Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
File:                     0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft (raw, json)
Hash identifier:          Y2KPmA0kq50Vqcuo/WT9JG3FADQng27MnZ33XqMkRVA=
Subject key identifier:   AF:DB:41:3A:E7:3B:11:DE:3A:34:7C:8E:39:DA:D7:73:76:8E:4A:15
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       47F60AB96EF1A4BAE05413F49D1142619C0D72CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
Manifest number:          0333
Signing time:             Tue 04 Nov 2025 07:23:00 +0000
Manifest this update:     Tue 04 Nov 2025 07:18:00 +0000
Manifest next update:     Wed 05 Nov 2025 10:56:00 +0000
Files and hashes:         1: 3137302e37382e33302e302f32342d3234203d3e203532353837.roa (hash: OQrPAaufm/IIA/ux/gBP/eRTC7wVuWaor0CIJhQqO0M=)
                          2: 323830343a386563303a3a2f33322d3332203d3e203532353837.roa (hash: wpL10v59H954g33BuOd7BGNKMuPnDKrZ2Zn/nnChX1U=)
                          3: 3137302e37382e32382e302f32342d3234203d3e203532353837.roa (hash: Yx0PdaHHlk/TonVPlu7KZhE2E7Yl1bcPLdsKpLy0Ccg=)
                          4: 3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (hash: qe9Jff+tGp27uj0Fv/r4SWJj8LOqDymfhQOPFTvPvVA=)
                          5: 3137302e37382e33312e302f32342d3234203d3e203532353837.roa (hash: GVb5ACoACo41NNBiKijTXhHtLaywGpWaqrMw6x6JqAQ=)
                          6: 0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl (hash: fOiCXssd/QMHooMJutTkqDcxeDfTreB5cuPay3I9Kss=)
                          7: 3137372e38372e3230302e302f32322d3232203d3e203532353837.roa (hash: v/kBm1v+isP2XXTLmXnKuTp9Rqywg/NC0RFRzgAr/9E=)
                          8: 3137302e37382e32392e302f32342d3234203d3e203532353837.roa (hash: ZVRpjy5LyDeaPoHH9Yq0IsvVayvZvPCcq+8GiojQ0YU=)
                          9: 3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (hash: iEOJ+g7sC95DXUReWOJ5kvXlAdgnFQ55nizfxDdLPSg=)
                          10: 3137372e38372e3230302e302f32342d3234203d3e203532353837.roa (hash: tlWD0HzHIhfkJclR0v8ssrdgm/1+o7U+hMuXSlvl9Pc=)
                          11: 3137372e38372e3230332e302f32342d3234203d3e203532353837.roa (hash: IDaJJjIwRkalTiqK0J3wyePr87APf8T4eQ7uvcqZAhI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 10:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f6:0a:b9:6e:f1:a4:ba:e0:54:13:f4:9d:11:42:61:9c:0d:72:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Nov  4 07:18:00 2025 GMT
            Not After : Nov  5 10:56:00 2025 GMT
        Subject: CN=AFDB413AE73B11DE3A347C8E39DAD773768E4A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:f6:98:3e:7a:83:6c:5f:62:f3:a6:6b:ae:
                    b1:b7:c9:57:c3:af:d1:a8:f4:40:e6:94:9c:c9:41:
                    1c:27:c3:3a:d0:13:be:d3:ca:64:54:e1:ab:22:61:
                    2d:85:c1:c6:57:92:3d:e2:df:8b:d7:2d:cd:00:48:
                    7e:53:2f:85:98:80:01:22:26:63:58:e5:aa:19:45:
                    d4:2d:f5:4a:3c:03:81:06:05:5e:80:db:7b:6f:38:
                    90:99:38:b3:34:f0:4c:b7:47:3c:b5:c4:da:d7:34:
                    22:7d:19:bd:76:6c:50:7f:81:53:5b:7c:e6:e2:de:
                    11:9d:c0:8f:14:5e:f4:fc:e2:38:80:c0:82:1c:3d:
                    66:7b:72:ba:82:f4:19:ab:c3:60:3c:45:2a:85:d3:
                    f4:e4:9a:ef:95:a7:91:6d:96:97:4b:1e:63:0b:aa:
                    27:9d:f1:0e:64:09:34:0f:aa:f1:07:c2:a8:ca:b8:
                    b5:2a:a2:03:b9:87:51:e4:ef:d4:d1:87:3d:18:e2:
                    80:55:63:9e:1c:5e:97:bf:fc:31:05:00:03:da:ba:
                    e2:0b:8b:bf:fa:78:83:17:8f:64:73:55:4a:96:16:
                    8f:19:20:a6:64:4d:37:c8:50:82:ac:77:cb:64:07:
                    76:c0:f5:57:fe:1e:c7:3a:57:22:75:92:46:2b:0e:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:41:3A:E7:3B:11:DE:3A:34:7C:8E:39:DA:D7:73:76:8E:4A:15
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:29:f2:ad:ca:61:de:70:28:28:1c:b6:a7:96:fd:d0:8c:46:
         90:8b:cb:07:0a:c0:3a:84:0d:4f:c1:8e:a2:48:95:e5:60:e7:
         5a:f1:44:ec:7d:33:54:c5:ed:6e:69:d9:bb:54:3d:75:49:6e:
         b2:5e:4e:a0:12:ff:03:c3:ea:73:49:b2:b8:56:f0:83:d7:1d:
         14:a8:09:9a:1d:6e:63:ab:38:9d:03:22:45:87:c8:e9:76:65:
         eb:98:ad:cc:fd:d6:b3:24:e8:bf:75:46:fb:a1:c6:d9:bc:ab:
         07:11:e1:05:7b:17:d1:82:50:9e:cb:cb:b5:77:56:5f:73:62:
         b6:7f:b4:c5:93:cb:4f:6e:22:47:1c:92:ba:20:ae:59:25:6a:
         32:1d:59:00:48:85:b1:5f:bb:54:31:41:c9:c2:71:45:f1:71:
         84:84:7f:76:91:19:83:d6:99:44:a6:ba:7f:4e:7a:ea:b4:a4:
         dc:7e:3c:da:9d:4f:00:fd:3f:83:13:76:26:aa:4f:e3:cc:eb:
         fd:f9:56:c2:5c:4d:14:e4:9c:37:46:9f:47:52:f2:bc:b8:2a:
         27:b9:30:89:02:26:be:e1:b9:47:d1:ac:22:bd:2e:83:18:be:
         f2:33:10:0e:1b:98:aa:24:a1:1c:0e:02:9e:0c:46:2f:de:18:
         51:fa:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:09 2025 by rpki-client