Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
File:                     72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft (raw, json)
Hash identifier:          XrLRK6KK+8u7DJoPaR959mrxSkfTcJTAxts5dqFUTzk=
Subject key identifier:   1F:9F:6C:0F:77:7D:AD:C7:97:A2:4A:B9:DF:EF:6D:54:BE:F8:17:7A
Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
Certificate issuer:       /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Certificate serial:       17B501AE1CF785C84735E867DD992E7737F17EBD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
Manifest number:          018A
Signing time:             Tue 04 Nov 2025 20:34:08 +0000
Manifest this update:     Tue 04 Nov 2025 20:29:08 +0000
Manifest next update:     Wed 05 Nov 2025 20:51:08 +0000
Files and hashes:         1: 34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa (hash: LDA7BPnO0INBAOLpeunyqV46kLoPxb6h3HNziLGvD4M=)
                          2: 323830343a353939303a3a2f33322d3334203d3e20323638373130.roa (hash: lRzCpaJbvrSqda05BuCn2FdV6TjUSCPjhiYyCKKBL7U=)
                          3: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl (hash: ArA4y1UbAeuzTrIGPfbyobVUv928SpnkTr0yY3RFmbo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
                          rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b5:01:ae:1c:f7:85:c8:47:35:e8:67:dd:99:2e:77:37:f1:7e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
        Validity
            Not Before: Nov  4 20:29:08 2025 GMT
            Not After : Nov  5 20:51:08 2025 GMT
        Subject: CN=1F9F6C0F777DADC797A24AB9DFEF6D54BEF8177A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:51:e4:b6:ca:4e:25:c0:a9:1a:d1:11:39:
                    d0:dc:73:4c:ef:0c:65:98:ba:7f:33:13:f5:00:a4:
                    2c:14:99:a1:32:a3:69:12:7f:2e:c3:c0:f8:f6:d7:
                    3b:bd:08:9e:92:ae:28:fd:cf:dd:4b:af:f0:d5:72:
                    1a:f0:e2:37:c4:fb:4b:4e:ee:13:c1:c4:60:d3:3b:
                    b8:09:84:0f:78:2c:64:8e:2f:73:25:0f:ab:2d:33:
                    39:e7:df:47:c7:c1:02:b1:19:88:56:8a:43:5b:bc:
                    cc:d9:f2:38:f0:30:4e:19:ba:f9:60:90:10:2a:7f:
                    69:f6:69:2f:ae:c2:de:b8:1e:c1:2c:cd:c5:55:7a:
                    dd:2e:00:8b:60:9a:ab:25:5e:1f:33:f8:84:b7:46:
                    a8:89:1e:c8:fe:03:cd:4b:fa:78:6e:09:ac:60:21:
                    27:9e:5d:9c:93:25:ef:a7:f8:db:e1:2b:28:39:fc:
                    8e:96:7d:f6:1a:e4:49:bf:92:d0:45:75:e6:52:2e:
                    bd:85:54:36:55:07:8f:fa:43:d0:7f:17:27:5d:99:
                    4d:7b:2d:67:de:23:1b:06:16:a6:05:05:5c:f9:37:
                    7b:03:55:33:b4:9d:2e:61:56:c9:8b:42:be:4d:6e:
                    36:9c:f9:e3:8a:fa:0b:5d:df:d3:12:e7:0b:e6:9d:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9F:6C:0F:77:7D:AD:C7:97:A2:4A:B9:DF:EF:6D:54:BE:F8:17:7A
            X509v3 Authority Key Identifier:
                keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:f9:52:1f:55:73:27:77:5d:37:f5:9b:ff:87:92:a2:1d:
         30:0e:52:8d:db:f9:db:39:36:8f:59:4c:00:9d:70:ad:8d:91:
         c5:de:e1:9f:e8:9a:c2:7f:4b:c5:20:f7:fb:6f:a2:6a:1c:d9:
         a1:44:d5:d6:f1:86:95:f9:d0:9e:44:63:37:ed:c4:61:d8:6d:
         39:36:d1:34:24:64:d3:fb:b8:be:30:59:51:cd:67:d4:c8:4c:
         18:18:32:0e:77:31:c5:fe:43:cd:1c:ba:81:29:85:8a:cb:8b:
         aa:d9:35:7d:bb:bb:a4:1e:0d:b9:0c:a5:1d:52:06:be:a4:37:
         a6:b0:d1:f9:ee:56:64:84:fb:66:d9:1f:f9:15:b7:17:3f:5a:
         6c:7b:3e:5c:35:d4:5b:38:3b:cf:da:bb:39:af:58:33:fa:df:
         e6:91:d3:38:cb:84:0c:5f:bc:3b:79:30:d9:61:8b:86:e9:88:
         40:dd:0d:82:92:00:2c:71:12:72:d0:07:22:f9:3a:db:18:ee:
         0d:4e:80:31:8c:36:c9:34:57:96:b8:1d:da:aa:9e:32:59:76:
         25:57:de:73:36:b6:c3:1f:f1:85:9e:17:e0:18:60:d6:bd:98:
         03:3b:e1:ed:96:18:f4:9d:09:ff:f2:ed:47:e6:40:12:08:84:
         f3:9a:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:05:03 2025 by rpki-client