Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
File:                     DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft (raw, json)
Hash identifier:          EFGrTmKr2PHWoB0nWcf0oBZXK6g6YJ9vmWAXJQ3nJEw=
Subject key identifier:   4F:0A:E3:F7:C0:D3:20:0F:9C:1D:71:EC:CB:1C:51:44:D2:3B:95:46
Authority key identifier: DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88
Certificate issuer:       /CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88
Certificate serial:       4B6C4B5D24E7BA6B8F7B8A51CE807796706B1607
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
Manifest number:          011A
Signing time:             Tue 04 Nov 2025 11:49:28 +0000
Manifest this update:     Tue 04 Nov 2025 11:44:28 +0000
Manifest next update:     Wed 05 Nov 2025 15:44:28 +0000
Files and hashes:         1: 323830343a366264343a3a2f33322d3438203d3e20323730343238.roa (hash: HcbDBo5vEhZDz22x2e4nDgT/2l3+LdsNneneCzQ9yYo=)
                          2: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: gEKEaIZuFtCa2m15vfxLEmbSM0J0ycpP6AHITuG0TkU=)
                          3: DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl (hash: RdFhgwRcJSVwNsiE3F7tInJXlNrzZE6TN6qUXFoRhCo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl
                          rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6c:4b:5d:24:e7:ba:6b:8f:7b:8a:51:ce:80:77:96:70:6b:16:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88
        Validity
            Not Before: Nov  4 11:44:28 2025 GMT
            Not After : Nov  5 15:44:28 2025 GMT
        Subject: CN=4F0AE3F7C0D3200F9C1D71ECCB1C5144D23B9546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:0e:c2:44:44:f9:89:b8:86:2a:2a:a4:b0:
                    32:27:b0:af:6a:24:25:22:78:3a:4c:2f:dc:6c:b5:
                    f2:64:cc:fc:ec:6b:af:41:bc:84:72:4c:f4:48:1d:
                    26:32:9f:2b:8b:73:d0:6b:ac:a8:d8:61:bc:0c:36:
                    2d:8e:27:f6:9c:f9:31:77:af:6e:bd:5d:6b:aa:4d:
                    51:b0:c0:38:47:f0:a9:31:3d:0b:d6:91:ba:c7:88:
                    22:c1:4e:85:55:b1:81:91:a8:d3:22:88:30:c4:c7:
                    5a:4e:c9:f5:37:8a:c8:43:26:56:b5:12:05:9c:c3:
                    dc:32:5c:cc:4c:98:44:4e:ed:00:bb:39:68:06:93:
                    3b:8d:dd:8d:f6:fa:2d:e1:77:46:96:69:39:4f:8a:
                    af:63:3f:b7:61:3a:b9:9a:72:92:2f:8b:2b:cc:f1:
                    3b:61:5d:89:8d:b8:96:8c:90:41:7f:70:00:ac:9e:
                    e6:20:26:5b:cb:77:c3:44:c6:89:48:a5:04:6f:d0:
                    c7:89:95:5d:ba:26:92:06:72:a0:27:c5:76:77:86:
                    ec:0b:5d:14:30:7a:4f:ae:08:60:6e:ce:75:88:5e:
                    8e:87:6d:c5:f2:07:3e:d4:5f:f8:8e:dc:ca:63:1f:
                    02:5f:64:91:92:d8:bc:99:ee:c3:3b:81:3b:58:ec:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:E3:F7:C0:D3:20:0F:9C:1D:71:EC:CB:1C:51:44:D2:3B:95:46
            X509v3 Authority Key Identifier:
                keyid:DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:21:46:06:60:43:db:a6:57:15:ea:b9:6c:b6:44:29:c4:
         3e:66:70:9c:f3:0a:6b:ee:8a:c3:71:8a:d4:28:3f:0f:e2:fa:
         80:e8:d1:d4:32:d9:1e:0f:45:05:83:91:12:e9:d9:0d:49:74:
         c6:a3:1a:ca:46:b8:66:13:f2:42:97:96:49:bf:56:dd:4b:d4:
         f7:4a:4b:78:f1:00:9f:be:9e:a5:fd:57:b0:9d:41:32:a0:cf:
         d5:e7:a8:bf:d6:ae:95:fd:e1:55:1b:d5:ef:c8:45:8a:09:f8:
         7b:da:b3:ed:0f:df:9b:5f:15:8c:08:80:6d:b5:51:37:a5:77:
         b0:ef:08:8d:58:1a:1f:e6:e1:49:2c:8e:9a:fd:71:8a:d6:bd:
         61:b7:f1:15:23:33:3c:37:28:39:8f:9d:f6:c8:60:bf:cb:69:
         e1:3f:f4:8d:bd:03:49:79:29:5c:95:10:66:8d:53:4b:01:dc:
         81:9b:36:7c:c9:6d:cf:37:e7:00:a7:99:43:be:c7:2c:7a:40:
         5f:96:f9:39:83:9e:00:98:d2:81:cb:b4:46:b5:dc:fc:41:40:
         f8:d3:13:64:70:60:c4:c0:fa:20:aa:ce:4f:9d:aa:10:eb:c9:
         37:54:ee:6b:c9:fe:79:d0:5a:cc:02:65:8d:c1:85:c2:d0:5a:
         51:88:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:55:29 2025 by rpki-client