Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
File:                     48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft (raw, json)
Hash identifier:          n8clgp5VmHbzuo+lFRHufPgRh7F2DjLVFMCoOO2Mh8U=
Subject key identifier:   BB:88:CA:44:8E:63:DD:A9:1C:A3:07:26:47:5D:26:6C:44:04:0F:4D
Authority key identifier: 48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
Certificate issuer:       /CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
Certificate serial:       4660F62E3E9DA23E24D96F35686F596060686163
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
Manifest number:          0314
Signing time:             Tue 04 Nov 2025 20:02:26 +0000
Manifest this update:     Tue 04 Nov 2025 19:57:26 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:26 +0000
Files and hashes:         1: 48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl (hash: B/NCHSnZQRY4GLHK4DvHozqRRl+jdcBprXM8JQOuNm8=)
                          2: 3137392e34392e3234382e302f32322d3234203d3e20323731323231.roa (hash: Dv6hxsDroS4vlXUuIA9sQTKVJgCR9NtSdnPeeNt1eEk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl
                          rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:60:f6:2e:3e:9d:a2:3e:24:d9:6f:35:68:6f:59:60:60:68:61:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
        Validity
            Not Before: Nov  4 19:57:26 2025 GMT
            Not After : Nov  5 22:00:26 2025 GMT
        Subject: CN=BB88CA448E63DDA91CA30726475D266C44040F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:2f:93:37:eb:7f:af:a1:b7:63:c5:44:dc:
                    cb:b2:4d:1b:0d:99:7b:bd:62:bc:6e:1a:14:cd:71:
                    53:3c:c8:87:2e:13:5d:c0:44:0c:95:27:db:c9:30:
                    b7:67:02:b2:12:80:b6:bd:d0:ca:53:e4:70:9e:ec:
                    c5:12:69:93:ac:70:28:5d:88:e2:22:d9:25:f8:5f:
                    1d:d7:d4:32:27:22:94:ce:d6:67:20:1f:dc:af:ed:
                    b7:0c:8c:4c:7c:71:7f:99:05:0b:8b:97:a5:2d:fa:
                    be:f4:b9:7d:51:b5:53:2c:05:ee:ca:54:98:d2:de:
                    26:9e:d0:2c:3f:7e:ac:c6:fc:2f:c5:8b:a9:a1:68:
                    73:d7:ba:ec:80:3c:e6:af:8f:c3:56:c3:d2:4c:0c:
                    55:5f:5d:26:77:07:e5:a4:20:e8:30:d3:0f:5a:0f:
                    56:0e:ad:76:e6:19:47:56:17:a5:fa:28:97:b6:df:
                    13:15:a9:3f:8b:dd:ce:c8:43:17:15:e7:20:09:a4:
                    a3:52:98:bc:68:df:db:01:c9:06:84:05:7c:1f:30:
                    59:6b:36:6f:7c:c5:0b:70:24:da:42:ee:a0:70:c1:
                    10:f1:3a:77:f6:8a:30:fd:7f:91:41:8f:ed:9b:08:
                    69:a4:28:9e:4c:0e:a0:36:cc:08:68:0c:c4:2a:bd:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:88:CA:44:8E:63:DD:A9:1C:A3:07:26:47:5D:26:6C:44:04:0F:4D
            X509v3 Authority Key Identifier:
                keyid:48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:43:55:36:51:57:6d:74:30:0e:2d:16:85:b6:10:8f:a7:42:
         3a:b1:1d:1a:2b:f7:71:dc:73:11:df:e5:c7:fd:73:1d:12:58:
         01:0b:6c:d8:64:5b:da:19:bb:46:28:5d:61:74:68:49:04:22:
         33:11:3c:26:73:8a:31:2e:a3:f2:b6:f5:16:d9:c9:99:c2:f1:
         8c:a5:69:fc:c6:92:91:35:fa:ad:5e:f5:7d:00:c9:e5:d5:10:
         8f:ba:30:8f:e0:b4:e2:08:0c:9b:56:3c:0e:28:58:f8:e1:c6:
         ab:3c:4c:55:89:e9:9a:68:ef:1b:a9:75:57:84:73:96:dc:4e:
         bc:55:a0:b9:9d:c5:af:8c:5e:67:23:44:37:47:5e:c6:00:9c:
         bf:23:f7:0b:de:26:70:34:a3:f9:b1:b7:9b:b7:db:c2:7d:34:
         f7:27:b4:57:de:29:c9:05:55:a8:05:c3:3b:6f:a7:c2:a2:67:
         aa:bb:3a:10:93:85:bb:ca:e7:3c:45:74:58:79:88:10:7f:db:
         64:6e:72:3d:df:9f:36:1e:fb:0d:40:66:91:53:0a:a7:d9:d7:
         4f:49:f4:f6:e4:d1:13:18:db:4d:8e:ac:eb:05:53:8e:00:e5:
         2e:2e:66:11:25:ad:2a:44:13:65:ed:1c:e9:bd:5c:a0:6b:ad:
         b0:60:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:45:04 2025 by rpki-client