Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
File:                     665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft (raw, json)
Hash identifier:          tDZBQ58FlKqal2i1pPV9yTwWAFvQ252bD2gxM0XiSPg=
Subject key identifier:   62:AD:33:03:E6:8E:28:99:2E:D5:C1:AB:BB:0D:A5:B2:98:70:2E:F9
Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7
Certificate issuer:       /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
Certificate serial:       15DCE18E41AEB9AE95EBC48D377776E2AA87E620
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
Manifest number:          CF
Signing time:             Tue 04 Nov 2025 17:51:02 +0000
Manifest this update:     Tue 04 Nov 2025 17:46:02 +0000
Manifest next update:     Wed 05 Nov 2025 20:22:02 +0000
Files and hashes:         1: 323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa (hash: 3SEmfDnaLNe9lYVRLV77DPifvo+++KwCzoGpwBshvls=)
                          2: 323830343a313638383a383030303a3a2f33362d3336203d3e20323633323930.roa (hash: nbjNT6ijqjOK6qNk+wWAh/ahuQZje7BBAF0/hJLjuVM=)
                          3: 323830343a313638383a3a2f33352d3335203d3e20323633323930.roa (hash: okR1MBN1rd1mDkTYFAFkSx9vV0vGH/i8cb9uACFoxpU=)
                          4: 3230312e372e3136352e302f32342d3234203d3e20323633323930.roa (hash: 1mlX9H/fi/I0aTCzuHW72oe+/7eiZqmxSRM++ml2v5A=)
                          5: 3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa (hash: dc0yh8FcWjCQ9SPIC1z7y2DhxMiz015R7CyiJov3+ek=)
                          6: 3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa (hash: obj86NjpYsds7tZJw/ZOHZuRzhlYM935qqIAANDp61c=)
                          7: 323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa (hash: ITBCdKvrtcl0MMQdnLjKzp5k0tgVJKhpOqPLPTIbcyo=)
                          8: 3230312e372e3136342e302f32342d3234203d3e20323633323930.roa (hash: IbH3I58HKLBP1zE45bOobEG6lyxnv4dryLL0T+6XY2Q=)
                          9: 3230312e372e3136362e302f32342d3234203d3e20323633323930.roa (hash: jw8kTqqrU0RBBOyyFgw/OlGEjMZ5RijMBTUCEP2zmP4=)
                          10: 323830343a313638383a393030303a3a2f33362d3336203d3e20323633323930.roa (hash: Q9S6eBujlvpwnfRFTrvV3pHSQtYKbDqLCWnpimOFnMQ=)
                          11: 3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa (hash: f0GPNv7avZ+0i1WwmlDnjaedsn7ssj2izTy5mtx9IEs=)
                          12: 323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa (hash: fZo7+7L1N0ml78AVyKqFwsjj/jUx6aOxuAIw16xvpW8=)
                          13: 3230312e372e3136372e302f32342d3234203d3e20323633323930.roa (hash: oYNUmbPuw2LJbQwCAYEKv2N484bPUdyE+XapjUBH6lY=)
                          14: 665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl (hash: atUDbcKoBz2fh2Sx+VT98h8VjInjhKjMajZeMzqdnd4=)
                          15: 323830343a313638383a323030303a3a2f33352d3335203d3e20323633323930.roa (hash: irk+Om5nTyDDPj7rxsqSw+33ZP0SR/w5vUkFmrVRw1s=)
                          16: 3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa (hash: DVtYaaZu2AkLNDVDtzFhVH+3dB2e0sNP/drUoaeo7Fw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:e1:8e:41:ae:b9:ae:95:eb:c4:8d:37:77:76:e2:aa:87:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
        Validity
            Not Before: Nov  4 17:46:02 2025 GMT
            Not After : Nov  5 20:22:02 2025 GMT
        Subject: CN=62AD3303E68E28992ED5C1ABBB0DA5B298702EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:ec:31:b7:b1:4d:e3:ee:6f:9b:8d:cb:e9:
                    5f:2c:7d:08:b3:5e:38:51:ed:09:f0:1b:5b:36:05:
                    b8:99:b1:7e:18:e4:2f:4f:72:c6:04:bb:db:5b:68:
                    8c:8d:4c:c5:46:a9:84:00:c0:ef:f8:6e:1b:ad:67:
                    62:65:ce:3b:5e:2a:8b:ae:de:5f:0c:09:bd:06:25:
                    f1:5f:f9:1e:29:77:b4:5f:99:db:58:b0:f7:a8:97:
                    5e:60:db:db:d0:4a:f1:4c:5e:65:4d:cf:a8:44:71:
                    06:26:bb:70:7d:f1:86:c9:1c:c9:bd:a7:b5:3e:38:
                    20:59:61:b1:77:21:0b:07:c4:4c:98:ad:a9:e6:88:
                    5b:97:79:74:01:4d:48:db:86:e5:bf:0a:90:02:d0:
                    34:62:d5:36:37:95:18:b6:f1:0d:b7:77:8d:5a:e2:
                    8a:a6:d6:2e:c5:28:54:e2:43:ae:08:3f:62:2c:9b:
                    0b:15:ec:c7:60:43:07:d9:87:bf:1b:8f:7e:df:77:
                    a7:2b:32:45:08:57:0a:52:8d:da:40:ff:3e:42:37:
                    54:86:64:dc:b9:70:92:c9:b6:b5:0b:15:5b:c2:d1:
                    be:d5:48:5c:4b:86:a9:28:40:70:19:fb:89:10:42:
                    18:30:9f:cb:b6:ab:fd:c5:ef:b7:1e:5f:0e:72:7d:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AD:33:03:E6:8E:28:99:2E:D5:C1:AB:BB:0D:A5:B2:98:70:2E:F9
            X509v3 Authority Key Identifier:
                keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:81:e4:88:67:dc:28:33:d1:2d:74:d7:92:75:15:e0:2f:90:
         5c:a2:6f:00:f4:81:65:03:e7:53:72:5e:bd:73:22:e4:36:a6:
         38:5c:1d:70:c8:bd:93:4a:1e:90:e3:ee:b6:2d:24:a7:10:f0:
         84:ae:b2:eb:78:4c:79:c6:5b:49:3d:21:a4:f2:f8:9d:cc:23:
         79:9c:45:5b:c7:58:a3:e0:4e:ae:d9:55:20:ed:e7:da:28:6d:
         0a:a9:17:d7:00:58:cb:3d:49:5a:fb:c2:2e:e6:6a:b0:63:38:
         a4:c9:db:53:94:df:ff:e5:18:11:f1:dc:41:05:77:f5:67:65:
         a7:02:36:2d:34:58:72:6e:af:94:47:05:9d:1c:f5:2f:76:3b:
         ad:fd:3a:18:45:b6:fd:6e:34:93:26:ab:5f:b4:fe:21:dc:70:
         3a:d4:c6:93:61:21:6b:ec:1a:a1:5d:65:ea:a9:b9:66:18:fd:
         17:a2:05:44:52:38:d2:f3:58:b3:82:60:cd:a9:88:8d:7b:78:
         ef:22:18:c4:15:ae:0f:74:6d:e7:bf:67:63:b0:73:46:50:1e:
         fc:f0:87:02:b8:1a:cd:4b:87:e2:21:17:b8:b8:44:3e:41:3d:
         bb:8e:d0:14:fd:28:b7:fd:2a:3b:ac:91:f5:4d:dc:e2:e5:34:
         31:56:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:15:49 2025 by rpki-client