Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
File:                     542883AF217B55CA895036F0F5CDBCE406386E83.mft (raw, json)
Hash identifier:          BdoE9OwVKMAVU/qxj9sgYLPIypaCl/hFIWs/T0kaADg=
Subject key identifier:   64:6D:13:71:1C:8D:64:A6:76:84:96:E4:23:89:13:ED:F6:DC:02:A4
Authority key identifier: 54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83
Certificate issuer:       /CN=542883AF217B55CA895036F0F5CDBCE406386E83
Certificate serial:       303D097F6C3F2D466C150830DEC3D8E3D627113F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
Manifest number:          01E3
Signing time:             Tue 04 Nov 2025 18:10:43 +0000
Manifest this update:     Tue 04 Nov 2025 18:05:43 +0000
Manifest next update:     Wed 05 Nov 2025 21:27:43 +0000
Files and hashes:         1: 3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (hash: +k9SBA0b4hGy+gKwJZ70sOS+jRS1RXL4Gqj6hwBEfrE=)
                          2: 542883AF217B55CA895036F0F5CDBCE406386E83.crl (hash: 0IXmteeGLhtwxVn1QS/QDaMbGkofxM38tCl/teb/W3U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl
                          rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3d:09:7f:6c:3f:2d:46:6c:15:08:30:de:c3:d8:e3:d6:27:11:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542883AF217B55CA895036F0F5CDBCE406386E83
        Validity
            Not Before: Nov  4 18:05:43 2025 GMT
            Not After : Nov  5 21:27:43 2025 GMT
        Subject: CN=646D13711C8D64A6768496E4238913EDF6DC02A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:82:4d:eb:24:69:02:42:b1:51:97:c1:fe:
                    74:6f:3a:01:ad:dd:23:ed:73:21:97:4e:4c:d2:74:
                    f2:86:c2:5c:bd:88:4d:49:b2:c5:04:f6:cb:90:9c:
                    e5:10:a1:77:03:0b:d5:77:30:09:83:65:61:00:5e:
                    f0:87:75:1e:1e:29:1b:ee:b9:1d:3f:47:ad:c1:2b:
                    8c:bf:09:69:42:bf:c6:a6:f6:a0:bd:20:79:e5:28:
                    d7:48:53:c1:b4:93:ee:a6:4b:38:bc:7e:ad:b9:f5:
                    af:02:6c:ab:eb:e2:17:61:0b:b2:0c:b7:f6:db:6d:
                    db:4a:2f:26:b9:29:f1:d6:01:c9:fb:cd:70:0b:4c:
                    ca:75:22:b6:c4:3f:a8:38:e9:66:94:31:87:27:1b:
                    ae:6e:3a:d5:72:4a:64:c5:47:e9:f4:5e:92:86:2c:
                    f8:b2:e1:58:e2:ed:60:df:72:4d:ce:c0:36:81:46:
                    a9:14:7e:f0:9b:24:02:f4:51:4b:fe:76:10:c4:24:
                    8a:8d:c5:52:34:94:7e:d3:8e:24:87:fc:e7:82:75:
                    41:75:3d:62:ab:a7:53:03:39:0e:40:e9:fb:c1:f6:
                    74:d8:8d:92:0b:c3:2f:0b:89:64:71:b8:e4:08:4d:
                    87:3e:b9:65:e0:12:1f:d0:09:1b:05:55:fb:d2:79:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6D:13:71:1C:8D:64:A6:76:84:96:E4:23:89:13:ED:F6:DC:02:A4
            X509v3 Authority Key Identifier:
                keyid:54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:f9:32:cf:46:00:48:cc:05:a7:59:3a:42:a7:28:73:93:
         27:7f:90:0e:ea:3b:47:fb:43:42:6b:d8:1f:11:94:fd:12:6d:
         24:68:74:a1:71:ec:dd:a1:4a:f4:5d:5f:d5:43:21:fa:9e:96:
         26:8b:ab:c5:7d:6d:98:15:6b:d1:87:11:ad:8a:c8:c2:e0:a1:
         cc:e7:68:44:34:aa:6b:2d:80:15:7a:cd:d8:ad:07:c3:5c:f3:
         e1:0f:68:72:39:df:c8:0c:7c:79:db:39:40:83:eb:b0:05:54:
         08:e7:ac:d2:16:27:db:cc:82:30:79:94:54:c0:ac:9a:a6:a2:
         f5:82:cc:2f:87:38:a0:b7:3e:1e:b7:c8:b8:fd:f9:e5:46:3f:
         be:d9:4d:ff:ad:59:1b:9f:73:19:12:5a:19:45:74:28:97:f9:
         ad:0f:13:2e:ce:55:fd:66:3e:ef:74:88:bb:a9:2a:57:c4:96:
         62:43:e2:0c:29:b6:f7:2c:17:7c:7c:04:e7:78:40:fd:eb:6a:
         7d:bc:db:b9:ce:64:c4:cf:8b:62:15:67:f0:2f:2f:53:be:3d:
         ad:38:e3:ae:d2:19:5a:0b:ad:37:ca:40:19:3c:0f:94:7c:69:
         ff:1d:26:ab:6f:1f:6b:b7:88:ea:00:15:cd:e6:77:45:e9:72:
         11:6f:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:33:50 2025 by rpki-client