Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
File:                     EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft (raw, json)
Hash identifier:          yp3bUwx+rpF2C7btEq39TIGAcc9hZnL/L/oGs2kF8c0=
Subject key identifier:   26:F8:A5:E7:CB:9D:70:50:DE:18:C5:76:E4:24:77:0A:48:EB:D9:B8
Authority key identifier: EE:78:CB:8F:15:48:BA:17:CB:00:86:EB:5D:39:0D:7B:02:6F:CA:5B
Certificate issuer:       /CN=EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B
Certificate serial:       48DB9A38C7932ABD3FD7E88224A404DF33467912
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
Manifest number:          021B
Signing time:             Thu 18 Sep 2025 11:29:08 +0000
Manifest this update:     Thu 18 Sep 2025 11:24:08 +0000
Manifest next update:     Fri 19 Sep 2025 14:23:08 +0000
Files and hashes:         1: 323830343a383739383a3a2f33322d3333203d3e20323732373139.roa (hash: NDSyJzTIRSFNTGy6Dbg8LWWYwwqJnkdYj/ktRX9ZwD0=)
                          2: EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl (hash: 0OsW4Vo2Ar5ciEq/4CiLJqoSMwa42e5lVXgk6q5HEgk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl
                          rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:db:9a:38:c7:93:2a:bd:3f:d7:e8:82:24:a4:04:df:33:46:79:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B
        Validity
            Not Before: Sep 18 11:24:08 2025 GMT
            Not After : Sep 19 14:23:08 2025 GMT
        Subject: CN=26F8A5E7CB9D7050DE18C576E424770A48EBD9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:61:c9:b5:c9:10:5f:f7:97:b7:fb:ea:dc:
                    a4:82:b7:fd:60:12:b4:1f:4d:ea:b3:77:14:3a:ad:
                    87:96:6c:f5:59:98:05:6f:97:9b:d8:a1:75:6e:18:
                    97:2c:60:b3:69:0b:ce:61:63:f4:8d:28:31:fc:33:
                    66:18:11:bd:8c:58:ce:6e:82:bd:b7:8a:dc:ee:0f:
                    0e:56:e1:92:b6:5a:4b:18:f5:6b:54:cf:7a:4f:15:
                    31:eb:51:c0:ca:2a:f2:83:27:84:bd:75:f1:61:3c:
                    87:88:63:97:c1:7c:a2:d1:78:9d:21:5e:6f:2b:66:
                    42:eb:12:9c:8b:ed:60:25:9d:b3:a4:82:a5:0f:a2:
                    68:ad:9f:43:20:59:25:c9:64:98:97:44:a2:c1:c1:
                    46:6f:e7:6f:a5:cc:82:9a:ae:f5:b4:72:9a:30:cf:
                    ac:8f:b9:ce:f2:c8:8f:29:37:66:6a:da:73:b2:3b:
                    76:3d:50:5d:ad:42:14:02:0b:c3:45:91:90:10:13:
                    ae:3c:81:74:a0:6f:6d:69:cc:2f:ad:df:ee:de:9e:
                    24:b1:f6:8d:b7:ff:91:51:83:34:f6:18:d4:af:7f:
                    0c:a6:0f:d0:5b:76:32:dd:30:dc:51:f9:5c:26:4e:
                    37:a5:0f:21:ad:d8:ce:36:33:8c:84:d1:e0:32:71:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F8:A5:E7:CB:9D:70:50:DE:18:C5:76:E4:24:77:0A:48:EB:D9:B8
            X509v3 Authority Key Identifier:
                keyid:EE:78:CB:8F:15:48:BA:17:CB:00:86:EB:5D:39:0D:7B:02:6F:CA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX5H7R32WDj13tDcMgVCUoZFe5MywwTrXWvHt9ePMYpm/0/EE78CB8F1548BA17CB0086EB5D390D7B026FCA5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8c:f3:07:24:50:1e:d7:d5:cf:3d:ed:ed:5a:08:d5:91:a5:
         ef:42:39:f1:b8:e7:b4:57:91:16:26:87:74:c5:1e:27:68:fe:
         8a:22:d2:ad:2d:d7:d9:c9:f2:c5:e4:35:72:95:71:a7:26:c7:
         ee:b7:a4:3b:76:7d:65:f2:e2:a8:d9:34:92:72:73:c9:52:56:
         a0:bb:68:24:2f:7c:d7:94:a2:e3:ba:ea:7d:18:0d:c8:ad:7f:
         22:ad:4e:96:0a:ab:65:d4:9b:f0:d5:a6:3b:0c:fd:52:a9:4e:
         d6:28:7d:d3:f2:07:18:dd:f5:d3:ba:a2:2f:3c:88:11:d1:60:
         12:60:ba:db:54:df:bd:5b:7d:f1:1a:78:4b:49:ba:ea:66:a1:
         f1:a0:cb:5a:16:4a:b8:bb:7f:50:4d:b0:43:ad:b7:23:31:78:
         33:81:c8:3a:1c:01:68:a1:64:2f:df:db:31:58:9c:e1:03:d4:
         4e:d4:c1:be:3b:9c:58:1d:9d:48:b1:a8:e9:ad:29:62:f2:73:
         1e:91:72:84:ac:cc:21:80:cb:ee:cd:67:70:1e:7d:f3:48:4e:
         c2:5d:36:9f:f3:54:e8:f7:65:d3:1d:e2:56:80:79:9b:09:9b:
         c3:ce:95:36:5d:1b:a3:62:ec:cf:30:54:c0:9a:2c:ee:21:85:
         59:79:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:28:43 2025 by rpki-client