Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File:                     B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier:          WNYGZv69lS8S0ZjVc6caKlZy9B5ciHkI0TPDTY9AHaQ=
Subject key identifier:   8E:F2:40:EC:25:E5:5C:C2:B9:88:6A:38:B6:FE:E0:93:B0:A9:C8:8C
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer:       /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial:       0F1F7670D08C68AE8C4053DD88028CDF71562C5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number:          66
Signing time:             Mon 03 Nov 2025 17:30:00 +0000
Manifest this update:     Mon 03 Nov 2025 17:25:00 +0000
Manifest next update:     Tue 04 Nov 2025 19:43:00 +0000
Files and hashes:         1: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 3h6SfhzIPmrfXblR02cl5n5u6+4bnzhiT4vzZuMnS64=)
                          2: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: BTJj/onFJkJNLtyygdiN21TurF5RoCwe7OIYHd0U/MA=)
                          3: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: VyE9iHz3xhEfhzvHNmYrZfWFUzLKuAQo+FzkgAdY7ME=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
                          rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 19:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1f:76:70:d0:8c:68:ae:8c:40:53:dd:88:02:8c:df:71:56:2c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
        Validity
            Not Before: Nov  3 17:25:00 2025 GMT
            Not After : Nov  4 19:43:00 2025 GMT
        Subject: CN=8EF240EC25E55CC2B9886A38B6FEE093B0A9C88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:13:4d:de:a8:21:0a:e4:3d:c6:a3:5a:01:
                    ee:2c:5d:6d:9c:b0:72:6a:76:29:7a:85:d8:db:e0:
                    44:32:64:be:b9:8c:c7:82:23:c0:a1:92:36:c4:7a:
                    36:5c:e2:f4:9f:cc:ca:cb:32:24:2a:d7:33:d1:a1:
                    33:20:5a:2f:3f:d7:ca:aa:93:fc:e1:9f:5c:a7:b2:
                    0a:bc:84:a2:6f:4a:d7:37:5a:e6:e8:2c:a7:80:d5:
                    21:ec:34:f8:11:47:ce:1f:49:9e:9c:82:02:71:fe:
                    72:2e:cb:c4:c9:b4:ea:21:3d:55:1c:e5:b6:f8:68:
                    06:59:be:37:bf:ba:a6:0f:84:c9:0c:eb:dc:18:a6:
                    f5:12:ae:1a:0e:d2:f4:b7:c4:e5:46:26:4d:59:bc:
                    7e:b8:82:48:a9:b2:14:b1:70:9f:db:f0:08:4f:b5:
                    88:68:c9:05:81:4f:33:18:c5:d3:24:72:19:a9:d7:
                    9c:5b:9b:0e:8a:2c:f3:ac:ef:b1:b8:ad:f9:f7:90:
                    50:f9:92:31:50:08:8d:52:07:a9:db:e1:61:03:4b:
                    d2:e8:2c:7d:c5:ff:e1:b3:ff:f0:fe:12:d7:2e:17:
                    25:6a:6e:8c:42:55:46:25:53:5a:81:da:05:83:50:
                    cf:2a:cd:78:53:47:3c:33:b4:67:c4:56:fe:2f:0f:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F2:40:EC:25:E5:5C:C2:B9:88:6A:38:B6:FE:E0:93:B0:A9:C8:8C
            X509v3 Authority Key Identifier:
                keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:39:3a:86:0c:4a:79:27:35:f8:69:e3:43:69:94:34:55:
         7d:fe:17:96:ff:e2:ac:09:32:46:6f:bf:8e:e0:b7:ab:5c:d4:
         a7:62:44:a8:05:db:0a:fe:ba:10:4b:af:6f:0a:b6:9e:30:74:
         80:ce:eb:2c:c2:6b:99:6f:45:b9:55:bb:29:60:04:53:f9:1d:
         82:71:f3:6b:de:22:c1:d1:0b:e7:5a:b6:3d:15:ef:a1:a4:f6:
         70:95:3b:c6:da:32:6d:8d:84:98:d8:5f:18:8a:4a:02:b8:03:
         06:44:fa:b5:bc:29:78:de:aa:6b:fb:ed:74:c6:7c:69:ea:89:
         90:62:ef:05:ce:48:98:ec:db:95:89:10:84:ba:27:35:0b:09:
         37:a3:5b:4e:45:9c:bf:d2:b8:1d:0e:14:74:16:51:3e:eb:c8:
         b2:a4:dd:a2:17:b6:df:73:cc:0d:db:c0:d9:6a:6a:c2:09:d7:
         88:4f:5b:b4:41:d4:d6:29:02:ed:24:f0:3c:b4:a1:6d:40:c6:
         a6:40:e3:3d:a6:db:a2:3b:7f:ad:a9:d1:3f:09:c1:58:66:e3:
         4f:89:4f:cf:b1:b6:a8:77:c1:a2:54:3c:4e:ea:3a:51:29:7a:
         0d:6e:8e:28:3c:b5:ef:18:97:dc:09:c9:b4:f2:de:2d:0e:dd:
         85:03:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:25:56 2025 by rpki-client