Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
File:                     9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft (raw, json)
Hash identifier:          gz28qx3KrwYhD4NostcZjSaf1JWP8RnXTpRZjhWVqjo=
Subject key identifier:   AF:E4:D2:39:63:D8:96:1B:17:59:11:7E:43:14:29:7D:63:CB:81:C8
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       70A5BDB284C9E3C17527C39444FA3E20635C3933
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
Manifest number:          EA
Signing time:             Mon 03 Nov 2025 09:23:03 +0000
Manifest this update:     Mon 03 Nov 2025 09:18:03 +0000
Manifest next update:     Tue 04 Nov 2025 11:16:03 +0000
Files and hashes:         1: 323830343a323539633a3a2f33322d3332203d3e203532373732.roa (hash: 7i8PNiZy7UrEhvpiW3Goqw6tna2/N8kVlQNd4cZH4LU=)
                          2: 3137372e33392e3135382e302f32342d3234203d3e203532373732.roa (hash: 9bsj3xTABUN8OREhjB9VXY4wz7mabQPXnib3yXdFQoU=)
                          3: 3137372e33392e3135382e302f32332d3233203d3e203532373732.roa (hash: KTn7JU1CzD/sCzL3EZgCHRLOsGhxwJnPoop5g416Jh8=)
                          4: 3137372e33392e3135362e302f32332d3233203d3e203532373732.roa (hash: 4+85cHj8XlC4uAkSLW0jSqcYASOXKu/BcAHCoIJFE+Y=)
                          5: 323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa (hash: I0tPiS/C+mNosKTubcjUSJlraIeJAuVaVZQDDmxBGQ4=)
                          6: 9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl (hash: /q+QmLPe3LysabrxEHoDah/SgSGMqMBP3KbDSCzBG/Q=)
                          7: 323830343a323539633a3a2f33332d3333203d3e203532373732.roa (hash: 9hvcl4YzxrpxmW0f5Zve5PtPcqEy9KBGriE9Bhtfdt8=)
                          8: 3137372e33392e3135372e302f32342d3234203d3e203532373732.roa (hash: SvtGvWmgyj+1h4IbTSJ/kd1Z7A6v+byubI6s8uQi2KU=)
                          9: 323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa (hash: FnNxSfDiH+7afm/gfWLqnHecDaZX2BMS0yYD3kUx36c=)
                          10: 323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (hash: uGhf5b+b9vD9gvSp9oZ6e4bL9uXZe0dzHDuziYVHF8I=)
                          11: 3137372e33392e3135362e302f32322d3232203d3e203532373732.roa (hash: bC8/pY8x0bcB1rMq3Mm4z3hVX53aa0leqyybkMy3wGc=)
                          12: 3137372e33392e3135362e302f32342d3234203d3e203532373732.roa (hash: LRBpX9SCU+k0n5R/kaO5O2zY6K4c2UvXNvjGyjY7hXc=)
                          13: 323830343a323539633a616130303a3a2f34302d3430203d3e203532373732.roa (hash: ckTk1DLt86GwYBY+/Aji+LYFdvo5I0gDIAh/XzYprFk=)
                          14: 3137372e33392e3135392e302f32342d3234203d3e203532373732.roa (hash: sP0I1qFnskwskL7NRIbsTlStQNBCgwVl6bl1KDNDr4E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a5:bd:b2:84:c9:e3:c1:75:27:c3:94:44:fa:3e:20:63:5c:39:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: Nov  3 09:18:03 2025 GMT
            Not After : Nov  4 11:16:03 2025 GMT
        Subject: CN=AFE4D23963D8961B1759117E4314297D63CB81C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:16:f8:e3:9f:8a:31:14:6d:cc:6a:68:5b:
                    6a:0d:a3:b9:79:40:42:43:ce:89:25:92:7c:b5:9f:
                    fd:99:89:a6:d9:7b:40:7a:76:03:31:49:fb:79:42:
                    d8:c0:8a:47:d2:71:a7:5b:05:5f:d8:4a:47:3c:97:
                    04:4b:86:64:bb:d4:00:21:4d:2f:2f:a6:94:68:72:
                    74:da:6f:a2:e0:dd:b4:fe:f8:5a:f4:b5:66:ef:f9:
                    bb:d4:2c:39:c1:e8:8d:af:63:4f:9c:ae:39:0e:d1:
                    15:e7:97:7c:ac:bd:19:66:4a:21:5c:3e:b6:9d:ca:
                    11:a7:96:93:ae:a5:70:d9:94:f7:8c:a3:c0:9c:bf:
                    0a:fa:d0:30:31:5e:1b:b7:69:60:68:69:c0:d0:7f:
                    cd:95:01:85:47:77:96:99:27:ea:13:63:95:e9:56:
                    a6:6b:ea:ad:4b:7c:a4:0a:41:b2:e3:33:29:9f:21:
                    de:a4:c5:59:1b:5a:80:9f:51:c2:75:a7:8b:ef:64:
                    a0:4b:8e:16:11:03:a3:77:b6:bb:f8:a9:31:b0:dd:
                    be:48:5f:92:79:6b:85:4d:14:15:68:6e:0c:15:fe:
                    ae:71:5d:8f:95:f6:a9:22:e1:d5:53:e1:21:1d:88:
                    8e:80:de:df:ae:a2:9c:eb:eb:8f:12:d8:aa:60:68:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:D2:39:63:D8:96:1B:17:59:11:7E:43:14:29:7D:63:CB:81:C8
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:77:96:22:8e:1d:6d:bd:cf:2b:e7:4c:d3:b8:6d:bb:a9:12:
         e8:d6:03:63:88:0c:87:47:4b:85:4f:4e:90:87:98:8e:4e:0b:
         c7:a3:b9:8d:ec:1b:6c:8d:1d:4b:57:19:8e:ca:ae:58:aa:45:
         f9:e1:ba:6c:d9:52:0b:b3:04:35:ea:75:40:6e:6a:7e:a1:a1:
         e1:93:aa:51:12:e4:0b:b0:be:c5:67:1e:d5:76:a4:8c:26:b2:
         af:69:34:f7:5a:36:f6:16:18:3b:48:63:6f:1c:b6:97:0f:e6:
         b5:d3:b0:d6:b0:da:2c:de:ce:3f:d4:3e:98:f4:04:31:d0:3e:
         fc:f6:2c:c7:c0:9b:ea:d3:b7:49:54:c2:c8:aa:f3:bb:a1:33:
         8d:9f:c7:ea:ad:f8:a3:ea:ef:ea:42:9e:d7:99:3b:e3:7b:2b:
         e7:c0:04:67:77:00:61:61:e7:3d:0d:86:8f:9d:bf:1b:1a:4e:
         07:2c:58:1e:17:9d:d6:eb:c9:b5:2e:7f:19:97:7c:16:bf:52:
         85:ef:d1:cb:d1:fb:0e:cb:73:bf:66:42:26:1d:89:33:46:ac:
         78:45:a0:aa:19:96:ba:99:8f:e1:68:15:e2:a3:96:04:55:23:
         fb:a7:8f:8e:8a:0f:99:20:0d:4a:17:a2:53:04:88:37:62:db:
         b2:75:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:50 2025 by rpki-client