Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft
File:                     CDB4502328A17F5E10125CA4554E967C912340D3.mft (raw, json)
Hash identifier:          H1eOss10/D4SqObtE7v6NHQW+UKN2C0DCT25KDMG4SI=
Subject key identifier:   FC:60:B6:C2:DC:7E:DD:3C:7D:B3:94:54:5D:B1:E2:97:F4:35:D8:1D
Authority key identifier: CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3
Certificate issuer:       /CN=CDB4502328A17F5E10125CA4554E967C912340D3
Certificate serial:       244BE55CCBF4869B966ED7646CB1A8918436DA09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft
Manifest number:          13
Signing time:             Thu 18 Sep 2025 03:04:12 +0000
Manifest this update:     Thu 18 Sep 2025 02:59:12 +0000
Manifest next update:     Fri 19 Sep 2025 06:40:12 +0000
Files and hashes:         1: 323830343a393536343a3a2f33322d313238203d3e20323734353230.roa (hash: ERlKqTm+47mLiWypT+aX8LH7xhbod7WTHoUYvN7TwbY=)
                          2: CDB4502328A17F5E10125CA4554E967C912340D3.crl (hash: CWv+PpB8Ur9J2tGSj5wOvtUHZgU/Fulzm+413LOEI90=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl
                          rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4b:e5:5c:cb:f4:86:9b:96:6e:d7:64:6c:b1:a8:91:84:36:da:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4502328A17F5E10125CA4554E967C912340D3
        Validity
            Not Before: Sep 18 02:59:12 2025 GMT
            Not After : Sep 19 06:40:12 2025 GMT
        Subject: CN=FC60B6C2DC7EDD3C7DB394545DB1E297F435D81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:26:fe:86:83:02:c7:ed:df:66:6a:0a:ac:
                    e9:7d:66:7c:b4:96:d8:5b:fb:8b:e1:76:fc:0a:f5:
                    4c:cd:f2:4b:95:93:94:3f:16:d4:b3:ce:32:97:2e:
                    83:d6:80:44:3c:3c:69:39:b2:49:de:76:3a:4e:a7:
                    82:10:80:fb:d0:f9:09:4e:4d:5f:27:5d:09:48:26:
                    f8:aa:e3:f0:46:9d:0b:4e:09:d2:34:a6:f4:ce:63:
                    4b:1c:88:8d:cd:37:65:54:f0:25:23:2f:32:7a:90:
                    e0:d3:9f:96:6c:7a:04:82:cd:ed:8f:e3:36:02:d9:
                    21:d0:f9:32:59:f8:bd:71:e7:dc:13:8a:ed:21:ef:
                    c0:8f:b7:8a:19:3d:6c:8c:3d:5e:48:48:3c:f6:61:
                    76:34:73:d6:71:98:a1:6d:54:e8:bc:7d:36:ff:e3:
                    1f:d1:76:ed:d0:8c:b9:1f:5a:bb:ea:f9:77:6b:a9:
                    90:81:3e:cf:e1:86:1e:01:ef:bb:2d:39:aa:2f:f7:
                    ae:06:40:a2:d9:17:cd:87:4f:e0:e5:92:8a:47:5f:
                    e3:f0:8b:de:0d:2d:56:e8:59:87:d1:8c:91:bf:29:
                    b7:8a:68:19:7c:5b:3c:ce:c9:64:ea:35:b1:a3:46:
                    62:14:4c:2f:47:bb:b6:70:09:0d:d7:6f:78:79:d2:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:B6:C2:DC:7E:DD:3C:7D:B3:94:54:5D:B1:E2:97:F4:35:D8:1D
            X509v3 Authority Key Identifier:
                keyid:CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:86:ed:dc:5f:1d:f8:89:9d:5d:48:7b:42:59:5d:92:bf:32:
         c0:07:fc:03:8e:fc:0f:00:6a:6e:5e:a9:2e:ea:1d:9a:51:29:
         d6:4a:69:41:28:64:12:c1:96:d4:2b:df:73:36:ba:fa:88:ce:
         c8:39:fc:09:0d:9a:86:51:86:57:ca:c1:e5:40:41:4a:89:aa:
         a1:18:df:1e:a1:43:fc:96:ca:1c:c6:cd:e7:db:ae:5b:f5:55:
         e1:43:78:85:83:42:71:cb:f4:f6:c4:aa:8f:54:95:31:a5:c1:
         ac:21:41:46:8a:33:18:6a:18:30:42:24:47:8c:92:92:65:15:
         f6:55:8f:ba:29:59:f8:6d:f7:74:df:25:20:a8:95:4b:cf:55:
         46:2f:3c:51:aa:86:7a:e0:31:bc:fd:fb:aa:12:85:ab:e5:5f:
         29:ba:2d:07:8c:32:82:20:fd:ea:5f:21:cd:d9:47:c4:30:40:
         d7:aa:77:d3:9b:05:eb:7c:56:22:e5:65:2f:67:f5:f2:79:d7:
         50:54:a0:5d:9e:94:58:c1:da:9c:20:08:23:27:29:d2:9b:e0:
         eb:b0:1b:1a:d0:55:0f:78:10:91:93:c9:20:e3:76:43:b9:ca:
         6d:e9:58:a7:e6:12:50:b5:8d:68:ce:a0:e4:5e:34:b6:05:7d:
         9a:38:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:07:40 2025 by rpki-client