Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft
File:                     DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft (raw, json)
Hash identifier:          XhWc0pPKkNYxUZ96BPjpEAPHO+Jjm5UTxaisYnesDag=
Subject key identifier:   ED:A1:9C:CA:6F:0A:09:83:34:18:C9:F7:A9:7C:C1:41:C1:89:DD:E6
Authority key identifier: DE:DA:C8:0F:3C:5C:D2:67:DD:9C:CC:70:5E:AE:A7:F5:11:88:2C:47
Certificate issuer:       /CN=DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47
Certificate serial:       1434854C4C2DFCBBCB575FE73AFF49FD720FA8A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft
Manifest number:          0E
Signing time:             Mon 03 Nov 2025 15:54:11 +0000
Manifest this update:     Mon 03 Nov 2025 15:49:11 +0000
Manifest next update:     Tue 04 Nov 2025 17:04:11 +0000
Files and hashes:         1: 3133382e3131382e302e302f32322d3332203d3e20323634323535.roa (hash: UHnnJAEYGUGMSGG3IO51gN05QI2SqYFxSxobe2xv1PM=)
                          2: 3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa (hash: b85VVprr7MM6aBLoI4nkHjGbTLxDjDhxUTjfT0BdTnQ=)
                          3: 323830343a323530633a3a2f33322d313238203d3e20323634323535.roa (hash: dTSKMSRbyhTvbjsp6QccwAIoECYWS6etyS93CeZS+AE=)
                          4: 3133382e3131372e3137352e302f32342d3332203d3e20323634323535.roa (hash: yP/Z5v2S2csh1YWTvJ/Wt2KLTuFffkJnQglrfnGuJ78=)
                          5: DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.crl (hash: LpuRzsE6B/O74CuGRp+8Xgyq0dzJEHo1kTpL3srj5CA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.crl
                          rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:34:85:4c:4c:2d:fc:bb:cb:57:5f:e7:3a:ff:49:fd:72:0f:a8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47
        Validity
            Not Before: Nov  3 15:49:11 2025 GMT
            Not After : Nov  4 17:04:11 2025 GMT
        Subject: CN=EDA19CCA6F0A09833418C9F7A97CC141C189DDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:e1:95:5a:7a:1c:4c:74:4d:64:f1:41:9a:
                    d9:27:f0:93:f2:5f:b0:d0:23:70:a6:06:a7:ac:3e:
                    df:4f:a7:93:f0:fd:01:01:f5:0c:47:21:c8:c7:eb:
                    0b:de:0d:6b:ca:cd:06:2d:57:64:be:43:5c:c6:e1:
                    f4:d7:26:16:55:3c:87:ea:c4:2f:c2:55:3e:2b:eb:
                    b9:48:12:f2:e7:1b:0c:4c:22:46:c1:a1:51:53:06:
                    b7:98:3b:a8:a2:6b:a7:59:84:09:aa:a2:f5:6e:53:
                    e7:a2:18:16:ec:45:07:e2:5f:29:25:36:0e:7f:0d:
                    76:d0:ee:25:9c:90:ac:c3:6c:be:e2:76:b5:53:32:
                    d2:d7:0c:54:26:5f:88:ef:94:24:05:8d:4f:7d:d8:
                    7c:b9:c0:d3:65:0e:82:8d:56:d1:f7:69:8e:67:d5:
                    33:49:67:bf:a0:c4:eb:65:2c:2e:09:03:7e:2e:36:
                    74:35:a7:5b:19:8a:82:32:e1:43:58:1e:09:48:3d:
                    d0:5d:b9:35:21:43:2b:b6:d3:ba:01:9f:f4:f9:6f:
                    ad:df:21:78:5f:16:d3:4d:23:21:5b:23:13:11:ed:
                    9d:ec:6a:ca:4d:cf:b9:bf:c1:00:df:df:b1:70:30:
                    c4:69:b3:71:e9:fc:bf:04:ba:b8:2f:ee:fe:ed:4a:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A1:9C:CA:6F:0A:09:83:34:18:C9:F7:A9:7C:C1:41:C1:89:DD:E6
            X509v3 Authority Key Identifier:
                keyid:DE:DA:C8:0F:3C:5C:D2:67:DD:9C:CC:70:5E:AE:A7:F5:11:88:2C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:1e:f3:15:75:5b:6a:2e:84:a0:6e:1b:09:c4:d9:e9:97:
         f8:3d:ab:a4:ce:45:b8:9f:21:cc:34:d4:3e:27:b9:ee:78:fb:
         bc:61:e1:0f:b7:a1:56:2e:71:7b:72:ee:12:16:d5:03:f7:52:
         9c:ad:be:ba:18:2f:8c:55:90:9f:fd:bf:d9:cb:3e:a0:b8:c6:
         59:5e:d7:d3:ad:15:8c:75:48:cb:c5:d4:d5:9c:5b:6d:20:8a:
         e6:62:c0:b3:4c:37:ff:f6:d3:0d:c6:fa:f2:66:7d:d2:68:70:
         46:39:7a:8f:8b:fe:0b:9a:2c:5c:f4:84:f6:b2:ff:28:5f:db:
         cc:bc:65:91:e2:6e:35:c1:66:59:ce:2c:89:e1:97:6c:fe:60:
         44:18:f9:a6:cd:18:04:e8:8c:2c:7d:ea:6a:c9:97:82:a7:31:
         4f:07:9e:c6:08:f3:78:88:61:d1:c2:e7:a2:4f:28:61:94:d9:
         eb:5b:1d:cf:14:60:ed:b5:c6:0e:e0:72:5f:d0:d7:8a:12:81:
         ee:39:60:98:77:07:91:bb:88:80:ef:d4:3c:48:b2:f0:94:34:
         19:19:7d:67:c2:f3:63:b2:b9:58:1e:ef:d3:f6:e6:33:6b:45:
         33:e9:50:0a:53:7b:3e:c8:16:77:82:d9:cc:5d:8c:be:20:c4:
         b6:3f:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:52:59 2025 by rpki-client