Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft
File:                     7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft (raw, json)
Hash identifier:          IknkmxyhggBKI/0MRaEE7fF4vahOlmR0V7NFvu2gOsU=
Subject key identifier:   0D:FF:DD:C1:E1:E0:3C:64:B4:4B:17:7B:58:76:9A:78:21:32:49:81
Authority key identifier: 7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53
Certificate issuer:       /CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
Certificate serial:       44EBB8A4D4FB86E5354798434FAF9431F0977DEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft
Manifest number:          1A
Signing time:             Sun 02 Nov 2025 19:57:42 +0000
Manifest this update:     Sun 02 Nov 2025 19:52:42 +0000
Manifest next update:     Mon 03 Nov 2025 20:54:42 +0000
Files and hashes:         1: 34352e3138372e382e302f32332d3233203d3e20323639343630.roa (hash: eByW8MTbd57fKKIkYEeALsTO1jrwSHkWeUqWBcIw1xE=)
                          2: 34352e3138372e31302e302f32342d3234203d3e20323639343630.roa (hash: xbVO+AKQks4N8G+BitNTNGEXRSJV/GZPk95L2tYurX8=)
                          3: 7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl (hash: fBd0YST0KypUxNroAqkYIqSOYswbZWqINxoQXiMZ1oY=)
                          4: 323830343a363466383a3a2f33322d3332203d3e20323639343630.roa (hash: GtlmSJzlpsYWIKa+K06kg7UVW19b8DnqcgYGNv5Skf0=)
                          5: 34352e3138372e31312e302f32342d3234203d3e20323639343630.roa (hash: Y0A8df5KMuaRSw1JD3j8FShhZt3nQOGtotZNUQfmcwE=)
                          6: 34352e3138372e382e302f32322d3232203d3e20323639343630.roa (hash: SR2ywzCX8Ekf+xFoZIgQVcrG3xw78n1h1abRvAdUhPQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl
                          rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 20:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:eb:b8:a4:d4:fb:86:e5:35:47:98:43:4f:af:94:31:f0:97:7d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
        Validity
            Not Before: Nov  2 19:52:42 2025 GMT
            Not After : Nov  3 20:54:42 2025 GMT
        Subject: CN=0DFFDDC1E1E03C64B44B177B58769A7821324981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:62:7d:85:e7:73:a6:50:d0:39:89:73:da:
                    f8:8d:bc:03:a5:58:9c:c6:82:c5:59:14:a6:57:62:
                    55:43:21:19:fd:f7:9b:bb:47:eb:75:d0:5a:65:3f:
                    57:39:f1:ee:98:eb:b6:18:28:ff:8a:41:68:d6:a7:
                    8a:38:9a:ed:b4:ad:b1:47:59:c5:33:dd:e3:15:d4:
                    c0:7d:60:c7:1e:e1:a9:33:9d:27:bb:9d:cc:c4:a4:
                    df:45:12:24:c7:ef:94:cc:2a:1b:e1:7c:59:34:6e:
                    db:fb:48:35:18:df:78:fe:17:6a:99:f5:2f:eb:59:
                    0f:43:82:9e:f0:4f:fa:45:23:ea:22:41:83:55:88:
                    d7:4d:ec:8a:06:ba:fe:5c:1e:b3:3c:23:4e:f8:f2:
                    32:54:80:bf:4d:d1:35:f3:19:59:d3:04:07:58:34:
                    75:67:e1:9a:be:e5:09:ea:21:de:01:cf:60:46:7a:
                    2e:52:a5:ae:1f:f5:d3:bb:21:26:b3:fa:1f:5e:58:
                    41:70:03:db:76:ca:01:9c:72:7c:02:bb:2a:92:bf:
                    49:12:7a:2f:59:ed:55:85:02:eb:88:85:7f:a8:f5:
                    29:c7:8a:98:a3:94:4e:3a:19:b0:77:31:59:bd:78:
                    2f:f4:fb:79:53:d1:10:c2:1e:d0:3b:de:24:6c:df:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FF:DD:C1:E1:E0:3C:64:B4:4B:17:7B:58:76:9A:78:21:32:49:81
            X509v3 Authority Key Identifier:
                keyid:7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:e6:d2:8e:72:7e:b1:e1:c8:93:90:62:38:94:3e:28:a5:
         f2:80:59:e7:a3:e5:d5:cc:49:ef:7c:3f:f1:9e:9f:3a:66:37:
         14:e6:79:f0:f1:56:e6:9a:bd:4c:01:5d:3f:91:61:92:4c:66:
         17:f7:67:97:f8:29:ba:84:ac:42:dd:5f:c3:3c:f4:d8:7d:d9:
         72:8b:41:dd:a8:45:e7:23:da:c4:c7:b0:0c:c5:9c:f7:ba:49:
         45:eb:49:98:5a:f7:86:11:68:e8:6d:5f:2c:0e:70:ab:49:0c:
         cd:b0:da:55:28:39:79:04:9e:18:06:58:6a:55:65:b9:8d:e6:
         1d:bc:a9:85:ff:75:b7:b7:18:1d:4e:9b:f0:d6:5f:43:10:02:
         48:21:79:ae:ac:8d:74:ba:6e:6c:f8:8e:bc:de:f8:05:ef:1a:
         d2:e5:2f:6b:6b:9a:e9:22:09:57:5b:7e:78:8e:16:a8:5f:fe:
         85:66:d9:6c:d5:87:f5:2b:28:4f:ab:96:02:29:62:66:c6:61:
         b6:db:3f:50:18:41:6c:a3:cc:de:2c:e0:8a:1d:19:6d:4b:65:
         aa:8e:f8:bf:f8:a0:9b:84:72:c1:cb:80:40:24:4a:45:51:28:
         7c:fd:3a:e7:81:3b:16:3c:da:46:6b:f1:7c:d8:d2:7a:5a:cc:
         8e:53:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:08:19 2025 by rpki-client