Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
File:                     0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft (raw, json)
Hash identifier:          2WuUI2z3v+d/KSwi7+NQTkT3RxBCtQjbQ03aTzju67c=
Subject key identifier:   EA:3D:AC:65:43:48:48:FD:DA:90:80:21:8F:1E:6F:C7:70:FE:39:88
Authority key identifier: 0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5
Certificate issuer:       /CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5
Certificate serial:       4DE9268B0A74A6E09E5C4AA1D08793D397F69B09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
Manifest number:          018B
Signing time:             Sun 02 Nov 2025 23:07:55 +0000
Manifest this update:     Sun 02 Nov 2025 23:02:55 +0000
Manifest next update:     Tue 04 Nov 2025 02:42:55 +0000
Files and hashes:         1: 323830343a373432303a3a2f33322d3334203d3e20323730393630.roa (hash: GjiymdvTqUdrG8Xpw9pQyey1hBMIcEvECgXIC6+Y0IE=)
                          2: 0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.crl (hash: alMYSQlOFqY8Fdvezz2xg5dHdGXstZ7oONVCDppb9PU=)
                          3: 3137372e33362e36342e302f32322d3234203d3e20323730393630.roa (hash: J9SIFBG/oDboK0oXnfsNj29lFKw86Lolzga6jASBuco=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.crl
                          rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e9:26:8b:0a:74:a6:e0:9e:5c:4a:a1:d0:87:93:d3:97:f6:9b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5
        Validity
            Not Before: Nov  2 23:02:55 2025 GMT
            Not After : Nov  4 02:42:55 2025 GMT
        Subject: CN=EA3DAC65434848FDDA9080218F1E6FC770FE3988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:e8:d0:34:b4:77:9a:f5:a5:87:1f:76:e6:
                    63:6d:e3:e2:6f:80:a7:b4:6b:ab:28:b8:90:93:19:
                    25:9f:14:a4:cf:f1:07:01:9a:1c:80:c2:17:6d:43:
                    5c:93:ef:12:a6:74:e6:6f:8b:2f:1b:58:fd:fb:a0:
                    08:36:25:46:c8:a6:88:88:33:c7:08:9b:8d:ce:3d:
                    cd:86:8a:31:ca:af:ea:59:2d:31:cb:19:4f:9d:41:
                    7b:b9:9c:38:25:56:aa:66:15:44:53:31:0b:a5:e5:
                    de:f0:75:e9:65:ca:3c:c6:ea:0d:e3:5e:12:d8:11:
                    c3:96:3b:eb:44:a4:09:b1:82:11:57:a1:fb:70:3f:
                    f7:91:ae:bf:e8:20:20:40:43:2e:8f:71:4a:59:09:
                    b5:1d:3c:07:f3:ca:0b:45:31:d6:3a:6f:44:c8:d2:
                    1f:da:a8:57:70:44:cc:f4:09:cf:b4:fe:8c:be:11:
                    4b:65:35:f9:c4:df:af:fe:d6:14:0d:32:81:9b:44:
                    72:31:49:b5:a7:7b:6c:46:e8:e3:f7:8e:4f:35:72:
                    6c:30:f9:cb:b5:4c:13:a0:51:07:f6:74:fc:26:ca:
                    da:af:7e:b4:60:bb:d1:81:1f:20:9f:fe:c2:0c:38:
                    b9:e8:cf:c5:00:34:ee:15:8f:c4:84:4f:ca:d0:cc:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:AC:65:43:48:48:FD:DA:90:80:21:8F:1E:6F:C7:70:FE:39:88
            X509v3 Authority Key Identifier:
                keyid:0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:35:60:d6:5b:63:12:b3:de:64:9f:36:8f:0c:fc:0c:73:
         4d:32:f8:a7:30:ba:b1:e8:72:7a:f1:93:99:c0:9a:38:96:ab:
         86:a6:25:2b:71:ff:b4:0f:3e:56:7c:51:0c:c0:53:6f:0d:be:
         c2:40:d0:b8:01:ce:e0:8b:cf:35:15:08:68:72:bf:ea:20:53:
         62:db:6e:5f:d3:da:77:18:e7:9d:c9:9b:35:67:14:25:1d:c2:
         b3:c1:f9:6a:a8:f5:04:2c:30:e3:1e:3a:e6:16:81:fd:95:b9:
         0b:76:80:7c:f2:2a:7a:94:31:0c:32:ce:2b:7a:4c:fb:a9:72:
         5e:be:ea:4f:09:50:00:96:bd:96:c1:46:75:e9:a2:85:2b:0e:
         38:c9:a4:2c:6e:93:02:f0:f6:20:a2:e0:06:08:a2:01:cf:34:
         cc:b1:9a:e8:93:8e:cf:74:ec:fb:1f:b2:91:10:f4:ea:4f:b1:
         b2:78:f4:c0:5a:37:fb:40:67:68:39:20:7b:10:b4:43:c1:31:
         a2:64:d4:22:5d:26:f8:31:d4:cd:0b:d3:78:a4:a7:6c:b3:f3:
         b3:87:fb:60:bb:bb:c5:99:b1:ad:a0:3b:d1:11:71:de:16:e7:
         97:de:77:38:96:32:08:f3:7d:86:da:00:f1:a1:f1:f2:73:75:
         13:2c:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:13:25 2025 by rpki-client