Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
File:                     EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft (raw, json)
Hash identifier:          bhwXPQfkgNe57Qw+fHn7jaceoQoHKx4EzncM+Fsiarc=
Subject key identifier:   E6:D8:D9:DA:C5:26:B5:C9:31:40:09:AD:AE:F4:40:D9:17:B5:10:01
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       773F55D2599F8C4519787A528649BF4250661D10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
Manifest number:          0304
Signing time:             Mon 03 Nov 2025 02:26:32 +0000
Manifest this update:     Mon 03 Nov 2025 02:21:32 +0000
Manifest next update:     Tue 04 Nov 2025 06:02:32 +0000
Files and hashes:         1: 34352e3232392e35322e302f32322d3234203d3e20323637313234.roa (hash: /uc6c7XyiXCTAIBhDpl5LyVPPQopAFXX1/L/0TTtV8c=)
                          2: EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl (hash: 45gV6cBcP/KMLamTtNS/qy6+ZJnRwGHWuzHERdKL9WY=)
                          3: 323830343a343837633a3a2f33322d3438203d3e20323637313234.roa (hash: pxfpbBwhgB6nlE9ds577viUdvumcg7XKsBzwsubPE50=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3f:55:d2:59:9f:8c:45:19:78:7a:52:86:49:bf:42:50:66:1d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Nov  3 02:21:32 2025 GMT
            Not After : Nov  4 06:02:32 2025 GMT
        Subject: CN=E6D8D9DAC526B5C9314009ADAEF440D917B51001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:3d:15:69:41:14:74:a5:62:19:24:34:86:
                    be:9e:2b:2a:5a:0c:6a:20:bf:88:f3:8e:e0:36:4d:
                    63:f6:54:51:ba:83:75:d2:14:db:3e:5a:b6:4e:67:
                    52:ba:ba:c9:28:84:54:17:cb:c4:8f:2a:67:55:98:
                    17:af:14:d9:30:7b:40:8b:1b:ad:0e:bc:08:f9:89:
                    b7:5d:4b:bb:70:ae:9a:23:5a:c1:79:cd:1d:ee:63:
                    7e:86:62:8d:52:69:7c:c6:21:b7:d0:14:85:5a:df:
                    8f:22:f3:9b:1f:ec:b2:bb:35:a9:58:6d:9c:cb:5f:
                    cb:a2:5f:ac:9c:5b:61:8a:60:b5:72:f8:c9:74:c7:
                    83:b8:6e:b8:06:29:71:25:09:99:95:0e:4c:83:4d:
                    f9:cc:0b:0a:7e:f5:32:8a:6a:3f:d7:8e:f7:95:ed:
                    bd:93:e6:fc:88:55:ba:cc:aa:be:82:99:68:b7:2c:
                    e2:06:29:55:f2:9a:1d:b4:79:57:c3:91:84:43:16:
                    94:c2:5b:e5:60:f0:04:b4:14:6c:d5:39:60:30:8b:
                    ea:b9:7c:94:ff:a5:fd:bc:93:10:53:e9:5e:2c:cd:
                    80:4c:08:20:bc:3c:e9:14:23:2c:bd:68:c9:5e:40:
                    b1:07:c6:de:fc:1b:87:89:fd:97:e7:f2:b4:f7:79:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D8:D9:DA:C5:26:B5:C9:31:40:09:AD:AE:F4:40:D9:17:B5:10:01
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:74:0f:51:6d:63:8d:9d:53:74:3d:ef:67:d0:9c:10:46:2b:
         cc:83:44:71:a4:22:c1:ae:56:87:35:6b:f7:88:1e:3f:8d:a9:
         53:a8:e6:4e:89:3d:af:d0:af:f2:f5:b6:30:61:0a:d0:47:53:
         69:68:b9:a0:8d:cd:5f:11:29:c5:85:35:9a:a5:c0:a8:99:2a:
         2d:dd:e1:ce:ee:d3:15:9c:f8:c1:c7:f2:5c:44:d9:79:e0:8e:
         39:26:3b:be:27:66:5b:1c:ee:d8:78:a9:73:fc:59:65:e1:f0:
         be:df:2e:f1:9d:e8:41:a3:7b:69:b4:7a:14:e9:50:5c:df:31:
         be:f3:d1:64:97:0e:f1:66:33:96:08:5a:e1:ad:2b:7c:68:a7:
         7b:68:c0:a3:f9:d7:cc:3a:48:60:e6:1a:e4:41:e8:f0:cb:d8:
         6f:46:a9:fd:0b:2b:4f:6f:a1:fa:02:1c:88:13:6f:d6:ca:85:
         67:ed:db:39:46:72:13:9d:db:07:a1:e5:1d:11:79:0f:ce:39:
         7d:b6:9c:2b:72:37:00:f5:4a:ad:9f:4d:2d:65:54:1f:8a:dd:
         45:4f:bf:12:49:4c:2f:28:98:95:da:7d:49:cc:b2:a2:be:7c:
         28:b4:7c:ad:9d:13:8d:28:a5:ab:12:a9:d6:ee:38:e3:67:4f:
         67:40:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:25:01 2025 by rpki-client