Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
File:                     C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft (raw, json)
Hash identifier:          DpCFGcKYFjyx3VwupUjL2K3bt2C3lr73xejcuOQZAPA=
Subject key identifier:   ED:FE:FE:E7:4A:0E:3C:73:78:BC:23:51:A4:3E:80:1B:CF:38:69:37
Authority key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1
Certificate issuer:       /CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1
Certificate serial:       50231249C853E9B1B110F53414ABB9BB8C5C4B80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
Manifest number:          25
Signing time:             Mon 03 Nov 2025 08:06:36 +0000
Manifest this update:     Mon 03 Nov 2025 08:01:36 +0000
Manifest next update:     Tue 04 Nov 2025 08:21:36 +0000
Files and hashes:         1: 323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa (hash: zGFKaCoTgzOLsixISDZt41J5XhqS2zO2XKDeZGn9Mco=)
                          2: 323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa (hash: yBJjQb5UJkn1X92Xq40hsg4b4AnfWWDvbxXre2wAako=)
                          3: 323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (hash: hlEnoJpysDTQhMh9vjpVDrfSuQQe4ncs2AxKBknxFt8=)
                          4: 323830343a383537383a3a2f33332d3333203d3e20323732353831.roa (hash: QH/LIYXCd77Wq9zzodBAWGHkrnXVwWZgFBEWjsYTfjc=)
                          5: 323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (hash: SiH0kt0Wyo9/5hkFhetNKoVdOd1SM7uog1jLxCN7roM=)
                          6: 323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (hash: KiNWT2XYyvn6P4rzOt1uSFrWoSIT6q2OgDhlN/HBy9A=)
                          7: 323830343a383537383a3a2f33342d3334203d3e20323732353831.roa (hash: Kz+qNOJo1gex4zcS+3Jq85bVEXkl1X8v0g7cMWndPMA=)
                          8: C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl (hash: H6ipCqgGxGMlNupqzVaiUtmnfJHrxtEihgXarIr3eFE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:12:49:c8:53:e9:b1:b1:10:f5:34:14:ab:b9:bb:8c:5c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1
        Validity
            Not Before: Nov  3 08:01:36 2025 GMT
            Not After : Nov  4 08:21:36 2025 GMT
        Subject: CN=EDFEFEE74A0E3C7378BC2351A43E801BCF386937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:16:aa:3e:82:ee:54:b1:a0:7c:b4:23:a8:
                    17:b3:d1:25:7a:34:3a:5a:b1:ab:08:a3:82:06:f1:
                    d7:40:cc:e2:77:c9:e0:83:ec:fa:e1:90:7f:41:1e:
                    aa:29:57:1e:a2:e5:73:12:12:b3:6d:d7:48:df:03:
                    11:5f:f4:0c:8f:b5:57:8f:81:4d:ea:de:69:e0:00:
                    76:90:c0:da:f3:02:5c:24:73:bb:17:7a:1b:35:6d:
                    91:30:c3:f4:cf:8f:33:96:9a:71:c0:c8:c5:66:ed:
                    ac:f7:7f:3c:78:b5:5d:9e:66:33:f2:51:a8:11:55:
                    92:37:34:e1:ce:0a:a6:33:29:d2:ca:8e:cb:15:07:
                    39:4d:e7:95:dd:9d:4c:7f:dd:49:11:fc:6b:8b:4d:
                    d8:6b:35:cd:0d:e8:c8:0e:73:63:f2:ee:11:d8:ff:
                    b2:e9:e4:5b:e2:a8:6d:33:06:76:17:8a:f8:87:3c:
                    3e:09:18:66:63:78:a5:e4:b0:eb:a6:99:66:30:be:
                    ea:d4:e1:f5:1a:f3:5c:5a:84:27:4a:ae:ad:eb:2d:
                    73:64:79:5d:92:37:24:bd:6d:cd:15:3d:00:5c:99:
                    e1:84:63:c8:87:3b:bb:30:73:fa:8b:eb:88:3a:16:
                    b4:b7:72:17:31:54:8e:c4:4d:64:17:f3:ff:c2:75:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:FE:E7:4A:0E:3C:73:78:BC:23:51:A4:3E:80:1B:CF:38:69:37
            X509v3 Authority Key Identifier:
                keyid:C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:de:18:45:a2:29:e8:fc:58:bc:61:9f:f6:8a:37:33:a8:08:
         6c:9f:d5:cc:c5:f7:3f:c5:59:11:07:7e:01:66:f2:20:2b:f1:
         87:71:61:d9:2b:5c:3a:d0:76:f5:bb:04:64:0c:93:eb:71:99:
         86:4f:05:82:e0:8e:33:66:8a:d6:25:ef:e6:36:94:2f:f0:34:
         f5:35:b3:42:27:c0:7c:11:c8:26:7a:f9:3c:70:e9:de:a7:89:
         e4:99:48:d0:9f:1d:ec:66:de:a3:f4:fc:63:ca:6c:80:11:12:
         6c:e6:c6:32:04:cb:08:c2:e1:ae:e5:17:38:4a:f2:cc:9d:af:
         7c:1b:01:9a:e8:bf:17:2c:38:e8:cf:d9:cc:82:ee:63:2e:3f:
         7b:0a:a8:0f:00:5e:65:de:44:fe:75:34:34:57:4e:4d:d7:b9:
         46:80:91:bb:11:75:7f:6e:61:ee:08:71:2a:98:1c:07:30:96:
         99:d6:7e:4f:37:89:ae:21:3e:22:13:55:a7:cf:39:a1:ae:e7:
         e1:21:55:5b:5b:0e:ba:0a:1a:93:00:2d:61:b5:0d:b2:66:06:
         f5:6d:b9:f1:61:17:34:e0:53:9c:99:bb:95:0d:21:6b:8b:a1:
         cf:80:b4:36:b7:93:f9:45:21:dd:a5:03:b9:f9:64:2b:b3:2b:
         fb:6b:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:05:28 2025 by rpki-client