Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
File:                     591A5E28538FC2E6A42ED311941B9D128D78D596.mft (raw, json)
Hash identifier:          b3y42qE1iYvPNW0LUhlhaI5uUSfU849BQEXsveJZ48E=
Subject key identifier:   24:03:65:9E:16:0B:97:C8:6C:27:A1:96:3B:FC:59:46:12:EA:B4:35
Authority key identifier: 59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
Certificate issuer:       /CN=591A5E28538FC2E6A42ED311941B9D128D78D596
Certificate serial:       01EBF781B14C2B5339583E47AF5D513136086B14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
Manifest number:          0303
Signing time:             Tue 04 Nov 2025 13:44:54 +0000
Manifest this update:     Tue 04 Nov 2025 13:39:54 +0000
Manifest next update:     Wed 05 Nov 2025 16:27:54 +0000
Files and hashes:         1: 3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa (hash: KuzflKByXW6jk7sHruVqI9AbR/hv88nYz20xfmBco/E=)
                          2: 3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa (hash: JYnl1AgEzv6A3emKqsNV2wjxR3GaDMd7rmxFgZDBx14=)
                          3: 591A5E28538FC2E6A42ED311941B9D128D78D596.crl (hash: Pt5UkTCIJKaGWXFr45V1rm5AZiG7cyXrMmhbizUc2tU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl
                          rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:eb:f7:81:b1:4c:2b:53:39:58:3e:47:af:5d:51:31:36:08:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591A5E28538FC2E6A42ED311941B9D128D78D596
        Validity
            Not Before: Nov  4 13:39:54 2025 GMT
            Not After : Nov  5 16:27:54 2025 GMT
        Subject: CN=2403659E160B97C86C27A1963BFC594612EAB435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:de:f6:32:d5:09:34:bd:72:dc:47:82:9f:
                    df:a3:e0:89:95:5d:32:0a:03:1b:87:cd:18:9a:ea:
                    28:69:a1:44:9a:0c:2f:5e:46:87:14:a1:70:73:cc:
                    bd:db:1b:f6:23:fb:01:f3:b5:31:41:e6:00:41:cb:
                    e8:06:b2:af:24:ed:32:00:b7:1e:a9:6d:a2:b7:07:
                    f7:d7:75:98:a4:a7:8a:92:41:e8:11:58:1d:79:5d:
                    63:c0:4c:0e:2f:7e:68:79:3b:0b:78:e1:f3:12:6b:
                    79:dd:57:2a:0e:97:cf:cc:14:85:6e:fe:23:c3:a2:
                    04:1f:ac:8f:82:34:c6:99:59:cc:06:e4:6a:3a:50:
                    5c:61:ac:53:42:07:9d:83:9e:e0:28:be:70:e2:97:
                    6c:b5:ce:8f:45:06:d4:a4:21:77:67:da:fa:08:d5:
                    bd:35:45:4a:8b:cf:5f:1a:91:81:e4:4f:d4:81:4b:
                    24:65:40:71:b6:f7:10:6b:ff:50:cf:02:fd:41:04:
                    2d:fe:e5:be:8c:b5:4a:cb:6c:03:61:12:9f:e4:e7:
                    02:d0:7b:c4:74:64:f4:85:8c:93:c8:a0:f1:18:75:
                    e9:81:5e:69:e5:07:84:fd:10:a6:72:71:65:06:41:
                    2e:6d:cd:1e:0a:60:d3:9a:34:e2:2a:56:d4:a2:63:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:03:65:9E:16:0B:97:C8:6C:27:A1:96:3B:FC:59:46:12:EA:B4:35
