Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
File:                     2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json)
Hash identifier:          WKlQkcW8FfXyqb0J0DULzx/kcCW6Z9055bCcnyycW/Q=
Subject key identifier:   E3:E1:75:9D:48:09:62:FA:B0:AF:7E:19:A4:BC:2A:9A:17:BC:1D:0D
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       0217400302220AFEF2AA3884F3C6975DC9568777
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
Manifest number:          0305
Signing time:             Tue 04 Nov 2025 11:50:00 +0000
Manifest this update:     Tue 04 Nov 2025 11:45:00 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:00 +0000
Files and hashes:         1: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: QzY77npnmYGWyIzQ3+0FGFQKMhe3QAwpJTvLcFhREWU=)
                          2: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: cBphwTvrx3SCRnGJ4r7vVDC8gytBQc7VAhDDexBiS9Y=)
                          3: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: yrxgY//M5+mWvfVFpBjhbx1sSOwmgxonkXJBCznBSsg=)
                          4: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: NJXPg3F1laW5ItIIp22QI+IxMXIBDhivnZwY6ZphBEk=)
                          5: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: CQP3HUS35Qz5oIEtwNHruBuoq7MQ+rM1a+MsTLoK+Cc=)
                          6: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: Y7ZBcvqoFAWwxe+SXHw9z0vDSZ2z/duDgO6FbCBXRr8=)
                          7: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: F71ivpk+1NqQHvneGVzXJLNf3heVeNAS9Mm/s1aK1xc=)
                          8: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: FrsRVS8utbon7oWH2AXVtR/Ng1ve2fGBZ7E7JLuIdI4=)
                          9: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: L7mXU16WalNRvU/g3UN6EAKWiAxCDetlCh8cL1au8k0=)
                          10: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: GjZYzmx5TCUVGrdtTOThdIs6uYKAGgPT+rqpsOg9iSE=)
                          11: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: 5eXFDYcJ3nmPVI0tJflPeefx8uftXoBchJSt7T9eQNM=)
                          12: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: ecP24Ue+j6MS/x/FVulLpHANS1d31bjMHFM+5v/ZaHk=)
                          13: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: hLGz/D5soY3387SUgGsJs5xD6GDZUbWJ37e7fq9gkCg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:17:40:03:02:22:0a:fe:f2:aa:38:84:f3:c6:97:5d:c9:56:87:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Nov  4 11:45:00 2025 GMT
            Not After : Nov  5 13:02:00 2025 GMT
        Subject: CN=E3E1759D480962FAB0AF7E19A4BC2A9A17BC1D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:01:19:c7:60:e9:d0:ec:4c:f2:1a:7a:d3:68:
                    56:5c:0a:b0:86:63:e7:1c:4f:6b:08:10:16:ae:a1:
                    59:ec:41:f2:9d:98:47:29:5f:dc:eb:1d:a9:78:76:
                    3f:61:e4:80:ec:67:f4:05:fd:98:ec:c9:f2:cb:de:
                    c9:b7:f4:15:91:c8:40:44:03:35:52:70:c6:f9:92:
                    23:9a:0c:17:19:3f:e4:3f:b5:18:63:42:eb:ed:ac:
                    53:60:ae:2b:48:ff:9b:22:5c:f4:05:f9:25:bf:db:
                    84:5d:6e:e5:e1:ed:42:e2:56:e3:5e:23:a0:9f:fc:
                    ea:f0:e7:19:ab:c2:4f:e5:af:25:e8:6f:71:9d:5b:
                    66:4b:50:8e:2a:cd:88:06:eb:67:d1:2c:8c:98:59:
                    1c:25:20:14:65:bf:07:88:0b:10:63:85:7a:5d:9f:
                    53:12:25:db:a4:86:ca:1c:4c:66:ba:71:b0:49:04:
                    a5:ef:ed:a8:93:eb:cc:f0:3e:9d:cc:a9:1a:25:9c:
                    12:f7:a1:f9:51:8e:bf:d4:11:09:af:37:25:1d:18:
                    ac:ec:d1:f7:86:96:0f:2c:4d:59:48:bf:87:6c:99:
                    bc:dc:8f:08:b4:7c:64:1b:8a:4a:14:b4:dd:1b:f9:
                    ee:52:f3:1c:a7:1c:1a:c2:9c:a9:b0:df:85:52:7a:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E1:75:9D:48:09:62:FA:B0:AF:7E:19:A4:BC:2A:9A:17:BC:1D:0D
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:29:b3:df:eb:b6:59:20:f8:ea:79:c2:3a:5d:23:14:7e:
         83:33:09:6a:60:fb:1a:eb:ac:a2:4b:3e:c9:87:59:57:41:77:
         f1:0c:55:06:06:ed:62:e6:92:ec:b5:4b:d8:2b:be:eb:4a:50:
         92:ce:00:ff:21:f8:a2:05:3d:c1:8e:93:ef:bc:d1:84:68:cf:
         fa:81:b1:fd:ab:5f:d3:3d:bc:94:9c:fb:5c:d9:53:a4:36:fb:
         aa:14:83:71:72:c1:70:50:1b:0e:b5:92:cb:61:c1:55:e5:a1:
         f3:47:05:e7:6e:d8:6e:fc:e1:47:ac:70:2f:cc:96:84:07:f4:
         ea:7c:ec:44:98:2f:6b:ec:09:0a:f5:bb:2c:8f:81:54:18:02:
         b8:ab:53:57:b7:fc:87:a4:e0:7c:50:d3:eb:d2:9e:fc:d5:0f:
         1e:a5:d1:89:64:a2:63:00:32:88:a8:02:3d:ba:eb:9a:e3:f7:
         38:43:61:5d:0f:7d:32:cb:cc:b0:80:aa:7e:ac:59:45:d0:a4:
         b7:dc:bd:3d:15:98:d9:72:cf:93:6e:fa:59:cb:fb:ce:0d:45:
         9f:03:5e:0b:d7:b3:6f:3d:35:c0:9f:23:06:dd:39:51:a8:88:
         6c:d2:60:e3:f1:7b:4f:fb:e9:56:4c:f8:86:9e:62:d8:de:6f:
         fb:0f:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:49 2025 by rpki-client