Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
File:                     B7D297E891D0B38E9314260166E2A362DC625072.mft (raw, json)
Hash identifier:          /kMijHuDKxBKI6GeyW2aeMhVjuS3B2RQWYOABzuXE1s=
Subject key identifier:   E9:37:38:5A:E9:9C:19:47:39:57:7B:4C:E6:FE:6B:D5:BD:F5:69:E4
Authority key identifier: B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72
Certificate issuer:       /CN=B7D297E891D0B38E9314260166E2A362DC625072
Certificate serial:       0DC61ABC68B5650695E3F2FACCA5DEF4B04C8801
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
Manifest number:          3C
Signing time:             Mon 03 Nov 2025 10:17:07 +0000
Manifest this update:     Mon 03 Nov 2025 10:12:07 +0000
Manifest next update:     Tue 04 Nov 2025 11:37:07 +0000
Files and hashes:         1: B7D297E891D0B38E9314260166E2A362DC625072.crl (hash: 3BlEhsWbhgvP6DllCbFtLc/G3fs8M1njXuD9m2UVzIQ=)
                          2: 323830343a393461633a3a2f33322d313238203d3e20323734343733.roa (hash: 5dNt86QmNpkL+18z4Xw05SaIiYBHZoUuE6RI1tm97vQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl
                          rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c6:1a:bc:68:b5:65:06:95:e3:f2:fa:cc:a5:de:f4:b0:4c:88:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D297E891D0B38E9314260166E2A362DC625072
        Validity
            Not Before: Nov  3 10:12:07 2025 GMT
            Not After : Nov  4 11:37:07 2025 GMT
        Subject: CN=E937385AE99C194739577B4CE6FE6BD5BDF569E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:9d:3f:f1:75:3a:a4:9c:5b:ae:13:96:28:
                    f2:24:56:50:bd:fc:ae:a8:4c:ed:2d:94:ea:59:a3:
                    5b:a7:aa:3b:48:7a:6a:2d:ce:5d:d8:db:64:5f:3e:
                    ff:c1:7b:ec:0b:ff:3b:86:1a:d1:fe:20:3e:ce:eb:
                    ba:49:0a:2e:31:cf:1b:cc:c6:c7:9c:78:31:d9:a0:
                    33:af:ef:93:6c:9b:3e:f7:29:b7:fc:e9:87:b6:c4:
                    03:63:0c:4b:a5:f7:ed:d7:5c:27:6a:b2:e9:99:e0:
                    f7:35:d7:fc:60:06:76:06:c2:3e:59:eb:44:80:5f:
                    ea:9b:db:1f:ad:e6:03:19:17:06:7b:7c:5d:7f:68:
                    37:6a:97:0e:fd:9e:4f:4a:79:ef:e3:53:6f:90:99:
                    93:ca:e9:bd:c5:01:7e:63:83:fc:5e:0d:bd:92:45:
                    22:14:2b:3f:82:57:b3:d4:03:2a:cc:e9:e6:62:43:
                    36:3c:0b:8a:df:86:f9:b3:23:91:66:b5:42:a6:58:
                    c3:87:67:85:53:a9:39:22:46:45:46:64:40:c6:66:
                    be:95:05:e0:21:dc:40:1a:19:fe:1c:4e:c7:e1:aa:
                    09:93:a6:ef:a8:eb:94:29:f6:40:f2:ea:13:29:9d:
                    00:65:bd:b3:5d:f6:16:e7:de:3c:bb:8b:e0:a7:ab:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:37:38:5A:E9:9C:19:47:39:57:7B:4C:E6:FE:6B:D5:BD:F5:69:E4
            X509v3 Authority Key Identifier:
                keyid:B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:54:32:b2:33:e2:c9:95:ba:9f:f8:54:1f:ca:65:de:09:03:
         97:ca:b8:09:32:51:60:77:74:dd:e4:63:49:29:ef:d4:7f:2d:
         c1:f2:fb:f1:dc:f1:04:1c:14:da:c8:87:88:6b:4a:1b:43:c3:
         59:52:ab:25:00:a0:33:da:65:a7:e2:73:9c:e2:df:5e:e0:6b:
         11:ff:95:d4:1f:b2:f2:c3:f7:67:b3:a2:6c:4f:d2:fa:e4:43:
         39:cb:36:f4:2e:1b:87:3a:f3:01:d9:b2:03:6e:09:d9:31:5c:
         81:d2:2f:81:38:2b:81:44:78:41:c9:a7:d2:63:e1:4b:c3:4c:
         7b:91:b7:e5:a2:96:85:8f:b6:63:88:00:5d:6c:d6:2f:62:50:
         18:79:59:54:cb:8a:ef:78:49:c3:ca:ac:4f:91:2c:dc:22:de:
         bb:43:fd:72:63:e2:b1:00:d8:09:85:d2:d8:78:1f:70:e5:8d:
         2d:16:1a:87:02:2d:ac:a4:56:97:53:b4:d2:2b:1b:e3:68:47:
         75:e6:19:31:0e:04:44:38:8f:44:ad:fe:03:b4:75:f0:d0:ee:
         47:b2:ee:2c:79:61:fc:57:e9:8e:c1:ad:95:6a:b4:9e:b6:5f:
         6f:82:bf:4c:13:c8:a3:8d:f4:54:ff:da:87:1f:82:f8:85:26:
         aa:f6:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:01:15 2025 by rpki-client