Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
File:                     24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft (raw, json)
Hash identifier:          +tDeDvm+gbvYQ09Jn5EfJUwdpehI0XyhVrAQZ52DK9g=
Subject key identifier:   CE:4F:DB:92:96:45:E3:EF:0C:C1:3B:DA:25:0D:28:7E:CE:E1:13:F9
Authority key identifier: 24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82
Certificate issuer:       /CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
Certificate serial:       6C5D1527BE5ECDFC3D04E0CAA168299D464DED9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
Manifest number:          02FC
Signing time:             Tue 04 Nov 2025 12:39:01 +0000
Manifest this update:     Tue 04 Nov 2025 12:34:01 +0000
Manifest next update:     Wed 05 Nov 2025 16:22:01 +0000
Files and hashes:         1: 34352e3232352e382e302f32322d3234203d3e20323636393731.roa (hash: zGWGViH7td7rA46kVTE6+Y88vjDF1r+sX+Mq0/2vUdc=)
                          2: 323830343a343632343a3a2f33322d3438203d3e20323636393731.roa (hash: 2k3z59sIIIZSbsBKAV37RQcGmmjmnAqoXMIYJjnLyMI=)
                          3: 24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl (hash: 4z+HYz+sFMCvclkQ0x1r/Pla3yX26Iar3zxzW62KgaI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl
                          rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:15:27:be:5e:cd:fc:3d:04:e0:ca:a1:68:29:9d:46:4d:ed:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
        Validity
            Not Before: Nov  4 12:34:01 2025 GMT
            Not After : Nov  5 16:22:01 2025 GMT
        Subject: CN=CE4FDB929645E3EF0CC13BDA250D287ECEE113F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ae:5c:0a:f5:db:17:47:c9:cb:4a:27:78:8c:
                    dd:24:54:eb:fa:c2:34:8a:9a:ab:9b:31:a6:17:dc:
                    38:05:71:cb:11:c3:3b:6d:88:d1:be:ea:ae:e2:cc:
                    d9:56:9d:78:2e:43:d6:5c:47:7e:bd:2f:f0:c6:98:
                    ee:dd:59:6d:23:de:14:9a:e7:da:4f:69:36:46:89:
                    1a:fa:41:0c:aa:e2:0e:fb:d7:5c:32:e5:ae:e9:4c:
                    a0:a2:6c:ee:bf:c4:2f:6c:14:12:06:2a:65:08:b6:
                    88:91:76:bc:f3:51:f9:be:83:72:75:df:6a:26:fc:
                    e4:87:1a:56:b7:89:f0:ac:ac:31:e9:56:09:54:4a:
                    76:24:b1:a6:8c:12:a1:f9:05:68:85:b8:33:e6:bc:
                    e9:52:46:3d:f9:6b:d0:cf:5b:1f:8a:56:bb:19:86:
                    f6:fb:a7:c8:ca:65:c0:43:26:58:85:2e:ec:53:61:
                    50:b7:82:c6:bd:e5:ee:9d:15:79:fb:2b:6d:4f:7b:
                    66:ae:e7:64:c0:a4:1a:c4:4f:5c:11:46:09:69:ce:
                    a0:b0:a2:92:2f:d4:10:9a:29:77:39:1e:dc:f3:c5:
                    f2:ca:15:ae:25:a0:a3:0b:bd:3a:d5:69:f7:31:8d:
                    b9:07:1a:01:81:9a:60:6a:cd:9e:2b:73:30:51:93:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:DB:92:96:45:E3:EF:0C:C1:3B:DA:25:0D:28:7E:CE:E1:13:F9