            X509v3 Authority Key Identifier:
                keyid:59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:d3:2b:a6:10:10:6f:9e:c3:ff:ae:9c:d5:e5:f1:9d:24:
         37:c7:54:32:87:67:91:23:2d:2c:5e:0a:7d:84:d3:53:d5:1d:
         83:bc:58:c4:97:2f:e2:43:24:9e:45:fc:ff:d0:03:29:39:ac:
         ca:79:f5:00:16:4c:8e:e6:55:54:93:90:fb:cd:cf:45:2d:90:
         9e:52:3f:f3:0f:1e:63:d5:65:de:c6:db:88:32:28:b8:6b:08:
         26:43:c9:35:9e:af:3e:70:e0:da:e1:50:35:6f:93:80:d7:13:
         19:a6:0a:a9:3e:0b:9e:22:5a:58:79:d4:06:63:be:64:46:e4:
         fa:af:21:fb:53:04:89:59:b8:e5:34:34:85:15:85:b7:e2:da:
         5d:47:a5:f3:f6:7d:d9:39:06:4e:ae:8f:34:61:c0:5d:da:c5:
         11:ac:03:cd:16:97:1c:bc:36:e4:df:87:75:fd:13:a0:fc:33:
         66:38:d2:22:c8:6d:5d:9b:12:c4:03:72:3d:09:13:4a:ed:1b:
         a5:b2:1a:91:d6:40:38:84:e0:0e:29:7d:36:95:50:69:37:c8:
         dd:27:96:0f:c0:3b:42:5d:b7:8d:01:15:9f:23:a4:60:bd:01:
         15:40:bb:eb:0e:1d:a8:a6:03:63:ed:65:32:b2:34:61:cf:9e:
         44:17:50:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAev3gbFMK1M5WD5Hr11RMTYIaxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkxQTVFMjg1MzhGQzJFNkE0MkVEMzExOTQxQjlEMTI4
RDc4RDU5NjAeFw0yNTExMDQxMzM5NTRaFw0yNTExMDUxNjI3NTRaMDMxMTAvBgNV
BAMTKDI0MDM2NTlFMTYwQjk3Qzg2QzI3QTE5NjNCRkM1OTQ2MTJFQUI0MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkd72MtUJNL1y3EeCn9+j4ImV
XTIKAxuHzRia6ihpoUSaDC9eRocUoXBzzL3bG/Yj+wHztTFB5gBBy+gGsq8k7TIA
tx6pbaK3B/fXdZikp4qSQegRWB15XWPATA4vfmh5Owt44fMSa3ndVyoOl8/MFIVu
/iPDogQfrI+CNMaZWcwG5Go6UFxhrFNCB52DnuAovnDil2y1zo9FBtSkIXdn2voI
1b01RUqLz18akYHkT9SBSyRlQHG29xBr/1DPAv1BBC3+5b6MtUrLbANhEp/k5wLQ
e8R0ZPSFjJPIoPEYdemBXmnlB4T9EKZycWUGQS5tzR4KYNOaNOIqVtSiYwmTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJANlnhYLl8hsJ6GWO/xZRhLqtDUwHwYDVR0j
BBgwFoAUWRpeKFOPwuakLtMRlBudEo141ZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhnR0FkQ2JTM3U1VnRYZmhydjZvbVBMWHlyR1lBQTNha2V0a0wyWlpp
eTQvMS81OTFBNUUyODUzOEZDMkU2QTQyRUQzMTE5NDFCOUQxMjhENzhENTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5MUE1RTI4NTM4RkMyRTZB
NDJFRDMxMTk0MUI5RDEyOEQ3OEQ1OTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGhnR0FkQ2JTM3U1VnRYZmhydjZvbVBMWHlyR1lBQTNha2V0a0wyWlppeTQvMS81
OTFBNUUyODUzOEZDMkU2QTQyRUQzMTE5NDFCOUQxMjhENzhENTk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcbPTK6YQEG+ew/+unNXl8Z0kN8dUModnkSMtLF4KfYTTU9Udg7xYxJcv4kMk
nkX8/9ADKTmsynn1ABZMjuZVVJOQ+83PRS2QnlI/8w8eY9Vl3sbbiDIouGsIJkPJ
NZ6vPnDg2uFQNW+TgNcTGaYKqT4LniJaWHnUBmO+ZEbk+q8h+1MEiVm45TQ0hRWF
t+LaXUel8/Z92TkGTq6PNGHAXdrFEawDzRaXHLw25N+Hdf0ToPwzZjjSIshtXZsS
xANyPQkTSu0bpbIakdZAOITgDil9NpVQaTfI3SeWD8A7Ql23jQEVnyOkYL0BFUC7
6w4dqKYDY+1lMrI0Yc+eRBdQmw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:57:51 2025 by rpki-client