Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
File:                     23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json)
Hash identifier:          FvNm1e68MyaYW9R2wr5HK96c1PT1ZeZuP2ePkwFNkVo=
Subject key identifier:   A8:E1:F5:21:91:94:30:BE:24:A6:31:19:66:A6:4F:8A:B6:6A:AA:CD
Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Certificate issuer:       /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Certificate serial:       67A1A23DC29A75DB2A1FDC11BA3B82C0A2113FA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
Manifest number:          0321
Signing time:             Wed 17 Sep 2025 21:20:00 +0000
Manifest this update:     Wed 17 Sep 2025 21:15:00 +0000
Manifest next update:     Thu 18 Sep 2025 21:20:00 +0000
Files and hashes:         1: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: HDU6Za1L4J1LSdaoLI+Z1q5KJPWwAPCxw8kjnAhu5DM=)
                          2: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=)
                          3: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl
                          rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a1:a2:3d:c2:9a:75:db:2a:1f:dc:11:ba:3b:82:c0:a2:11:3f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
        Validity
            Not Before: Sep 17 21:15:00 2025 GMT
            Not After : Sep 18 21:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:cc:1f:3c:78:0d:18:7f:4f:0b:07:c4:c5:
                    b2:9d:1d:6a:2d:06:cf:2f:a0:25:72:6c:19:f1:98:
                    33:f6:46:21:4d:6e:9f:0e:0f:0c:c6:a1:7f:b0:44:
                    2c:7e:24:09:55:58:89:4d:a5:12:ec:83:a5:8a:d5:
                    fa:f0:d4:98:49:d6:84:61:14:f5:b3:61:26:39:3d:
                    93:15:59:fc:52:87:d3:1b:95:c8:35:32:d9:44:20:
                    1a:a2:1c:57:92:e7:cf:78:94:86:91:01:a6:31:c8:
                    6a:00:cf:ce:7f:bc:19:ad:bb:8d:0f:07:da:c6:b8:
                    4d:a4:e2:23:ad:b5:64:49:65:ca:66:e1:9f:c7:42:
                    fb:5a:90:0d:9e:a3:4f:11:91:b1:14:1c:81:c7:ef:
                    cc:7a:60:86:e6:37:43:43:2a:b7:bb:c6:ac:09:d8:
                    d7:fa:3f:63:f7:51:d1:79:59:d0:04:3c:9e:03:a1:
                    7e:8d:89:e2:8e:4c:23:1e:b2:a5:92:8b:ab:10:b7:
                    9e:d8:d7:9b:d0:c4:d4:7b:2e:a5:88:ea:d0:4c:bc:
                    2c:63:1a:b1:53:0b:f6:79:7f:5a:df:1e:92:6e:aa:
                    3c:63:c4:9d:ec:3a:bd:ca:35:e0:cf:f0:bf:b8:fc:
                    fb:0c:67:34:b0:5b:1e:30:db:f9:d9:4c:99:f9:19:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:F5:21:91:94:30:BE:24:A6:31:19:66:A6:4F:8A:B6:6A:AA:CD
            X509v3 Authority Key Identifier:
                keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:44:53:04:0a:23:a8:35:f3:57:14:3e:1d:11:ed:0e:f1:4e:
         81:46:45:86:df:a7:8e:53:45:ee:ad:9d:5b:25:5c:47:0c:12:
         47:92:35:04:c2:c8:a0:9c:85:b3:f9:17:b0:d2:c5:48:5c:82:
         37:30:1e:04:af:a5:d0:d1:d7:75:f1:b4:e5:0d:e0:fe:e2:f8:
         76:d2:80:73:98:55:20:6f:a4:a3:3b:a6:0c:e9:6c:98:8c:0f:
         57:07:cc:f5:c8:86:9c:22:0a:12:83:96:db:19:b4:d8:2c:7a:
         c4:19:ea:61:ce:d0:a2:98:0f:32:f2:12:4c:f2:68:a4:3e:24:
         89:65:ca:a8:50:e1:47:53:84:41:02:5d:9c:b0:cf:50:88:23:
         dc:66:6b:37:16:f7:81:75:ae:8c:51:7d:ba:d2:47:07:af:1a:
         f4:1a:db:52:a8:da:05:5e:3c:ec:0f:1e:de:75:5f:cf:0d:b8:
         6a:e3:44:9b:65:25:2f:d7:10:35:9d:fe:aa:be:71:91:cf:3c:
         0f:12:97:16:19:da:0f:d0:2a:a2:71:7a:ea:fb:2e:5a:71:f7:
         55:7f:97:90:c2:a5:25:ca:4c:0a:46:b3:5c:2e:09:18:bb:a5:
         61:5c:39:6b:a6:4c:35:8e:eb:91:6f:a6:a6:82:ae:c4:03:98:
         e1:12:5d:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 18 06:37:14 2025 by rpki-client