            X509v3 Authority Key Identifier:
                keyid:24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:db:a3:fa:2b:26:45:94:fc:74:68:ab:be:0c:c0:53:ab:10:
         8a:4f:58:c7:e0:c7:c3:63:32:6f:fe:14:ae:8c:1e:55:aa:bb:
         17:b0:e3:f1:78:41:d7:d1:31:60:30:bf:56:ff:75:8d:9e:9f:
         29:39:1a:a6:ac:3b:fe:94:70:d7:f0:38:54:42:7e:ef:c7:b1:
         6b:99:26:d8:06:83:a2:78:25:fc:8c:0c:31:52:e3:db:7a:02:
         a3:b6:fd:da:a4:a0:c3:a4:74:a1:ef:18:1b:c6:e3:9e:26:31:
         4f:84:17:37:a0:93:49:64:0c:40:a0:15:85:08:7d:2d:70:f8:
         12:84:76:f9:ff:37:3a:94:11:e7:ff:c2:2a:d8:b6:07:e8:6f:
         51:2f:7d:2a:b5:ac:c9:6e:f5:c5:46:94:3b:4e:fe:ac:f5:c2:
         74:5c:2b:5a:d6:cd:b2:3a:83:81:95:2c:a0:c8:4c:8d:db:4b:
         ae:49:cb:91:ca:0e:66:37:97:3e:d8:be:71:26:62:37:45:1b:
         d4:3f:a2:2b:d6:f1:3b:16:78:b6:6e:6e:fd:a0:f2:6b:08:22:
         62:21:82:dd:98:f2:17:ed:33:01:d0:c0:86:7e:00:9a:a7:db:
         5f:69:84:c7:a8:72:bc:4d:43:3b:c9:2d:ca:2b:42:6c:a8:37:
         87:49:b7:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbF0VJ75ezfw9BODKoWgpnUZN7Z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRFQjI2QjZEODJFMTU2NUZGQ0IxQkU4QkMwQzJDQkJC
NUE4MDc4MjAeFw0yNTExMDQxMjM0MDFaFw0yNTExMDUxNjIyMDFaMDMxMTAvBgNV
BAMTKENFNEZEQjkyOTY0NUUzRUYwQ0MxM0JEQTI1MEQyODdFQ0VFMTEzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrlwK9dsXR8nLSid4jN0kVOv6
wjSKmqubMaYX3DgFccsRwzttiNG+6q7izNlWnXguQ9ZcR369L/DGmO7dWW0j3hSa
59pPaTZGiRr6QQyq4g7711wy5a7pTKCibO6/xC9sFBIGKmUItoiRdrzzUfm+g3J1
32om/OSHGla3ifCsrDHpVglUSnYksaaMEqH5BWiFuDPmvOlSRj35a9DPWx+KVrsZ
hvb7p8jKZcBDJliFLuxTYVC3gsa95e6dFXn7K21Pe2au52TApBrET1wRRglpzqCw
opIv1BCaKXc5HtzzxfLKFa4loKMLvTrVafcxjbkHGgGBmmBqzZ4rczBRk2tPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzk/bkpZF4+8MwTvaJQ0ofs7hE/kwHwYDVR0j
BBgwFoAUJOsmttguFWX/yxvovAwsu7WoB4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0V4QXBvNzVNR0NEeGtUNEdFc0g2bUFVYzlpMTlGaXpvQ2YyUVBmeVNz
ZkUvMS8yNEVCMjZCNkQ4MkUxNTY1RkZDQjFCRThCQzBDMkNCQkI1QTgwNzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0RUIyNkI2RDgyRTE1NjVG
RkNCMUJFOEJDMEMyQ0JCQjVBODA3ODIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0V4QXBvNzVNR0NEeGtUNEdFc0g2bUFVYzlpMTlGaXpvQ2YyUVBmeVNzZkUvMS8y
NEVCMjZCNkQ4MkUxNTY1RkZDQjFCRThCQzBDMkNCQkI1QTgwNzgyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdNuj+ismRZT8dGirvgzAU6sQik9Yx+DHw2Myb/4UroweVaq7F7Dj8XhB19Ex
YDC/Vv91jZ6fKTkapqw7/pRw1/A4VEJ+78exa5km2AaDongl/IwMMVLj23oCo7b9
2qSgw6R0oe8YG8bjniYxT4QXN6CTSWQMQKAVhQh9LXD4EoR2+f83OpQR5//CKti2
B+hvUS99KrWsyW71xUaUO07+rPXCdFwrWtbNsjqDgZUsoMhMjdtLrknLkcoOZjeX
Pti+cSZiN0Ub1D+iK9bxOxZ4tm5u/aDyawgiYiGC3ZjyF+0zAdDAhn4AmqfbX2mE
x6hyvE1DO8ktyitCbKg3h0m3FQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:30:33 2025 by rpki-client