Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
File:                     7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft (raw, json)
Hash identifier:          BS6UQaSHpZItUtH2RLWSXwdIZNkDccX+20nvQq4PSlE=
Subject key identifier:   CE:E4:1D:F5:7C:A4:22:F4:99:51:D4:63:01:00:E8:E1:8B:9D:92:00
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       0492DC6D5F8EAED8F8A14314700526C0E9426919
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
Manifest number:          02C6
Signing time:             Thu 18 Sep 2025 07:00:00 +0000
Manifest this update:     Thu 18 Sep 2025 06:55:00 +0000
Manifest next update:     Fri 19 Sep 2025 10:29:00 +0000
Files and hashes:         1: 3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (hash: CDVybznQUICv+97JC1NTzuzJDlRwjzfxqO4x+j+8S9U=)
                          2: 3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa (hash: 4bkZgKiQUw/bCtUNTcBVGW3qimlL8NES5CdU9BpOcmg=)
                          3: 3133382e39372e31362e302f32322d3234203d3e203532363034.roa (hash: ADJcyWrTUrSA2wIn1N23WaRSq+5BCusmLWHHlJv5llM=)
                          4: 7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl (hash: 1gIAdR19dvSgu4ujVAQxrvhAwhqcIRLRlv0VO8PtroI=)
                          5: 3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa (hash: bRNVOZwBRYHeRLOC9VFJrTZW20aV4eMBJ0UbBc7OJL4=)
                          6: 3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa (hash: SdMfwOjgcA1R4Gwfzli7K9nzpPKqJk7EL6mIUoQaN1E=)
                          7: 323830343a6432383a3a2f33322d3430203d3e203532363034.roa (hash: kJjwIHnZZ2V959/qFZXoTKiDtanW1Nmeghj39L8sSQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:92:dc:6d:5f:8e:ae:d8:f8:a1:43:14:70:05:26:c0:e9:42:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Sep 18 06:55:00 2025 GMT
            Not After : Sep 19 10:29:00 2025 GMT
        Subject: CN=CEE41DF57CA422F49951D4630100E8E18B9D9200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:fe:d1:15:1c:1f:17:f4:1d:90:d4:c9:48:
                    54:da:16:7e:f6:ef:6a:31:a4:e1:bf:27:09:f6:08:
                    17:66:12:8f:d1:21:8e:06:28:9c:0d:c4:73:a3:ab:
                    68:4f:a6:9c:d9:45:d0:7a:3f:1b:6c:11:c0:da:b8:
                    40:8e:76:c2:23:69:7d:2f:3e:74:8d:b9:33:4b:4d:
                    21:fa:8b:8d:60:44:b4:7c:c8:68:a3:2e:22:56:25:
                    90:9c:38:ea:09:5d:a7:82:f8:08:b6:39:bc:7e:51:
                    be:ee:4c:38:4e:65:63:7c:ca:7f:bb:63:50:e8:8d:
                    8b:02:06:13:35:5e:90:16:ab:b9:65:ba:e4:76:f5:
                    91:29:a0:76:39:f6:9a:96:3d:fa:fb:f4:87:24:e3:
                    c3:f6:42:9f:77:c5:9f:e5:65:00:ad:c4:9b:5d:d0:
                    2b:dd:60:72:a8:ed:e3:55:6b:e6:42:57:36:1c:31:
                    17:9b:03:ef:e3:96:d0:9e:e1:3e:eb:f0:86:bb:2e:
                    29:85:eb:39:21:ff:17:1e:05:1e:32:41:15:b9:58:
                    9c:5e:cc:80:b7:23:39:18:e3:62:cd:bc:75:d3:cc:
                    d2:09:a0:0a:f9:be:02:76:87:63:5e:81:c8:e9:f6:
                    9f:43:91:b5:67:38:14:df:d7:05:28:66:0b:b3:9e:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E4:1D:F5:7C:A4:22:F4:99:51:D4:63:01:00:E8:E1:8B:9D:92:00
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:f5:ff:2d:5a:ab:1e:85:1c:2f:c0:df:41:25:ed:5b:3e:
         a7:7d:94:d1:1c:8a:50:f7:c4:92:02:91:60:28:45:5e:9d:cb:
         bb:e1:3a:6e:51:11:1f:d4:d5:20:87:51:b6:59:02:dd:d5:ea:
         40:3c:10:00:b8:6d:28:79:e9:2b:f5:94:ce:f7:01:d2:83:2c:
         57:65:71:24:b3:54:a7:c0:34:70:66:9e:24:ad:c5:a6:0e:3c:
         f2:19:af:c9:b5:9b:1d:ad:74:26:76:d9:15:1c:46:7f:42:50:
         16:e3:82:e1:6f:d5:d1:57:a0:00:7c:41:96:69:1c:68:02:01:
         8a:44:51:2a:2a:47:33:58:43:19:eb:d2:87:01:64:20:bd:e5:
         bd:9e:58:7e:99:5f:52:f4:71:01:9f:cc:25:48:06:3b:d9:13:
         58:17:ab:dd:ea:bc:32:ee:27:95:15:e5:26:a4:35:97:ac:27:
         f1:67:67:68:c3:8f:4f:e5:28:ca:8d:d4:79:8c:eb:13:71:15:
         52:2d:ed:fd:34:0a:97:ab:2b:9e:f8:d8:ea:3d:bc:35:52:0a:
         da:24:c4:85:25:5c:bc:70:c4:fe:94:73:e9:1d:c7:8c:9e:93:
         e8:fc:cd:72:f7:df:b6:41:fd:db:71:da:f7:48:94:c7:e2:3f:
         05:00:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:19:05 2025 by rpki-client