Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
File:                     68DD457AFD87757729E657881786601BF56ED45F.mft (raw, json)
Hash identifier:          0UsKXneM5e+N3VBeRy9W3JeOL8sDK4hwE5+9AK5VJi4=
Subject key identifier:   64:AE:31:31:5D:DC:15:41:7D:C4:2A:23:02:AA:E8:8E:6C:74:8C:79
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       47A91ADD425F3194DC4F13F2B9250A3DC242A36E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
Manifest number:          3B
Signing time:             Mon 03 Nov 2025 10:26:05 +0000
Manifest this update:     Mon 03 Nov 2025 10:21:05 +0000
Manifest next update:     Tue 04 Nov 2025 12:54:05 +0000
Files and hashes:         1: 3138392e35302e35342e302f32342d3234203d3e20323730393035.roa (hash: BnDJoD7mm5smVqJlLLxtTMXUDEMSimPQmN20SZOwM2Y=)
                          2: 323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa (hash: eMHbpvQgswRZVwXpdLiCqm5u80LIeU0ewBIU4ClX0EA=)
                          3: 3138392e35302e35322e302f32342d3234203d3e20323730393035.roa (hash: 82plwJJTMXjlj2xQonVnYthoRgLBPcbTFJrwjSmx/Qo=)
                          4: 3138392e35302e35322e302f32322d3232203d3e20323730393035.roa (hash: ALsUwVg1b91mWEVv1JossW/UxBJrUroC7KfEigoH8iA=)
                          5: 323830343a373334343a3a2f33322d3332203d3e20323730393035.roa (hash: b0E96RajeTelki/RKd4yUSyPNuDlQOK6caHY9E0TRNU=)
                          6: 3138392e35302e35352e302f32342d3234203d3e20323730393035.roa (hash: iDGr5F2PnwedBBe+x8uqhHnhvoHpNVzvQZV2xJFQ9Sw=)
                          7: 323830343a373334343a3a2f33332d3333203d3e20323730393035.roa (hash: f+IuAr2PdhB8vRwaHvOEUwIs2xnnXXsBPgFKYRki9wQ=)
                          8: 323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa (hash: ttC17iKoaXN/NHlBJJiZDxSbyY0c4jv5VcBx7nhU3HY=)
                          9: 3138392e35302e35342e302f32332d3233203d3e20323730393035.roa (hash: r34Bj3NOi8J7wSWAiNV1mRpqUrAk2TST4VuligD84dg=)
                          10: 323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa (hash: zSZBOT/eEVH4NopCJ1NOtzvZrj354yQ3o7Ai1Ha7OrM=)
                          11: 68DD457AFD87757729E657881786601BF56ED45F.crl (hash: sJhYBaNBWvN9Wk6G6jAiLCDpQ3lTUM1IFGUls/kfrtw=)
                          12: 323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa (hash: 4oa2Pqqjk+v9zjeeAZuE9nPiU+p6xlCBHnTjnFWf3r4=)
                          13: 3138392e35302e35322e302f32332d3233203d3e20323730393035.roa (hash: hikPtDugUlkzkEgh8v3ypYGv8i4assWt4gSsuKVQby4=)
                          14: 323830343a373334343a3a2f33342d3334203d3e20323730393035.roa (hash: W6gEhC0BdyjXA01tT7J7K2zLIa0l8RKWQqfOCow1TBM=)
                          15: 3138392e35302e35332e302f32342d3234203d3e20323730393035.roa (hash: gL+ccQ4alihUg3XraYKW83JDWF98wjKhykPSIRaI5Do=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a9:1a:dd:42:5f:31:94:dc:4f:13:f2:b9:25:0a:3d:c2:42:a3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Nov  3 10:21:05 2025 GMT
            Not After : Nov  4 12:54:05 2025 GMT
        Subject: CN=64AE31315DDC15417DC42A2302AAE88E6C748C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:1f:37:1f:a7:27:39:da:c8:74:ef:6f:08:
                    a3:81:a7:ae:aa:57:a5:d6:29:10:57:68:fe:6e:26:
                    34:57:ec:22:17:5d:1f:4a:10:52:60:d0:aa:84:96:
                    40:2e:f2:a8:0c:15:50:9a:de:8d:44:95:76:91:20:
                    d3:9c:ce:da:c7:2a:09:d8:0f:ac:99:77:fb:00:81:
                    18:4d:fb:37:e7:71:ed:2f:6b:fb:a8:14:5e:46:2e:
                    d7:58:42:e8:1e:66:85:63:b1:28:16:6f:44:aa:4b:
                    e3:06:dd:44:f1:44:82:19:14:3a:db:85:e9:a7:16:
                    f4:be:46:99:e3:07:58:77:72:b2:fb:10:c9:64:eb:
                    4c:9c:39:6a:8b:e7:e9:9f:fc:57:5e:e9:04:7d:96:
                    a6:f6:20:3e:44:e0:4d:91:6a:c0:9e:55:dd:41:e6:
                    32:3a:b2:5b:d0:cb:bc:8e:6b:05:c6:6b:6f:6b:79:
                    c6:b0:f1:27:02:0c:61:95:18:04:b8:f2:a4:79:c0:
                    ae:e5:f5:44:1f:cd:39:d8:12:dc:b7:37:e0:75:f2:
                    17:37:c2:d0:8b:d5:09:c0:46:52:be:79:ab:dd:54:
                    06:f8:93:0f:fb:84:60:7a:fe:bc:09:e1:28:27:65:
                    86:f4:ba:47:33:b4:f9:bd:42:97:35:64:41:82:93:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AE:31:31:5D:DC:15:41:7D:C4:2A:23:02:AA:E8:8E:6C:74:8C:79
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:89:74:3c:6d:24:30:a6:fd:67:b1:35:11:9c:bc:ab:1b:9c:
         e5:92:17:ec:64:03:09:b8:89:99:75:33:c6:ae:57:14:dc:98:
         07:b2:dd:19:71:e9:88:34:34:f4:34:af:17:4b:3f:ac:93:14:
         a9:05:16:6a:bc:a4:de:34:ad:12:69:e3:f0:26:4a:dc:20:11:
         4c:4c:21:e2:5f:b8:bd:ac:91:53:e0:12:5f:51:e5:be:56:bd:
         4e:5c:e4:95:9c:26:41:d1:31:de:b5:a0:c8:32:f2:57:fc:df:
         4a:21:94:0a:24:80:3a:f2:2c:06:d8:3e:18:44:c7:58:55:85:
         99:ee:0f:74:9a:a7:76:a2:1b:ed:a3:2f:8f:87:3b:36:13:c2:
         cb:2e:ef:1c:ae:96:f4:31:b7:4c:e0:20:ba:ab:c0:00:31:04:
         41:c2:e9:2f:26:da:cd:4e:b2:38:07:97:34:bd:1a:fa:08:f8:
         62:07:90:a8:22:08:1c:23:96:23:23:7e:18:1c:11:db:7c:95:
         2c:2a:8e:15:fd:23:2b:bd:40:b7:9e:a1:d5:6a:a8:d0:c8:c2:
         ff:79:f0:45:7c:cc:09:65:90:1f:3a:a7:d8:f7:57:63:6f:7d:
         7f:05:09:87:aa:98:9c:ce:f9:f7:23:dd:9e:13:81:1f:d0:19:
         46:5a:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:11:52 2025 by rpki-client