Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
File:                     BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json)
Hash identifier:          YEcVmr7/yJI7HVs4ZKY0Yfl782XGuW/6cg7wPVNNNds=
Subject key identifier:   0C:79:27:27:26:59:0D:2E:52:94:88:07:B7:28:C0:55:58:F6:3C:96
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Certificate issuer:       /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial:       361E9983EC0962531FDBC59D86BE8A07D9D63170
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
Manifest number:          8B
Signing time:             Tue 04 Nov 2025 18:03:34 +0000
Manifest this update:     Tue 04 Nov 2025 17:58:34 +0000
Manifest next update:     Wed 05 Nov 2025 19:44:34 +0000
Files and hashes:         1: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=)
                          2: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: N41t+kc9LR6BcsFM5m/LMZn3y2hS61WWkuHndDQa4Oc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
                          rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1e:99:83:ec:09:62:53:1f:db:c5:9d:86:be:8a:07:d9:d6:31:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
        Validity
            Not Before: Nov  4 17:58:34 2025 GMT
            Not After : Nov  5 19:44:34 2025 GMT
        Subject: CN=0C79272726590D2E52948807B728C05558F63C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:a8:cc:eb:51:3b:1b:ec:14:d3:d7:5b:b8:
                    73:be:b5:27:31:db:1c:64:d3:2c:49:9f:fd:0b:34:
                    bc:c0:35:1e:a1:49:34:33:4e:b8:d9:20:25:52:a8:
                    fc:42:e4:95:96:ee:28:5a:ce:72:67:8b:4c:4b:ae:
                    79:fd:d8:08:53:64:1f:6f:c0:79:7b:76:54:41:8d:
                    1d:d4:15:51:6b:f7:32:8a:56:c8:bc:fc:ae:85:b1:
                    92:66:95:fd:21:02:30:28:86:02:95:71:c3:e1:47:
                    50:36:d3:0f:a9:c6:4a:b3:bd:69:7f:34:a4:52:bb:
                    f1:3d:be:8b:45:04:d6:ea:f1:db:e3:8f:07:d7:ac:
                    9b:39:70:6e:71:01:d4:62:0a:02:3a:92:13:f5:b8:
                    06:34:49:e4:13:95:27:aa:02:ba:40:bf:0c:f8:c1:
                    60:7c:bc:20:15:a0:2f:fa:c5:c3:d5:ce:72:8a:1b:
                    6f:ec:57:01:e8:4e:2f:1e:50:9e:a5:5c:1e:56:25:
                    b7:c5:02:c4:d3:dc:70:cb:b3:11:bd:50:fc:f1:de:
                    ec:58:40:da:13:a5:a8:c9:94:29:40:eb:25:fa:94:
                    30:52:8a:8f:d5:50:40:00:b9:15:69:b9:12:51:32:
                    94:34:19:b9:02:dc:5f:12:6f:c4:93:4a:63:1a:88:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:27:27:26:59:0D:2E:52:94:88:07:B7:28:C0:55:58:F6:3C:96
            X509v3 Authority Key Identifier:
                keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:be:fb:30:c9:a9:0b:8b:3a:22:5c:82:77:71:25:73:01:18:
         7c:c7:81:72:15:46:a0:af:03:7b:b0:61:1c:cc:21:63:ce:bc:
         cb:48:19:b5:86:8a:67:ad:52:9a:66:4e:55:d9:c7:41:f4:7b:
         dc:a7:f2:aa:34:e9:7c:f9:2b:b1:85:5b:ce:07:b5:02:90:11:
         68:c6:e5:df:e0:69:0a:98:ea:f2:0b:eb:28:2b:8b:b3:0f:17:
         89:79:f9:2f:41:98:e1:88:6b:91:32:b5:6a:46:14:fd:5a:46:
         e3:4f:d4:5a:fb:f0:0e:cf:da:c0:92:3c:0b:61:8a:c7:02:fb:
         a0:02:12:25:8c:0b:5a:d5:fc:5f:44:2b:cc:0c:7e:d4:17:a0:
         24:0d:3c:21:98:77:af:60:84:cb:e4:66:91:20:cd:1b:f4:bb:
         9c:62:a9:03:b8:3b:4b:aa:e5:2c:08:f6:e7:00:65:de:82:a5:
         9f:8c:e0:31:8c:74:2b:28:5f:6d:09:a1:e0:a7:1f:4b:e0:2b:
         f8:e6:3a:e7:61:d4:15:2f:ed:66:92:36:0e:f9:35:f8:69:7c:
         ff:c2:fa:a4:51:24:b3:69:ba:2e:aa:a0:6a:d2:9c:f8:74:09:
         1c:d1:5e:9d:6a:67:50:32:d9:8f:cb:40:60:ae:0b:3a:a3:bf:
         80:5b:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:27 2025 by rpki-client