Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
File:                     D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft (raw, json)
Hash identifier:          1dKbs1mJtu14wBTB0X6EaBPbMkySFRfagABeCMUZrrI=
Subject key identifier:   D3:7E:0E:CF:B0:6E:38:3D:E7:2D:97:6B:87:5D:22:46:7B:03:9B:7B
Authority key identifier: D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33
Certificate issuer:       /CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
Certificate serial:       5357100B2C72E4A68DE2F6B8018960367A3097FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
Manifest number:          44
Signing time:             Wed 05 Nov 2025 11:04:06 +0000
Manifest this update:     Wed 05 Nov 2025 10:59:06 +0000
Manifest next update:     Thu 06 Nov 2025 11:44:06 +0000
Files and hashes:         1: 3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa (hash: aYt7HyWdft1w//h0iz65bSyedw/zVIH+MiQLjWAhPDs=)
                          2: 323830343a343064303a3a2f33322d313238203d3e20323635393833.roa (hash: xEEZkfy9FtOMO6g1LgZsdvTtb3lVY0eBe38XC9ihhIc=)
                          3: D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl (hash: HXPDuOSgnxFI+joJLfFyhFPvm7hHXH57X2qo7Om/ru4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl
                          rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 11:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:57:10:0b:2c:72:e4:a6:8d:e2:f6:b8:01:89:60:36:7a:30:97:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
        Validity
            Not Before: Nov  5 10:59:06 2025 GMT
            Not After : Nov  6 11:44:06 2025 GMT
        Subject: CN=D37E0ECFB06E383DE72D976B875D22467B039B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:d0:f2:75:a0:d0:50:b2:a2:69:40:f8:e5:
                    da:80:3c:d5:5e:50:aa:20:c3:3c:8d:aa:d3:79:e7:
                    13:6e:82:ba:26:e8:bc:47:c3:3f:7c:34:27:02:bb:
                    d3:85:f8:1e:04:f2:65:2d:0f:3b:e7:4f:48:38:fa:
                    86:10:ff:2d:5e:09:f5:b0:23:e3:13:6a:88:e7:7b:
                    fb:5f:df:9a:e4:5c:28:3f:83:53:b5:cc:cd:90:c7:
                    68:54:46:36:db:7e:b8:5b:55:f6:e4:19:b0:85:a9:
                    31:49:07:ed:38:fd:34:86:d2:dd:91:ae:97:5c:ef:
                    92:ec:99:f9:61:7a:7d:11:91:c4:ca:fd:9b:61:4d:
                    68:c4:e2:5e:fa:c3:8a:11:3c:ff:89:02:6c:a4:36:
                    df:8f:87:bc:a9:19:e1:1f:c8:d8:c4:29:79:81:55:
                    83:94:1f:ee:27:dc:f8:8a:95:80:d7:78:10:29:34:
                    86:aa:55:bc:be:ff:b3:e5:19:6f:bf:46:f1:9a:49:
                    a0:91:5b:55:31:5c:9e:e4:a4:66:6b:77:c0:36:7f:
                    bb:5f:de:a6:1c:64:fe:a5:82:0b:83:12:f3:1d:34:
                    6d:df:41:4e:f4:51:6e:87:c9:2b:3e:e8:2a:bd:18:
                    f1:6a:e1:8f:e5:d7:60:b4:f3:e1:d3:c5:44:61:d5:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7E:0E:CF:B0:6E:38:3D:E7:2D:97:6B:87:5D:22:46:7B:03:9B:7B
            X509v3 Authority Key Identifier:
                keyid:D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:eb:61:af:b4:01:73:04:69:47:9e:09:ab:08:58:27:d6:
         bf:9b:fb:f9:0d:5a:2e:b8:23:2c:55:5c:0b:84:35:14:9c:5c:
         0a:70:ad:7f:10:aa:ae:8f:67:15:81:4b:5f:8f:9a:db:63:18:
         9f:51:6c:16:4c:34:97:67:2a:6e:15:8a:2b:6b:c4:0a:df:3b:
         2e:42:90:83:38:11:d1:51:c9:fe:29:ef:cf:fb:80:e4:6a:20:
         68:88:db:f7:e0:0a:3d:0b:76:67:0d:86:72:c0:b5:15:f5:2c:
         b5:5f:82:37:33:d0:2f:18:79:66:91:2c:79:f8:e7:22:f6:7f:
         bb:70:0c:32:d8:8a:53:aa:96:16:17:b7:b0:12:a0:dd:18:2a:
         2e:71:23:d4:c8:e2:f8:71:9f:b9:24:d0:e6:8b:2b:78:08:17:
         46:92:d4:78:3e:b0:dc:df:bd:45:d0:12:89:ea:10:2c:dc:52:
         70:c5:e8:f4:18:88:d5:c9:ea:99:ce:e7:e3:75:ca:ac:2a:c6:
         37:cf:a3:e4:cf:7f:6a:86:fe:49:54:69:72:e4:8f:65:51:03:
         4b:76:7e:39:ac:91:90:6c:4e:a9:9c:9b:10:4b:e3:46:84:7b:
         8d:02:d7:b0:47:82:18:85:ff:0f:c0:85:3e:0a:c0:30:d5:4a:
         f9:24:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:55:43 2025 by rpki-client