Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
File:                     2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft (raw, json)
Hash identifier:          8M/++85ZkOJuUa4lFjxruDXGtQBu5OiCNVp7iEAnmj4=
Subject key identifier:   51:01:1E:B0:86:AE:CB:41:1C:A6:D7:5B:A2:7A:21:E8:92:FF:7F:E7
Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE
Certificate issuer:       /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
Certificate serial:       0CCDCFF599ABD0E270F2B77FEE2FCB01D79E4C1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
Manifest number:          0305
Signing time:             Mon 03 Nov 2025 09:38:51 +0000
Manifest this update:     Mon 03 Nov 2025 09:33:51 +0000
Manifest next update:     Tue 04 Nov 2025 09:42:51 +0000
Files and hashes:         1: 323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (hash: DJ6pO5xL0y0myCGGnaxN29PFLO6qKHeYi6tb6Erlx5c=)
                          2: 2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl (hash: CdA+D6fVkWjOcElVHGUJxWlh3kghSH3/SsdfUIy5aqQ=)
                          3: 34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (hash: sKEROWi5SvX7Dw54TZAizgA2/OCs3EGBz5Rt5H3jLx4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl
                          rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cd:cf:f5:99:ab:d0:e2:70:f2:b7:7f:ee:2f:cb:01:d7:9e:4c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
        Validity
            Not Before: Nov  3 09:33:51 2025 GMT
            Not After : Nov  4 09:42:51 2025 GMT
        Subject: CN=51011EB086AECB411CA6D75BA27A21E892FF7FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3b:12:c0:04:8f:c8:6c:76:12:37:95:dd:e4:
                    81:be:4e:d0:08:71:8b:23:18:42:0d:f6:3f:fe:83:
                    77:3a:9a:20:3a:24:93:93:b7:2a:93:a9:14:d1:09:
                    a7:c8:c6:c9:ec:ce:0f:d1:16:22:f4:20:33:bd:6e:
                    b4:9c:9e:3a:50:31:55:9d:b8:79:13:c1:7a:fc:db:
                    8e:5c:a9:35:01:b3:78:c6:97:c4:fc:ca:c7:f6:ab:
                    19:81:23:27:a9:a5:c6:df:bd:7b:6d:c0:c2:59:66:
                    bb:ea:b4:03:49:1a:ec:92:b0:85:b5:6e:61:3c:5e:
                    78:31:e7:4b:42:0c:58:7c:97:1c:74:5e:96:75:dc:
                    0a:84:6a:09:2a:d4:fd:5c:ba:f4:a0:f1:c4:06:84:
                    ae:01:30:09:0f:0c:4a:aa:c3:f0:a7:60:82:f2:eb:
                    20:6e:48:ad:ae:57:39:3c:38:2a:50:21:ed:b2:72:
                    59:ab:72:97:56:57:6b:a6:36:1d:2e:9b:cd:e7:13:
                    2d:14:ed:61:7e:6e:46:dd:d6:c1:2c:90:ea:82:ad:
                    2c:40:25:e0:ec:31:f6:49:84:35:d9:f0:a9:21:26:
                    45:fa:02:4e:f2:da:6e:d0:a5:f7:08:4b:26:e7:03:
                    20:c7:e5:70:71:c4:8d:39:74:34:48:10:6f:62:a3:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:1E:B0:86:AE:CB:41:1C:A6:D7:5B:A2:7A:21:E8:92:FF:7F:E7
            X509v3 Authority Key Identifier:
                keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d5:91:d9:2e:cd:17:57:b3:0f:41:cf:1e:aa:5d:55:1c:7b:
         56:74:ee:f6:98:c8:44:67:d4:f3:c9:46:32:bc:53:5d:2d:f5:
         5a:e2:5c:14:49:81:cd:8d:75:6e:1a:3d:14:e4:f8:54:aa:bb:
         ad:20:bb:76:0a:80:18:34:96:ce:dc:ba:95:a6:d8:d3:d4:fd:
         70:5f:c1:e1:2f:c0:9d:74:1e:d6:bc:82:14:55:3d:23:6e:84:
         fa:cf:ed:37:f0:ad:97:a8:01:62:57:70:33:dd:4c:7a:62:da:
         b1:3c:9e:3c:37:d7:ff:43:39:48:e2:a7:f7:69:1e:56:75:ae:
         cf:87:49:d2:0a:ac:1d:d0:e8:a3:db:da:a3:79:6f:77:9e:10:
         57:56:e6:33:62:2f:76:63:d2:ec:cb:20:0e:f2:f3:21:5e:63:
         34:7b:81:3f:97:76:5f:c0:d0:0d:77:36:e4:2c:d3:32:c7:a3:
         82:d3:28:b7:fc:08:24:98:aa:b4:2a:d4:c4:cf:cc:b6:8c:55:
         dc:e4:78:5d:ef:af:53:7c:42:b2:aa:cc:db:7c:77:95:30:b9:
         5f:52:2c:85:e8:2d:1b:08:e3:6d:52:64:5b:98:30:bb:4d:67:
         11:35:34:84:d8:f2:6a:08:97:e2:52:5e:72:32:6f:3e:66:d8:
         7e:7f:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:54 2025 by rpki-client