Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier:          71Hh0pyoSZa79PUGXg2b8AXRVGgX9qwJ1jF3CgL7t8w=
Subject key identifier:   20:60:3F:27:92:95:49:6A:1A:4B:03:78:A0:CE:DF:62:D7:E7:B3:0F
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       78CA0A2669306809A4B79E75721CC8600AB7EFBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number:          0305
Signing time:             Mon 03 Nov 2025 23:55:19 +0000
Manifest this update:     Mon 03 Nov 2025 23:50:19 +0000
Manifest next update:     Wed 05 Nov 2025 02:25:19 +0000
Files and hashes:         1: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: IRw3Xw222jzHjAfOZjbVOK2iYdN8GcmsC5IMwn4EhJM=)
                          2: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 02:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ca:0a:26:69:30:68:09:a4:b7:9e:75:72:1c:c8:60:0a:b7:ef:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Nov  3 23:50:19 2025 GMT
            Not After : Nov  5 02:25:19 2025 GMT
        Subject: CN=20603F279295496A1A4B0378A0CEDF62D7E7B30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:3f:3e:e8:ba:f7:e6:d8:83:eb:d5:c3:89:
                    81:09:0a:bc:66:c2:c0:6b:d8:2d:b5:89:31:0d:a7:
                    15:73:3a:e8:af:c8:40:58:17:a1:5a:a3:d7:16:b0:
                    55:c0:57:00:ea:ef:65:9a:82:5a:2d:df:2e:7b:7c:
                    bb:50:a7:ca:71:1b:b5:c1:c9:50:ca:fc:9f:ba:80:
                    d4:d6:2c:c6:6d:88:cb:d3:eb:87:c9:10:6a:23:c4:
                    01:f8:9a:2d:f0:ee:99:11:b1:bd:76:57:65:6c:0f:
                    11:b6:eb:20:1a:0a:e1:7c:81:97:ba:e2:0f:6c:6e:
                    ea:5e:2a:13:fe:dd:ae:96:21:92:61:1c:e7:63:bd:
                    6e:1f:c3:e0:7f:14:15:00:c6:ee:93:70:d4:d0:8b:
                    47:66:4c:f0:03:4f:4c:f8:97:4e:63:12:4a:d0:8f:
                    32:ff:45:6f:05:b7:a8:ba:e9:c5:96:be:79:9f:fb:
                    23:e5:8a:97:8a:69:16:be:7f:8c:3b:59:e7:f4:8e:
                    cf:81:b6:3e:eb:1a:75:79:38:01:7a:00:c5:09:97:
                    1b:a3:47:0c:f8:c2:d1:40:14:b4:4b:55:0c:fd:40:
                    38:a0:d7:27:e1:c0:79:0e:ec:1c:af:8a:a3:4c:cd:
                    72:b5:ec:79:df:40:25:d8:d9:f4:01:a3:2c:4b:4f:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:60:3F:27:92:95:49:6A:1A:4B:03:78:A0:CE:DF:62:D7:E7:B3:0F
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:22:42:63:1c:46:00:ba:34:8b:be:88:62:02:16:f0:16:
         d6:cc:82:5e:ea:6d:54:39:2b:0c:b7:1d:25:de:50:f1:fa:6f:
         9c:4b:f8:3f:00:29:c4:db:59:75:a2:ed:a8:e6:82:1b:10:1c:
         0b:71:a7:16:6e:11:10:c3:72:fe:9e:ee:e0:71:ae:60:db:82:
         d0:f9:42:88:4c:c0:86:b2:a5:2f:6d:92:84:f9:ec:fd:62:de:
         8a:ba:a6:2d:37:ce:52:cd:56:22:76:d2:7d:26:91:6e:c3:b2:
         4b:06:ac:35:1a:ea:b6:04:85:44:05:a9:49:f0:73:6d:30:01:
         64:f4:d1:62:d0:5b:36:45:e1:4c:87:3d:5e:b7:e6:e0:f8:09:
         a7:03:3a:e5:a4:08:56:b6:f6:bb:4d:d6:01:55:a5:5b:f7:c0:
         e0:f7:e8:85:6f:c8:d8:03:f6:20:df:74:13:3d:ce:d5:4a:78:
         83:07:62:75:0a:04:6a:d7:3b:76:d2:33:df:3b:b3:32:1c:ec:
         98:d4:7e:b0:fd:33:e9:1d:62:dd:c5:38:13:ac:e7:58:dc:be:
         c7:1a:e2:57:67:0a:c0:51:d0:23:4b:c7:02:9e:b8:8c:f3:51:
         00:ad:e7:82:05:b2:45:53:ba:79:66:a6:1b:80:38:6d:d4:4f:
         27:29:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:47:48 2025 by rpki-client