkqU=)
                          2: 34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (hash: BXBMdFx7otSxHTwUNboayShinyzfM90Ba7+cGRAazlA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ea:35:68:a6:70:10:41:81:f5:ff:84:be:88:2f:ee:18:e3:fd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Sep 18 01:45:15 2025 GMT
            Not After : Sep 19 02:21:15 2025 GMT
        Subject: CN=DE7CEB3B2B5EFCA938277988B9342DB99D39BC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:03:a5:97:7f:44:94:92:f7:1f:a5:cf:ae:
                    f8:68:d9:bb:be:37:91:b8:84:a6:62:67:63:2f:7b:
                    75:25:a6:df:09:40:4e:b1:ac:ef:ba:d5:bc:77:43:
                    a9:36:42:3f:22:54:0c:6d:07:19:ed:33:99:c8:5a:
                    3e:bf:97:d1:f6:16:41:a9:32:79:81:20:eb:2b:21:
                    d9:95:a2:1d:ba:1e:a6:25:1b:b9:3b:0d:c9:74:2a:
                    b2:b2:d1:f8:ad:e5:10:c2:a5:f3:e9:42:17:4d:62:
                    a5:13:41:cc:82:07:3d:1d:2f:f5:f3:19:17:c6:2e:
                    bf:e3:99:c0:de:f2:01:32:7d:fa:d8:b2:13:8c:3e:
                    a9:0b:cb:51:39:9a:1a:df:a9:b5:2b:05:59:3c:da:
                    7e:82:c9:19:44:6a:c4:86:c0:58:a2:7b:c5:f8:f4:
                    08:14:58:92:0b:c1:40:c8:ce:ae:19:31:57:4b:bb:
                    d7:25:6a:11:38:b0:87:98:cc:7d:ff:bf:5d:e6:8b:
                    1a:60:d4:a3:3b:99:f6:e2:78:b9:1f:8a:bd:b6:dc:
                    07:27:a9:2e:60:c2:d5:10:c5:53:4c:ee:ea:5a:83:
                    8c:61:57:34:64:40:40:e5:0b:50:73:c1:b1:b4:95:
                    1a:8b:cb:4d:b4:64:e2:20:1b:7c:00:07:73:b6:f5:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:EB:3B:2B:5E:FC:A9:38:27:79:88:B9:34:2D:B9:9D:39:BC:09
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:62:0e:96:85:0a:55:7e:2e:5d:47:4b:95:6f:4c:37:c8:
         16:cb:e0:54:c6:d0:88:26:5f:16:4c:9e:60:3f:8b:df:c1:85:
         7f:b2:37:91:03:0f:2a:fd:7e:a8:19:54:79:53:ae:24:9b:dc:
         fa:3c:b3:fa:3e:5c:2d:53:28:b3:45:f4:30:e9:fb:09:cc:b5:
         46:bd:b2:19:f7:fd:16:31:65:b3:0c:8d:09:6b:fa:b2:76:e4:
         d8:e5:7d:d6:cb:76:81:40:00:6c:e7:ca:80:3e:3a:68:6d:64:
         21:e4:29:60:a7:7e:21:11:0b:d0:56:91:63:59:af:34:e4:e3:
         bf:f6:5e:5b:4c:cb:49:f2:2c:62:d2:59:00:d6:e4:23:ad:8a:
         59:bb:a4:94:78:26:44:4a:ea:1f:7f:eb:b5:f3:54:cc:3e:f5:
         e5:fd:47:76:b9:49:8b:ca:1c:a0:71:29:84:ab:ce:ac:0b:94:
         78:26:b8:2e:df:96:82:fd:2a:c3:5b:3e:a9:a6:f6:8d:a8:ec:
         5b:6a:ce:0a:b5:30:e5:d2:9b:e0:c2:b8:8f:89:bd:45:95:50:
         b5:1f:4f:d8:e4:8a:86:ca:4a:02:f2:dc:6c:0c:06:51:f5:ec:
         0f:ad:29:39:d3:78:a9:01:fd:3c:5d:98:3a:19:79:a5:02:cb:
         95:8c:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:52:17 2025 by rpki-client