Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
File:                     695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft (raw, json)
Hash identifier:          /IYEBSuKRUu8W5A7xdESW/S0zfLPvI0NdGcNB1OBxfU=
Subject key identifier:   45:E0:35:1A:79:95:C8:A2:02:F1:83:31:5F:B7:B0:AA:3E:12:FB:43
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       3CCCC72DB435D9159B22FD411617CB374D691AC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
Manifest number:          013C
Signing time:             Tue 04 Nov 2025 15:22:53 +0000
Manifest this update:     Tue 04 Nov 2025 15:17:53 +0000
Manifest next update:     Wed 05 Nov 2025 16:59:53 +0000
Files and hashes:         1: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (hash: XqR77qLnVQPjvW+NdcPMVLhS20GCaBS3cER2/qIQpkE=)
                          2: 323830343a313139343a3a2f33322d313238203d3e20323633343234.roa (hash: qRpe3HMunOlDvbnsvh59LbRtj4Tl6ZLH4gik3VMaTCc=)
                          3: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl (hash: GAYjCuj7ci5PjCVSA6N/+t+x6+nzcRdWbYJHpCoNX/c=)
                          4: 3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (hash: 5x0qHXKy052VE9+a2c/CKxVgKs0GgOqzJVo2yGxQ3ro=)
                          5: 3137302e38322e3131362e302f32322d3332203d3e20323633343234.roa (hash: Bq7jYvlTzFbRiuY4gjDAmQq+hoFOYx9hFEexWG876XM=)
                          6: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (hash: QNYexqxi8ZgpvO1oIsW72rOjkHsbCORODUg23wwI2QE=)
                          7: AS263424.asa (hash: X2lwCnyIjJZQCVi9tOO9WwYnQKJe3byjUNKmKRdkgaw=)
                          8: 3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (hash: 05bv3rwHFKdXP0ka5nwmC7aUxyM/kFqlL8VfT5VE/hg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cc:c7:2d:b4:35:d9:15:9b:22:fd:41:16:17:cb:37:4d:69:1a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Nov  4 15:17:53 2025 GMT
            Not After : Nov  5 16:59:53 2025 GMT
        Subject: CN=45E0351A7995C8A202F183315FB7B0AA3E12FB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:74:1c:4a:e9:62:b7:9b:c7:da:e7:84:31:
                    c1:00:aa:4d:34:80:40:be:67:8b:fe:16:87:97:5b:
                    17:49:0a:32:b4:f6:bc:fe:48:99:75:b3:4c:96:df:
                    8c:a6:5d:0c:05:3a:6e:c3:67:a5:d8:02:8a:cc:6b:
                    77:d3:b5:c3:00:d0:1b:a3:7b:b2:b9:fa:54:63:c6:
                    41:b3:0e:82:0a:30:dd:ef:c1:8b:9a:cc:08:e2:73:
                    84:7c:1f:84:e9:74:eb:52:26:42:80:a8:42:68:fe:
                    de:02:8a:22:4e:d4:29:56:07:f7:91:40:b7:46:f2:
                    0e:91:50:fc:cc:d7:6a:3b:8c:9d:d6:08:b4:c0:33:
                    1b:81:2c:47:24:9a:cb:2f:b4:c0:d3:d1:59:1e:c8:
                    48:14:67:af:d8:b2:47:12:ed:ed:d4:0e:a8:dd:30:
                    90:55:0f:d6:d9:c9:71:1b:74:fc:42:bd:2c:98:d6:
                    71:b0:12:c0:ee:72:a5:b2:8b:53:fc:4e:e7:12:54:
                    0d:f3:47:22:6d:c0:f3:78:7c:ea:1a:6c:4e:48:52:
                    0c:d3:c5:b7:40:b6:97:bb:58:57:f3:8a:dd:6a:2f:
                    bb:78:3d:91:f2:68:6c:10:25:46:2d:9c:e3:91:0e:
                    76:0e:b1:1c:ce:46:85:d8:30:9b:69:9d:70:02:90:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E0:35:1A:79:95:C8:A2:02:F1:83:31:5F:B7:B0:AA:3E:12:FB:43
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:05:9f:ab:b3:af:ea:5b:d2:15:b6:f8:a7:a5:4b:43:c2:85:
         e3:f9:1b:c8:01:ce:1d:5f:37:2e:10:f8:a3:6a:bc:0a:0b:7d:
         ff:63:58:cc:91:67:84:a0:4c:99:f4:80:06:7e:95:76:4b:5c:
         89:46:e5:6c:63:bd:13:4e:29:cd:3e:1f:6c:c7:72:33:7c:ee:
         f0:c1:25:95:b6:26:39:be:6c:35:4c:e6:bc:69:91:00:4f:ff:
         c1:ad:79:34:92:34:30:f8:ee:49:28:aa:cb:d1:47:7c:7c:9f:
         d2:3e:3b:b5:7a:ed:26:91:8e:eb:3f:3b:f1:42:28:53:e7:d6:
         bc:65:d3:a0:64:27:e1:ed:73:bd:fd:86:6a:28:14:8d:42:9e:
         d5:d0:17:04:3f:06:04:df:24:7a:a2:7e:02:db:79:1e:01:0e:
         7f:8d:8e:a1:17:ea:be:f6:34:fd:a2:45:51:41:0f:2c:49:4f:
         02:27:1f:3b:40:00:66:7d:cf:ab:19:ff:eb:aa:76:89:88:44:
         1d:b2:7d:81:4d:8b:2c:7c:58:6d:59:8e:36:fc:b0:47:63:99:
         eb:8e:d4:7b:04:0e:e7:e2:68:74:dd:8a:16:49:b5:49:6a:ef:
         7b:82:ae:67:84:c5:79:b8:2b:73:5c:bc:05:43:81:08:bd:c2:
         8a:0f:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:09 2025 by rpki-client