Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
File:                     23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft (raw, json)
Hash identifier:          U/7oYgVQccwvjQkXBhDgQ5LopqNog2bSyYC2xUfPwCo=
Subject key identifier:   B2:2D:AA:06:31:91:BA:3B:64:4A:A5:8E:C7:A0:40:96:3B:61:0F:89
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       44638F934B31458B5C07175DF3B3FEC896619368
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
Manifest number:          0107
Signing time:             Wed 17 Sep 2025 20:37:02 +0000
Manifest this update:     Wed 17 Sep 2025 20:32:02 +0000
Manifest next update:     Thu 18 Sep 2025 21:53:02 +0000
Files and hashes:         1: 323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (hash: HYoFVQcqZGemQ3ppyPtnBcGaTkZRv9Y586oS+HeRgn0=)
                          2: 323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa (hash: sTMl5oOR+PB27IkCFATLub4H/wVGJc4jQBSRkZbaLIo=)
                          3: 23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl (hash: qeSEqBlHC0nYv8OHXkUAc/Ayt+m7yjYid7PcmBx7aKA=)
                          4: 323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa (hash: qAf22STPntaWt88qJT4dHNuQuRpFDP4chhOnFhx0vko=)
                          5: 323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (hash: 9q+3WZCQelpJ82GHGMPZnl7Km+15Ep1MFsxC6afmR5c=)
                          6: 323830343a386166383a3a2f33342d3334203d3e20323733373034.roa (hash: QXrOFT2cUsRU2r0pxCN+XM3aulT9UCyMbe+iqjUwCNQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:63:8f:93:4b:31:45:8b:5c:07:17:5d:f3:b3:fe:c8:96:61:93:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Sep 17 20:32:02 2025 GMT
            Not After : Sep 18 21:53:02 2025 GMT
        Subject: CN=B22DAA063191BA3B644AA58EC7A040963B610F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:fa:e1:f3:4a:43:27:4b:21:d8:98:63:ab:
                    44:58:3b:c5:4e:8f:9c:2e:48:14:da:93:37:c9:11:
                    98:3d:ac:e6:c3:61:e0:9a:3c:77:bb:50:6e:82:21:
                    88:75:69:47:f4:37:45:96:df:24:59:58:5a:6c:bc:
                    f2:ad:89:d8:8a:7c:36:d8:00:1b:e2:9d:b3:b3:b3:
                    d1:b8:d3:4a:1a:69:7f:6f:6e:ef:0d:8f:c1:8f:01:
                    77:90:9c:43:d6:ec:c1:39:ec:d2:22:94:ea:c7:02:
                    a5:94:f3:8e:e4:23:65:6f:3b:47:ba:ed:ad:62:6c:
                    01:d1:7c:ef:d2:b3:cc:da:a6:65:48:f2:3c:c0:40:
                    67:d9:01:89:3b:b8:37:d8:0b:87:09:b2:42:a5:a9:
                    31:04:33:c3:1c:15:4a:f4:b6:21:ec:73:96:11:08:
                    79:89:08:ee:91:77:6e:a2:0b:a0:d8:6a:2e:fe:10:
                    05:34:5b:28:52:c5:54:8b:6a:33:52:0d:e6:08:e0:
                    9a:76:64:9d:cb:39:0a:d5:06:04:56:71:f5:ac:7d:
                    ab:9e:6c:3f:2c:b1:6e:8b:5f:09:cc:d0:77:64:a7:
                    c9:50:79:de:e1:92:36:77:ec:27:84:6c:7c:ac:58:
                    d2:e3:43:0e:59:85:7a:82:d1:91:59:84:b6:ee:4e:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:AA:06:31:91:BA:3B:64:4A:A5:8E:C7:A0:40:96:3B:61:0F:89
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:ad:64:7c:d2:cf:d3:39:c0:35:02:5b:e5:36:2c:6b:18:
         16:0e:3f:1e:0d:0d:cc:58:c2:4e:ca:ca:57:07:58:a0:ca:3f:
         63:b1:e2:0a:1f:40:8e:d0:24:6c:1b:78:1f:b4:26:97:01:c6:
         19:ae:07:b7:49:5c:4b:df:0a:51:84:86:35:7c:bc:82:ae:fd:
         2a:fd:ad:e9:ce:f8:27:3f:29:e1:a5:ab:6d:93:ef:ce:e5:b6:
         4a:68:73:12:75:f8:d3:35:8f:91:c7:ec:06:a1:83:ab:0a:0e:
         7e:7b:61:34:3c:23:d3:fd:6a:e6:33:1d:1f:69:6b:ce:85:95:
         3f:58:06:92:bf:12:b0:16:94:01:ef:d3:11:9f:f8:d8:00:af:
         aa:af:b8:d0:af:31:e5:65:cb:1d:df:d6:06:a0:8f:9c:a5:fc:
         d5:9a:dc:ba:c4:37:0d:d2:b4:78:70:e9:08:7d:d3:79:a1:f2:
         7f:ff:4a:db:9d:fe:1f:97:67:46:0b:ca:0c:52:b1:75:23:48:
         28:d8:9d:d0:c4:d4:12:7b:8b:ad:a7:d6:ca:e0:92:c9:f1:40:
         06:72:b1:1c:ca:e3:a8:59:eb:38:53:41:4c:c3:a3:a1:3d:cc:
         d9:a6:be:70:f8:5b:41:1b:97:26:71:94:3c:20:dd:d4:66:eb:
         4a:54:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:40:30 2025 by rpki-client