Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
File:                     F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft (raw, json)
Hash identifier:          IKWVqCtT5GtsjnZ2IHbvUvkB2elnI/dI4fV3jzXzDKc=
Subject key identifier:   15:4B:D6:39:A9:6C:32:B7:E1:8D:7B:89:74:FA:2F:03:67:92:FB:FE
Authority key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB
Certificate issuer:       /CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
Certificate serial:       3D1E7E930C351A0D5825D51567B2C45D3F07322C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
Manifest number:          EE
Signing time:             Tue 04 Nov 2025 14:28:03 +0000
Manifest this update:     Tue 04 Nov 2025 14:23:03 +0000
Manifest next update:     Wed 05 Nov 2025 16:38:03 +0000
Files and hashes:         1: 323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa (hash: VXlqRAFneTORM6RHu4Fo+kwH9ChbcwUR80gfRRdyV6s=)
                          2: 3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa (hash: 0uWePLaaKJmYvRazZiptOdhQwDAeuWE8wU09goE9iUc=)
                          3: F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl (hash: lQnL7xQFThv9xraD6mArQXsigGEEFXFYtS29T1Y7JzA=)
                          4: 3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa (hash: wfB2AkgtLlxFEAniK48SJ4lY94pHTbucMmdvGitpPLE=)
                          5: 323830343a386135383a3a2f33322d3332203d3e20323733363633.roa (hash: FnMIdbRtb18thZo8m+BOAL7LX8Pg2Gvkp0V/LhnAM98=)
                          6: 323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa (hash: 2lcDRXhuFGPFBXnWmQ2hOMHgW6aGIK/oVW0B8oPziS0=)
                          7: 3230302e3132342e37392e302f32342d3234203d3e20323733363633.roa (hash: CGmZYqKuSUyYJMPZXQT21klO+ggzKkBRkqOuFjWlTpo=)
                          8: 323830343a386135383a3a2f33332d3333203d3e20323733363633.roa (hash: V/eh4ea6l+rt9Opkvtd0CGy00iIN72fJX2/95fH56oc=)
                          9: 323830343a386135383a333030303a3a2f34382d3438203d3e20323733363633.roa (hash: FWuJVYEbDiGjfINJCsAj6YKX0UbAtzw5aaAs05Dwrq0=)
                          10: 323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa (hash: O49JNVtKuTUcsVEL9wsZ9cEkhqmWA3x6w3tzPOMPb5g=)
                          11: 3137372e382e37312e302f32342d3234203d3e20323733363633.roa (hash: L3VShOxSG7Otu2Q+PkyI5vrvC0WDaV1zcX/DNwWlwQI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1e:7e:93:0c:35:1a:0d:58:25:d5:15:67:b2:c4:5d:3f:07:32:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
        Validity
            Not Before: Nov  4 14:23:03 2025 GMT
            Not After : Nov  5 16:38:03 2025 GMT
        Subject: CN=154BD639A96C32B7E18D7B8974FA2F036792FBFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:76:44:51:58:d9:d6:29:6f:6f:3d:a7:3d:
                    2f:fe:96:a8:89:b3:25:20:48:91:32:93:25:9a:f4:
                    f9:32:4b:de:4e:ab:27:a5:0c:a2:26:17:c8:94:6e:
                    ba:4a:69:c9:7f:c0:24:18:ac:95:ec:af:a0:ea:9d:
                    ac:b8:b8:d9:36:cc:fb:74:83:1d:cb:b8:3d:41:1c:
                    cd:eb:04:fb:6b:fc:a4:df:30:ec:ee:5e:47:84:8b:
                    0f:37:9a:c3:d3:ac:08:e8:b1:56:97:ff:76:6c:35:
                    fb:fb:05:32:ce:19:77:d8:24:23:19:51:bc:6d:fe:
                    2d:f1:02:7c:1b:76:d5:a8:da:5f:70:e1:c2:db:c3:
                    dc:a7:16:d5:3a:85:12:dc:13:05:de:a7:2c:39:52:
                    11:8f:93:23:ec:c7:da:c1:c2:3b:bd:8f:68:b0:f0:
                    43:bb:d9:7b:90:38:f2:57:74:58:14:61:14:41:71:
                    ab:22:9c:46:dc:25:9b:d0:1c:ff:28:37:e5:0f:e9:
                    ac:40:2c:55:1c:16:69:c4:8b:cb:8f:8a:34:39:68:
                    c8:c8:d0:b8:b9:52:3f:94:55:0b:fc:72:56:18:78:
                    ec:c2:27:82:50:19:e5:50:af:17:0b:cb:d1:f7:dd:
                    7d:b5:43:c0:d2:62:6e:43:98:07:72:6d:37:d8:40:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4B:D6:39:A9:6C:32:B7:E1:8D:7B:89:74:FA:2F:03:67:92:FB:FE
            X509v3 Authority Key Identifier:
                keyid:F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:fa:ff:e5:fc:00:1e:ef:70:0a:7a:40:ba:60:2f:37:21:
         e4:32:30:06:a3:a9:a7:2c:e0:83:b4:48:09:8b:ab:c6:f0:e0:
         0e:69:2a:d7:c7:71:56:e9:1f:cd:19:b4:0c:33:a2:18:56:5c:
         1d:02:a3:b3:5d:2d:c9:3a:2b:4c:89:19:78:00:79:65:f9:1f:
         45:7f:0d:7c:5f:9c:00:fb:66:27:3b:94:85:28:f1:8f:cf:9d:
         5c:e1:bf:04:6f:dc:96:ad:f7:1b:de:b0:73:92:7b:ab:93:59:
         b4:37:da:66:3b:bc:5e:ef:43:e9:c9:8a:88:06:d8:7c:07:fb:
         52:96:5d:7f:45:09:6b:c9:f2:3b:8c:37:2a:c4:46:18:e5:4b:
         28:76:24:3b:07:d4:25:25:bf:f2:d8:66:7e:3f:68:09:06:2c:
         98:01:8a:14:5e:10:9a:d5:4a:e1:a4:64:db:c9:78:a6:51:57:
         9d:72:5a:6b:4f:95:17:1e:dc:86:e4:be:39:39:2b:de:60:87:
         26:52:ef:c4:d1:5f:bb:3f:2b:95:f4:1b:f2:81:4a:9a:0d:6d:
         12:b3:fd:ce:f4:c6:9f:f4:c1:2e:69:d7:ab:63:ea:23:2b:28:
         f3:d7:21:28:75:f1:f4:3e:a2:69:e9:2a:bd:a6:cd:05:36:15:
         a4:b1:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:25 2025 by rpki-client