Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
File:                     66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft (raw, json)
Hash identifier:          CAZZBuPehbh5iW6Jxa+UuxFSzzkWXgFz5NiZkFsli6U=
Subject key identifier:   B4:E5:B0:B3:34:EE:84:F4:FB:DA:B4:BB:5C:66:F6:84:EF:F5:0C:F1
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       3D4C7D5851970B125BC9848F3217971FD1D85F0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
Manifest number:          023E
Signing time:             Mon 03 Nov 2025 10:03:34 +0000
Manifest this update:     Mon 03 Nov 2025 09:58:34 +0000
Manifest next update:     Tue 04 Nov 2025 12:57:34 +0000
Files and hashes:         1: 323830343a373531633a3a2f33322d3438203d3e20323731303234.roa (hash: kdiCLIBPgvx03r4z0/coVpN45suCV5e0imm5xVT80tc=)
                          2: 34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa (hash: 5EjfMf4KxyWlNsMGlJvu26qX/Qos07VTS7AOE6/ZL6E=)
                          3: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl (hash: LKY1heikI5SpCuCWXHjWo+PL3AycCh8eLFox43Kgjk4=)
                          4: 34352e3232372e3130302e302f32322d3234203d3e20323731303234.roa (hash: hAS2i1VbX4dRq2s74k6OVSbnzXxGnFNj+kSSmNb1v0Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
                          rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4c:7d:58:51:97:0b:12:5b:c9:84:8f:32:17:97:1f:d1:d8:5f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Nov  3 09:58:34 2025 GMT
            Not After : Nov  4 12:57:34 2025 GMT
        Subject: CN=B4E5B0B334EE84F4FBDAB4BB5C66F684EFF50CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:3a:71:8f:1f:74:66:44:90:3c:34:00:ff:
                    ad:fb:41:07:bb:d5:16:13:8c:37:09:b0:2a:f3:2d:
                    21:34:94:78:9c:80:80:6c:84:fb:a0:76:bc:ad:de:
                    e8:2d:5e:c1:62:74:8b:91:78:3d:11:13:3a:58:a1:
                    06:aa:06:c5:5f:21:b5:51:b1:f8:30:f0:ca:96:81:
                    12:38:f9:40:e0:6e:3d:48:73:d9:55:2b:e6:31:b6:
                    d9:5d:55:21:7a:d5:ae:42:c8:15:db:c8:83:e4:91:
                    57:db:7d:fe:dc:6e:0f:84:05:eb:ed:0f:9c:43:97:
                    58:b4:de:71:f8:cd:5a:fa:06:76:48:0a:9c:5f:48:
                    0b:91:18:17:c4:be:54:ee:80:64:04:89:8f:85:34:
                    66:da:be:3c:e1:85:13:a3:0d:05:9b:91:f5:2f:c3:
                    bf:2b:4e:32:2e:22:94:63:f2:13:bb:b2:5c:17:32:
                    91:57:e1:c0:d6:d1:d8:31:2a:04:81:41:6a:15:95:
                    c0:45:06:ba:dc:b0:92:9a:70:23:14:47:7b:e0:50:
                    17:c3:1b:1d:3b:03:0b:83:23:fc:0e:05:4a:96:b0:
                    84:9a:02:3f:d5:e7:5e:88:ba:86:73:42:c0:33:93:
                    fb:8f:8c:13:ec:0b:ce:47:07:71:6e:84:50:71:52:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E5:B0:B3:34:EE:84:F4:FB:DA:B4:BB:5C:66:F6:84:EF:F5:0C:F1
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:61:b2:13:95:27:90:63:c8:77:12:bc:87:5d:e9:c8:81:be:
         a7:7b:3c:22:f4:f0:e5:56:33:00:1c:37:b0:96:20:58:17:7a:
         bd:97:ae:34:d1:59:1b:07:23:4e:f5:37:70:80:53:7a:d1:a7:
         ae:59:74:8e:9f:2a:92:b9:a3:f5:21:52:be:d7:0b:02:ce:d4:
         96:bf:95:db:89:e7:c8:a4:fb:92:38:10:64:37:12:22:bc:9b:
         29:7c:a3:c5:10:5d:01:a8:6d:73:0d:64:46:00:6d:33:79:87:
         35:d8:5d:f2:8c:9b:aa:97:f5:67:fe:cc:e6:07:9f:fa:64:71:
         8a:9c:b7:72:97:a5:8e:bf:e9:c3:d0:ab:15:13:47:d7:99:b2:
         04:bb:28:09:dd:d0:ee:75:64:77:c3:6a:1a:5e:6b:cf:26:c6:
         7a:a1:52:ca:46:3a:df:73:fb:9c:74:61:4b:72:5a:1d:a3:7e:
         e0:ed:5f:0e:e0:5b:8b:41:23:41:c1:e5:14:18:96:b2:50:6f:
         e1:dc:72:69:31:31:29:74:b8:c8:65:ba:26:4c:b8:b5:2c:65:
         4e:bf:84:52:53:7b:c3:1b:93:15:1d:f5:2c:31:f4:b6:9e:a9:
         fc:42:df:57:ff:03:7b:94:9b:c7:05:ee:dc:d1:d6:0a:fa:94:
         04:87:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:12:28 2025 by rpki-client