Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
File:                     C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft (raw, json)
Hash identifier:          ubR1YNGtFmOOB3kICoBsyKVvLwYuuCkVxbuJtRuM0dQ=
Subject key identifier:   83:A3:F8:54:35:34:C8:FD:25:96:81:77:87:03:90:1E:C6:41:8A:DA
Authority key identifier: C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E
Certificate issuer:       /CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
Certificate serial:       4F2BB209C151217B5A355E4425143ADA106097C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
Manifest number:          027A
Signing time:             Tue 04 Nov 2025 15:49:24 +0000
Manifest this update:     Tue 04 Nov 2025 15:44:24 +0000
Manifest next update:     Wed 05 Nov 2025 17:12:24 +0000
Files and hashes:         1: 323830343a363834633a3a2f33322d313238203d3e20323639363833.roa (hash: 17ndO2+z7/UMvwolJltp5/qR+7fG8cgLT6sXqYmDVHg=)
                          2: 34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa (hash: GSjYRNnPzC4iAA6w3p6F0AHTn9AEGW9EB1F8DcfbkXw=)
                          3: C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl (hash: F1xIhYGkA6yjzdZaNAOaRm40fIPcPtinBzfavb16iMY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl
                          rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 17:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2b:b2:09:c1:51:21:7b:5a:35:5e:44:25:14:3a:da:10:60:97:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
        Validity
            Not Before: Nov  4 15:44:24 2025 GMT
            Not After : Nov  5 17:12:24 2025 GMT
        Subject: CN=83A3F8543534C8FD259681778703901EC6418ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b9:bc:30:52:04:e9:5f:e2:77:5b:b6:05:08:
                    79:67:91:73:a8:b2:a9:18:b8:97:45:fc:a2:66:79:
                    40:41:a2:bf:12:ce:4c:1d:8f:99:5b:1a:cd:30:8d:
                    5f:9a:85:6a:91:70:a1:b5:77:36:a6:14:94:17:16:
                    43:de:e8:96:7d:03:26:38:59:14:fb:9e:92:34:9e:
                    eb:a2:90:5b:cf:ee:24:65:1d:15:a2:d1:fb:86:61:
                    36:5b:ca:fb:db:97:3e:87:85:80:aa:dc:8b:34:00:
                    69:30:08:ad:1f:3b:0f:6f:74:40:6e:bb:b0:13:0e:
                    07:d0:bc:d9:90:fc:95:42:26:22:70:8d:b0:f4:f2:
                    67:62:c5:6c:bf:73:4d:19:e5:eb:0f:d2:a1:7c:ed:
                    ff:06:95:e1:c5:8a:8f:2d:cd:ac:1b:ff:12:f5:fa:
                    de:92:b3:0b:80:67:f4:23:a4:b1:a1:e7:52:05:fb:
                    45:06:e5:df:1e:16:15:58:07:5c:79:a5:54:3e:c6:
                    8a:ed:44:28:85:90:cc:f3:97:a7:84:78:97:b1:f7:
                    5e:a2:76:be:46:6a:54:09:49:e8:8d:ed:e6:49:e9:
                    57:e1:51:4f:8b:02:f2:ff:a1:94:b2:82:69:41:74:
                    f3:12:a1:a5:e4:63:68:50:78:16:d1:92:38:e3:b1:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A3:F8:54:35:34:C8:FD:25:96:81:77:87:03:90:1E:C6:41:8A:DA
            X509v3 Authority Key Identifier:
                keyid:C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:22:d8:04:52:a7:ad:4f:d4:ae:6d:70:87:a4:99:ca:e6:09:
         21:23:1d:d7:c5:b4:9a:c2:7a:18:f0:3f:ae:e9:81:e4:53:8f:
         fc:05:84:2e:86:aa:8f:d0:12:ea:46:d8:e2:c9:49:32:34:9d:
         0f:e5:82:90:71:b5:12:2d:20:66:a1:4c:f6:10:39:c9:65:7a:
         d2:96:4e:c7:d1:95:f5:0a:13:a3:1c:77:67:d2:bb:1b:d2:0e:
         2b:e1:f5:a9:ea:49:8c:5d:e5:49:e2:59:bb:57:70:bc:7e:e6:
         35:be:98:02:1b:7c:d1:cc:7a:5f:89:06:06:db:0f:a5:57:4f:
         5a:1b:3f:32:a2:cf:eb:10:2f:af:fa:96:ca:03:ac:cf:69:4b:
         b1:84:6d:26:9f:4d:86:ee:79:6c:2d:4d:90:ca:51:07:84:2d:
         0f:f1:ff:a0:77:88:ee:c8:a3:3b:9a:f3:8e:71:31:1a:59:9d:
         62:d6:a8:b5:c5:52:95:91:cc:37:f1:ef:f2:d1:5b:24:24:77:
         7b:ba:12:b6:6a:c6:62:20:ee:c8:e1:c9:f1:89:dc:f7:cd:1a:
         2e:6b:71:f7:66:9d:3f:c8:64:37:01:70:b0:84:50:5d:6b:c8:
         b3:1a:e4:79:3e:2d:38:43:e4:65:77:7b:9c:cb:eb:42:86:d5:
         50:ff:de:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:04 2025 by rpki-client