Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
File:                     ED21D10C23C2376429733090A859B9263A7A9ADC.mft (raw, json)
Hash identifier:          7Zn+H2zXEbQIDv172UKxBlXW9++GDnfvKfpT7LpWShQ=
Subject key identifier:   72:28:A3:88:A5:EC:42:BB:FF:33:47:21:92:E7:0C:7F:41:1F:A7:89
Authority key identifier: ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
Certificate issuer:       /CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Certificate serial:       07516D577F45B9E0CA28E98FE052C5E1582BA222
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
Manifest number:          024B
Signing time:             Mon 03 Nov 2025 21:36:56 +0000
Manifest this update:     Mon 03 Nov 2025 21:31:56 +0000
Manifest next update:     Wed 05 Nov 2025 00:17:56 +0000
Files and hashes:         1: ED21D10C23C2376429733090A859B9263A7A9ADC.crl (hash: CHyS7kd1+Jh5h4EJukFdvoQno+TNtl5KzS3mhNRuhd4=)
                          2: 34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa (hash: qVrhSjcY3K4UfNwcC/dV12GQv2xMkkxByFEq3c9l3as=)
                          3: 323830343a363633633a3a2f33322d313238203d3e20323639353335.roa (hash: 4GsVdnrX70b5P2ipb6ZsdX0i4/IV3OWiKJlfoqHPjdQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl
                          rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:51:6d:57:7f:45:b9:e0:ca:28:e9:8f:e0:52:c5:e1:58:2b:a2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED21D10C23C2376429733090A859B9263A7A9ADC
        Validity
            Not Before: Nov  3 21:31:56 2025 GMT
            Not After : Nov  5 00:17:56 2025 GMT
        Subject: CN=7228A388A5EC42BBFF33472192E70C7F411FA789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:8d:80:e5:67:cf:1c:e6:cd:0a:33:17:f1:
                    ae:57:07:0c:03:28:29:bc:29:b3:6b:ae:66:bb:d9:
                    8d:75:74:02:a0:39:b8:2d:2e:75:f3:8e:50:3c:57:
                    1f:9c:35:91:39:f4:f4:4b:ee:15:35:79:56:0e:3e:
                    91:fe:ee:5a:87:3b:cf:95:c8:6b:dd:18:2a:f1:ae:
                    e9:43:2c:77:07:89:d7:6a:35:f3:b6:30:f2:68:d4:
                    60:b0:b4:4a:41:36:38:f5:5e:82:6b:18:fb:85:64:
                    30:4f:45:68:b5:cf:d3:11:98:39:28:91:45:b8:62:
                    4f:e6:69:e6:09:0d:52:c2:70:a8:42:fd:64:59:8a:
                    7a:e1:81:6d:d8:16:96:44:00:88:6d:15:f7:ec:79:
                    45:9b:58:d1:25:1f:ae:32:15:d9:92:c6:2f:90:9c:
                    57:a3:bb:3d:a1:8e:eb:18:ab:45:ef:fc:52:f9:3b:
                    39:be:ad:9d:86:c5:b8:e6:13:2b:4d:7e:19:0d:7c:
                    21:97:0d:a7:f9:cb:63:14:78:25:a9:5d:e4:69:fd:
                    10:7d:27:fc:c2:b5:d3:a2:12:07:57:5d:50:18:81:
                    f6:ca:aa:cd:04:ec:74:c2:b9:9c:2a:58:e4:ce:3b:
                    cb:11:5f:04:30:17:78:82:bc:c0:ce:8c:4f:09:f1:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:28:A3:88:A5:EC:42:BB:FF:33:47:21:92:E7:0C:7F:41:1F:A7:89
            X509v3 Authority Key Identifier:
                keyid:ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:03:24:23:b4:80:ed:6a:1c:ae:95:44:d4:de:68:2e:eb:34:
         2e:40:4e:a3:e7:ed:7f:12:d1:57:76:29:5f:be:4a:f6:98:d7:
         7b:dd:ec:10:6f:87:eb:21:8c:91:dc:8f:6c:04:28:f9:68:97:
         2c:7e:06:15:f0:64:02:ac:30:7a:ab:b3:96:33:3b:60:0f:6a:
         cc:01:96:33:b0:63:44:12:3f:f2:24:be:49:32:b7:b4:7f:e9:
         69:4c:e4:f6:5e:ec:cf:aa:69:e5:20:8f:83:22:ff:2a:96:e1:
         fa:2d:63:ec:0e:a6:2e:60:52:77:fb:51:51:80:fb:8f:7d:a4:
         99:b9:95:b3:57:3a:13:fd:5e:b3:af:32:3d:84:0d:6b:46:41:
         71:d7:64:80:79:45:d8:25:15:7b:3e:7c:a3:65:9f:60:0e:dd:
         ed:bb:85:63:1a:7c:db:06:ec:73:3e:40:32:e7:59:72:f1:60:
         6d:71:35:8f:51:5a:93:2c:fb:a1:a9:09:f4:72:d2:38:b5:33:
         c6:c0:08:da:71:ba:5d:0b:58:6e:31:62:03:e3:40:af:96:be:
         57:40:69:23:c0:82:34:99:5c:f7:7e:03:34:5e:28:eb:a1:a9:
         59:0d:dc:90:e6:3f:4a:07:1e:8c:6f:59:20:37:de:05:7e:ec:
         4d:e3:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:10:14 2025 by rpki-client