Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
File:                     450D2460BB579B573599E83A5DA3018696A0F8F6.mft (raw, json)
Hash identifier:          V581lItt244gyebZpisfXxA8L9gKMERa3wQH6ZLfdPg=
Subject key identifier:   DD:32:AC:06:7E:C9:EE:C9:CB:F4:2C:58:25:4E:58:B8:4F:C1:29:10
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       3084BDAE9652D601A07A5B77359DF7FD65657D41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
Manifest number:          02EB
Signing time:             Mon 03 Nov 2025 17:17:38 +0000
Manifest this update:     Mon 03 Nov 2025 17:12:38 +0000
Manifest next update:     Tue 04 Nov 2025 17:28:38 +0000
Files and hashes:         1: 34352e3137322e3139342e302f32342d3234203d3e20323731363332.roa (hash: tmy1BxI6s+LvSpkxEmnLaFHhNSd3HBVMM0VAL5VI5ww=)
                          2: 450D2460BB579B573599E83A5DA3018696A0F8F6.crl (hash: w3WMXnLHkPsLYC8z/GqWfIsQAOeVhcYsuXDY6fPJK90=)
                          3: 34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa (hash: B7bkMTVvvMJbLRKotv0XjIUWl82PDZM6ex6/kWMOKJM=)
                          4: 323830343a376539303a3a2f33322d3332203d3e20323731363332.roa (hash: RxzwoUvkGdCYXX+anmSzkodA7NUYZOjAZb7nr59Y2zs=)
                          5: 34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa (hash: XC80ni81mADvW8cZ54+vgXe41X26ttzkk2jgQqAMcAE=)
                          6: 34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa (hash: 76s2iJW/3M+Uyfm01NT4dafE+smEG5jqwgpm9H5GP+k=)
                          7: 34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa (hash: xUhjSY1RuvBZ+CtG3BRNS5ndNwgB+gn6tZID73knRB4=)
                          8: 323830343a376539303a3a2f33382d3338203d3e20323731363332.roa (hash: w3XrN+8hqseXt7y8jY/5ZaAciRQFbYOO/wBiRP4kTZA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:84:bd:ae:96:52:d6:01:a0:7a:5b:77:35:9d:f7:fd:65:65:7d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Nov  3 17:12:38 2025 GMT
            Not After : Nov  4 17:28:38 2025 GMT
        Subject: CN=DD32AC067EC9EEC9CBF42C58254E58B84FC12910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:a3:d6:e2:85:10:35:5b:9e:3e:8b:87:fe:
                    4b:d1:e2:36:5f:c1:c1:a0:53:1d:28:75:55:54:ec:
                    fa:61:54:10:a9:a4:ce:d8:22:72:ef:e5:ae:8f:47:
                    f6:e4:53:93:69:ff:16:e4:3b:c3:4f:e0:0f:2e:ee:
                    14:b3:37:77:22:dc:df:9c:05:c5:8a:7c:1a:e6:89:
                    6f:76:98:b2:de:7d:b1:bc:24:ea:9c:82:a2:79:45:
                    0f:f9:0d:5e:67:7f:61:5b:40:ec:2b:6d:ce:f1:3f:
                    e3:37:45:0c:84:a6:ec:4d:ae:4b:c1:99:53:4c:a1:
                    8c:49:ac:0a:82:7b:5a:df:85:9f:26:49:d9:11:49:
                    ab:c7:01:64:d1:06:88:f7:16:27:19:fe:c9:83:b0:
                    d4:0e:60:57:0f:3b:e4:a2:00:dc:15:91:2e:70:04:
                    85:39:3a:05:db:a7:49:34:f4:df:7d:05:58:eb:c8:
                    f0:07:db:4a:97:ce:2c:cc:81:09:ff:8f:aa:c6:f1:
                    1f:b6:e2:a7:df:cb:69:cc:12:6d:bf:13:dd:14:89:
                    3f:2b:4a:e9:2b:aa:48:c1:0d:7e:3a:a3:38:9a:3e:
                    55:5e:3a:4e:2d:ff:5f:30:fe:62:ff:c3:e5:ca:fb:
                    cb:bb:4f:39:5a:09:08:d5:b7:d3:16:95:cd:88:d0:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:32:AC:06:7E:C9:EE:C9:CB:F4:2C:58:25:4E:58:B8:4F:C1:29:10
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:00:a1:55:54:8b:32:42:b3:4d:c9:24:d0:2e:c5:4f:cb:c8:
         1b:60:2b:e8:a1:62:ad:9a:f7:3f:49:8d:b4:ee:d5:c7:76:4c:
         4f:53:c9:31:7a:82:33:c7:66:ed:70:dd:a0:63:a9:51:f9:4f:
         cb:3a:fa:c6:1c:8d:7a:1b:a7:c6:b3:2e:3d:33:dc:53:6f:8b:
         73:b4:6f:e3:19:19:bd:4f:9b:5a:b9:c7:53:76:f9:9f:7d:4c:
         f4:ae:98:f2:c6:a5:bb:e6:f9:5d:10:91:85:cf:2e:ea:9a:97:
         3d:95:e0:7b:93:53:78:52:13:7a:de:ec:5a:bc:ab:95:74:d1:
         35:8c:ae:b7:6d:58:2b:8a:3b:fd:d8:b5:d3:87:03:22:b0:99:
         68:86:e2:0b:15:ab:d1:35:cd:2e:00:2d:d4:13:be:b8:85:39:
         bd:de:c4:6f:af:aa:a6:ad:89:81:4b:ec:fd:70:20:ce:98:c3:
         ea:e0:57:76:7a:ed:51:e8:bd:c4:a0:b5:2f:a6:5e:76:57:13:
         24:4e:75:9f:bb:7e:f7:b7:52:9c:4e:6b:78:42:97:9e:10:49:
         ce:13:15:b6:24:5f:5f:94:0e:af:bb:c1:72:c7:02:b7:a6:5b:
         97:d0:93:fa:e4:3e:9d:c5:1f:5a:5f:ec:7e:3b:2e:e7:11:74:
         f4:0e:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:13:59 2025 by rpki-client