Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
File:                     AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft (raw, json)
Hash identifier:          zI3OwyExZETnp/eexJaa+r7zyqPk81N52PM27WMIwYI=
Subject key identifier:   C4:29:FF:7D:36:B8:59:21:ED:85:25:32:63:C3:38:2C:A7:BA:02:33
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Certificate issuer:       /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial:       793DC234F2D780C3432E9464562CE961C7265B35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
Manifest number:          01DD
Signing time:             Mon 03 Nov 2025 04:14:31 +0000
Manifest this update:     Mon 03 Nov 2025 04:09:31 +0000
Manifest next update:     Tue 04 Nov 2025 06:32:31 +0000
Files and hashes:         1: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl (hash: VLm+RCDilVYDI8iR4U9fOF9dq+2Kb7A1iyB2K/wVKAw=)
                          2: 323830343a323533633a3a2f33322d313238203d3e20323634323637.roa (hash: lJfA/yR5OSfz2uZV5mR5QEGG1Hs/os0F7/PG4G01w8o=)
                          3: 3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (hash: nVS1ig476qeVEp3ktQ874Yh7cQPZ9tR3j/G5N42qT4o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
                          rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3d:c2:34:f2:d7:80:c3:43:2e:94:64:56:2c:e9:61:c7:26:5b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
        Validity
            Not Before: Nov  3 04:09:31 2025 GMT
            Not After : Nov  4 06:32:31 2025 GMT
        Subject: CN=C429FF7D36B85921ED85253263C3382CA7BA0233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:5e:f6:08:57:26:a8:76:66:a6:5d:3a:d9:
                    55:05:8e:73:c1:28:62:b7:2a:72:41:27:87:f3:0b:
                    98:5c:3d:a1:71:18:91:c3:74:50:5a:1a:f5:3a:ce:
                    f5:6a:38:47:4f:6d:a4:47:7f:1d:66:dc:10:15:fb:
                    09:ca:24:43:f7:4b:ca:df:16:0e:b0:ab:34:4d:ef:
                    e2:89:e2:32:b7:8f:c8:d6:84:46:cb:55:62:ea:fd:
                    64:b3:63:35:bf:a2:c5:f8:df:c3:36:66:d4:f0:5a:
                    a6:5f:19:6f:98:3a:79:5a:99:0d:0e:14:e0:b7:87:
                    36:d3:89:c2:5c:70:cb:d8:24:b5:1c:8c:83:fd:b3:
                    ee:ce:d6:c9:bc:59:dc:cc:85:33:7b:5b:10:5d:12:
                    83:c6:a7:fb:b5:3b:2f:00:4b:a0:cb:43:0d:24:8e:
                    eb:ce:3b:52:9d:83:f4:fc:b1:ac:85:f8:04:ff:26:
                    c1:22:84:e7:ff:0e:4b:d9:76:72:3f:3f:98:ee:a4:
                    0c:d5:cf:0e:6f:86:17:eb:3b:0d:f9:10:70:c7:0b:
                    20:d2:a2:b9:e2:4a:53:97:20:a5:f7:73:24:06:35:
                    06:bf:16:bd:7d:05:2a:62:da:f2:e6:e2:23:d3:30:
                    33:36:50:b5:3d:b3:d5:c1:41:9f:83:69:71:0d:d2:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:29:FF:7D:36:B8:59:21:ED:85:25:32:63:C3:38:2C:A7:BA:02:33
            X509v3 Authority Key Identifier:
                keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:67:08:12:7f:db:84:7a:ed:2b:80:a9:66:ed:2c:f5:36:18:
         01:33:aa:f1:93:2f:d5:16:f3:64:8e:4c:95:13:a3:51:cb:9d:
         78:bb:81:b3:8b:4c:d8:ca:fe:13:ab:a2:fe:f5:e8:d1:0a:60:
         11:5e:c4:11:aa:bf:32:c0:53:0e:b9:e6:b2:0e:56:6a:1c:52:
         11:8f:ae:fc:91:f1:09:96:bc:f6:8c:ad:a4:9e:68:af:17:ec:
         90:4b:34:63:da:e7:9a:1f:d1:c0:01:b6:68:a8:b6:f5:49:41:
         3b:96:de:01:71:9a:eb:51:9a:f5:da:c5:94:ff:49:18:31:95:
         e5:89:7b:a1:44:09:f4:39:b7:11:99:d1:79:a2:79:3a:82:fc:
         23:29:fa:64:4c:ea:1e:3c:b3:a9:b7:83:56:ac:4d:21:46:ac:
         ee:f1:6a:0c:5d:94:79:51:96:cf:b2:d5:21:ee:1d:57:00:81:
         8e:83:91:67:18:b8:76:1a:16:56:31:33:44:6b:6c:25:e9:76:
         f9:15:69:22:52:01:77:f4:2f:e4:47:89:50:64:a9:ce:09:b1:
         89:06:2e:01:be:6d:b9:db:25:29:ba:14:9f:17:b5:63:0e:e8:
         c0:28:88:68:b4:81:ce:cf:02:96:1c:c1:b3:e9:2b:23:91:03:
         0f:db:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:55 2025 by rpki-client