Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
File:                     DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json)
Hash identifier:          dOoSoqCGcBuKEVSeJSDGDgmYAEKek+KkKObE5A5W03g=
Subject key identifier:   EC:6C:F8:64:2B:3E:84:A6:B0:05:99:26:BA:5A:DB:CD:43:71:3B:7A
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       6E000FF9A981596BEF8B5B872766CE0F367E7C95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
Manifest number:          033D
Signing time:             Mon 03 Nov 2025 02:00:00 +0000
Manifest this update:     Mon 03 Nov 2025 01:55:00 +0000
Manifest next update:     Tue 04 Nov 2025 02:00:00 +0000
Files and hashes:         1: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: EiFbXmNwfUfEkSI4qCqsU5jU8ePYLs88ZEXUItBxJT0=)
                          2: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: i06R7ZftAjC7a/YY6upqVlOH5minL/+0Kvab9Pct10w=)
                          3: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: hhaTkVxydoeTkVCgiDcsdm1IKpvuOxnccQtjsV5f6TI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:00:0f:f9:a9:81:59:6b:ef:8b:5b:87:27:66:ce:0f:36:7e:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Nov  3 01:55:00 2025 GMT
            Not After : Nov 10 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9f:e3:84:43:e5:3d:86:c5:1c:eb:04:80:e6:
                    ad:fb:f2:c7:54:2b:0e:99:b5:e9:b2:52:3b:c0:06:
                    78:4b:d2:1a:9b:cc:94:43:8a:75:19:6b:73:cd:0d:
                    00:42:52:29:62:ec:9b:d6:7d:b9:88:98:0a:bf:20:
                    bc:bb:3e:56:24:c1:31:7d:64:af:a8:e8:7e:6c:d1:
                    fe:c4:87:ed:7c:dd:ed:ea:62:d8:0a:fb:cd:f6:ae:
                    0b:ee:07:4a:81:5a:e6:71:74:52:99:a6:b3:2e:02:
                    8f:7a:da:c9:10:10:be:0c:46:76:cb:a8:c2:a4:04:
                    17:0b:46:08:84:57:e2:37:37:19:63:13:35:f0:d3:
                    43:fb:9a:f4:c2:56:cf:44:12:bd:6e:01:76:18:f7:
                    af:63:e0:25:6d:b6:4d:a7:b3:60:87:7d:58:2c:0d:
                    27:b9:3a:34:64:6d:c9:0b:82:4f:9e:bf:df:63:0b:
                    4a:38:64:73:94:5d:18:9a:79:bd:0d:a3:1f:15:48:
                    83:8c:9b:7c:60:a3:a9:42:61:0f:98:68:20:de:24:
                    77:99:bc:9c:b3:94:43:fb:6b:b8:3c:5a:3a:e8:58:
                    a8:65:83:0c:a3:1f:47:92:f2:6b:01:53:83:24:91:
                    00:c4:20:9c:77:f2:b3:34:e4:b8:59:0a:a4:32:16:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:F8:64:2B:3E:84:A6:B0:05:99:26:BA:5A:DB:CD:43:71:3B:7A
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2e:90:b8:91:02:b5:48:0a:96:d4:82:9a:10:f9:08:d0:09:
         7b:ab:7f:b2:61:b2:2d:02:70:b6:ec:bf:84:8c:f0:fc:1e:ff:
         13:51:2b:3d:37:24:35:40:40:c9:e4:a7:98:2e:45:8d:99:7c:
         bd:fc:ff:5f:3c:09:62:2a:d9:41:1d:f7:de:2e:0a:43:25:e6:
         54:c4:9b:59:9e:f7:13:e3:7d:04:64:9f:92:6e:fb:cc:e1:2f:
         e1:84:54:66:61:e7:f2:92:e7:7a:63:c0:71:a3:4b:fa:18:2d:
         1a:bf:2e:3e:54:0d:82:4a:d2:16:90:af:f1:28:79:28:5b:11:
         92:c8:46:58:57:21:79:47:73:d7:38:eb:bf:fb:03:9e:00:8b:
         5b:18:b9:6e:9b:6d:e7:63:8a:78:e6:04:bc:c5:08:bc:e0:10:
         16:fd:ca:a7:98:37:c9:0c:63:2d:42:16:7f:c0:a9:2d:b3:2c:
         ea:3a:24:ba:53:de:97:41:0c:8b:d2:6a:df:24:0a:43:6a:ea:
         ec:1a:12:08:ad:cc:1c:e6:91:5a:26:6d:9f:69:25:e7:fe:9f:
         76:0e:9c:e7:91:77:52:f2:22:02:43:3c:15:60:c3:c5:38:5c:
         32:58:cf:f1:66:19:02:14:f2:e4:18:dd:a7:ef:5b:d0:24:55:
         3d:23:a0:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:29:06 2025 by rpki-client