Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
File:                     686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json)
Hash identifier:          HEq5YoPFEtOzzzKnco0hVV0PSGgRkXw01dTEeEGIE2s=
Subject key identifier:   B7:DB:32:DA:29:1A:0A:D9:AA:2B:59:39:DC:76:80:C6:60:BA:25:72
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Certificate issuer:       /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial:       3DF8F63AC73C729290C4FFD10759723F2F052086
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
Manifest number:          02CE
Signing time:             Mon 03 Nov 2025 12:02:04 +0000
Manifest this update:     Mon 03 Nov 2025 11:57:04 +0000
Manifest next update:     Tue 04 Nov 2025 13:32:04 +0000
Files and hashes:         1: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: TtqDTuEpCL6ntRGsi+M/spQwXaSGATyYe39EJMNS1Eo=)
                          2: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: eBr86NdP8UcNjjscNRKlKFP5HRNCnh3UcA1xh8UVip4=)
                          3: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: nwVIwcLmhDBueq5xt/gc37vwol4yziELmDoL4LzkP7w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
                          rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f8:f6:3a:c7:3c:72:92:90:c4:ff:d1:07:59:72:3f:2f:05:20:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
        Validity
            Not Before: Nov  3 11:57:04 2025 GMT
            Not After : Nov  4 13:32:04 2025 GMT
        Subject: CN=B7DB32DA291A0AD9AA2B5939DC7680C660BA2572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b8:20:42:72:92:6c:cd:3f:37:f6:7f:7b:b9:
                    e2:a8:9b:f3:7a:61:ae:2b:ce:25:9e:77:3e:59:89:
                    e7:c0:ff:07:6a:d5:8f:f6:96:72:8a:d9:65:e9:3e:
                    0c:b3:b5:75:c3:5a:d3:84:c8:40:7a:c9:60:ab:48:
                    71:44:a5:f5:f5:4b:e2:08:71:ef:ff:0d:e1:81:1f:
                    ac:ed:87:8b:a0:f2:f5:21:da:3b:71:22:aa:b3:46:
                    72:bd:8f:bb:28:3f:47:1a:ce:99:f1:58:69:f1:25:
                    5a:7a:f4:39:ff:50:dd:7d:1b:4c:23:92:e0:69:fe:
                    71:d4:af:5c:62:7c:5c:2e:00:c2:ee:04:a5:3f:ec:
                    b6:6f:a4:68:00:25:dd:d9:5e:91:c4:bd:64:bf:7e:
                    55:da:41:ac:e6:4d:56:ac:bb:56:29:e2:2a:d2:71:
                    2b:ae:3b:b7:a3:32:74:f2:2d:56:90:23:12:60:2c:
                    34:80:65:66:fb:6e:54:d4:8c:71:fe:9e:eb:13:d0:
                    ef:22:ad:de:b5:9c:2d:14:18:87:b0:33:30:ee:de:
                    96:8b:9d:6c:96:cf:75:1f:d1:5e:31:7f:c6:e9:76:
                    cc:cc:19:6e:aa:71:45:a9:66:1b:28:9b:52:36:a0:
                    4d:e8:3d:6c:e3:75:98:13:26:aa:b6:b9:8d:af:a3:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:32:DA:29:1A:0A:D9:AA:2B:59:39:DC:76:80:C6:60:BA:25:72
            X509v3 Authority Key Identifier:
                keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f4:04:35:03:84:53:ad:5f:12:eb:75:86:e0:83:4e:d7:8c:
         e6:d7:c0:dd:86:ea:1d:6c:2c:8e:6a:a9:cc:5e:47:87:38:33:
         3c:1f:16:6c:7b:fc:9f:9c:af:3c:57:46:56:2a:70:bc:5b:37:
         ec:9c:50:27:db:a7:54:14:7a:1d:e0:dc:d4:b4:5a:cd:76:6d:
         9c:bc:78:ef:82:47:25:43:73:df:01:4b:41:c2:45:05:3f:0f:
         a5:0f:ab:1a:bb:de:99:c1:e5:fe:d7:af:c7:22:c7:1f:39:bc:
         b6:71:86:c7:d4:9e:e3:d9:ea:05:9d:30:09:b8:e3:38:70:7e:
         74:3a:8a:0d:0c:5d:ba:66:00:73:53:c2:d8:7f:67:a6:3d:20:
         04:28:a3:bc:e7:2d:2c:91:2f:5e:39:24:07:e1:9a:fd:7c:65:
         22:c4:09:ec:05:fb:5d:85:77:9e:e4:9a:b4:21:1b:7c:1f:9c:
         7b:48:bb:24:7a:5c:d3:f0:6f:8c:2e:3e:2e:a9:02:e8:50:39:
         44:e4:b8:31:5c:ab:83:ba:c6:93:38:48:55:60:34:a5:ec:e2:
         f3:26:3a:af:76:86:e3:23:8a:3c:66:cd:b5:ca:c8:e1:bc:c2:
         af:3c:82:e6:95:7a:ae:26:5d:a8:c2:79:b5:d9:22:d1:b8:11:
         12:89:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:26:52 2025 by rpki-client