Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
File:                     23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json)
Hash identifier:          HtdyD84TXEskIQw4pMwCboGuBfxb+KcA8/TyWgQYB80=
Subject key identifier:   12:A3:09:53:A7:33:09:80:97:93:CF:28:C4:AA:F2:D7:0A:C4:91:25
Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Certificate issuer:       /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Certificate serial:       53E43A55383A906376588CA890A41B6662CB548D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
Manifest number:          0367
Signing time:             Mon 03 Nov 2025 13:40:00 +0000
Manifest this update:     Mon 03 Nov 2025 13:35:00 +0000
Manifest next update:     Tue 04 Nov 2025 13:40:00 +0000
Files and hashes:         1: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: Z3ameIUQOJp8kjMvEdE0pPqLHMaD59B39ESwvLWrE3k=)
                          2: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=)
                          3: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl
                          rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e4:3a:55:38:3a:90:63:76:58:8c:a8:90:a4:1b:66:62:cb:54:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
        Validity
            Not Before: Nov  3 13:35:00 2025 GMT
            Not After : Nov  4 13:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bc:2d:47:18:65:80:00:17:f0:a6:ce:20:27:
                    82:9e:88:b3:e8:f2:ba:4a:9b:6d:c1:7f:01:04:4b:
                    08:b1:28:cf:c1:42:1e:eb:02:63:67:e0:91:25:51:
                    34:dc:6c:f4:63:5f:1e:de:0d:44:21:75:70:ef:51:
                    5c:fc:1a:57:c0:c5:3f:c2:0d:e0:39:0f:b5:5c:cf:
                    f7:70:83:a2:0f:ad:b5:1a:e2:21:fb:ec:6f:92:35:
                    8c:0a:77:e8:01:f5:e2:f7:1e:e1:8b:c0:e7:99:e0:
                    a6:be:00:e0:bf:e2:ff:c0:8b:3b:f7:6a:80:ab:2f:
                    f5:86:88:4c:ef:88:ba:2c:73:16:6e:d2:db:73:da:
                    0b:17:1f:2a:1f:55:44:f1:29:08:6c:a4:6d:b9:1c:
                    69:55:a2:1c:2b:67:53:bc:3a:a9:49:e9:76:a2:57:
                    21:51:b4:ff:58:1b:57:f6:59:bd:98:e9:62:d1:ee:
                    d5:d1:17:df:84:62:62:eb:96:66:cd:49:f0:97:b1:
                    1d:16:9e:52:5b:70:be:b1:c6:23:ee:0b:a4:76:3b:
                    93:e1:72:a5:25:5c:cc:8a:81:ac:7f:0c:33:05:d0:
                    b7:7e:ad:2c:45:78:2a:10:d9:51:0f:ac:01:cd:80:
                    90:01:5c:fe:1a:1e:e5:62:6b:f9:38:e9:52:c9:12:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A3:09:53:A7:33:09:80:97:93:CF:28:C4:AA:F2:D7:0A:C4:91:25
            X509v3 Authority Key Identifier:
                keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:c1:5a:ae:13:14:52:b9:5b:8f:42:3a:dc:36:29:ad:94:
         96:a2:b4:1b:ca:5a:2c:8d:dc:d0:f2:aa:9a:94:f5:bd:92:33:
         fb:a3:0a:f2:3c:5e:07:5f:e4:f5:64:98:1c:a6:dc:ca:34:bd:
         8c:fc:cc:ad:fc:12:ed:10:b9:30:b9:62:32:38:1e:cb:ed:88:
         30:c1:87:a3:88:0f:34:20:40:72:97:c2:e2:27:c7:2b:74:e1:
         4c:a0:66:5b:10:09:9e:02:7c:17:79:a9:a4:ae:1e:67:84:71:
         28:87:a5:6d:1e:7f:2b:fe:c5:e7:54:c5:0e:4c:88:08:a8:c2:
         84:2f:13:96:a0:69:5c:0f:aa:99:7a:e8:94:cb:e1:20:6f:67:
         4b:06:52:8f:85:30:88:47:78:f2:b4:bb:63:6e:bd:a8:18:63:
         9d:9c:08:42:f4:fc:cd:62:08:59:be:9f:de:27:f7:d3:d5:9d:
         39:56:04:5a:70:40:f3:dd:a0:aa:e1:52:5e:b9:f6:49:b4:77:
         18:e1:11:8b:d0:e3:ce:c2:44:57:da:39:b8:a4:19:af:a1:ba:
         6d:80:5a:af:c5:4d:e9:b0:38:80:6b:da:89:77:33:e6:32:6a:
         c7:b5:e0:d8:08:c0:98:14:e2:f2:c9:45:69:0d:07:00:e4:46:
         ef:a3:de:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 00:26:23 2025 by rpki-client