Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
File:                     D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft (raw, json)
Hash identifier:          ZEF0/X9CglSN4n5B6VHu6DA9fz5BZgYwdwjRAtXQFyc=
Subject key identifier:   1C:5D:06:E2:F6:14:D0:EB:7B:EB:19:58:66:59:FE:FA:39:46:A3:03
Authority key identifier: D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94
Certificate issuer:       /CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
Certificate serial:       215DDAAC3844C8B1EA6A2ADF430666CAF93DD03C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
Manifest number:          03
Signing time:             Tue 04 Nov 2025 12:00:38 +0000
Manifest this update:     Tue 04 Nov 2025 11:55:38 +0000
Manifest next update:     Wed 05 Nov 2025 12:13:38 +0000
Files and hashes:         1: 3230312e3138322e3135362e302f32322d3234203d3e20323731323337.roa (hash: qlUjHpjAWKMnQPffdQJn3eCpwFflll7j8Xky9+T9Cfs=)
                          2: 323830343a373835633a3a2f33322d3438203d3e20323731323337.roa (hash: aRvaBBCO0cntwA2+Kz+mMu8boe9ywcCKXHaMThipubU=)
                          3: D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl (hash: nN3+FHdWkYyHbO4QDBxmilQ1YDulTlH6/RrPXfytl+A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl
                          rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 12:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5d:da:ac:38:44:c8:b1:ea:6a:2a:df:43:06:66:ca:f9:3d:d0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
        Validity
            Not Before: Nov  4 11:55:38 2025 GMT
            Not After : Nov  5 12:13:38 2025 GMT
        Subject: CN=1C5D06E2F614D0EB7BEB19586659FEFA3946A303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:d6:3e:b3:55:b6:ce:d1:a2:f9:11:0f:48:
                    4b:73:a5:b4:51:bf:36:69:7f:6a:0b:6b:9b:af:1d:
                    40:cb:48:02:c5:da:c9:11:43:b6:df:18:cb:c7:ac:
                    9b:d3:ca:7b:ae:95:f3:41:a8:23:bc:a6:a9:f6:2a:
                    d1:43:b4:48:17:86:c9:2b:f2:ec:18:f9:f5:11:f1:
                    05:1d:b3:46:ab:42:91:c3:ac:84:e0:0c:71:e6:f6:
                    7f:41:49:3e:11:6f:bf:32:fd:5c:ec:82:da:77:7f:
                    c2:85:28:ca:82:96:42:95:26:35:a2:97:6e:ee:66:
                    49:bc:46:b1:c2:a9:f5:6b:1b:2f:ac:f6:3f:6e:89:
                    b4:6a:ac:71:ca:58:1f:8d:34:bd:f6:97:ad:47:cc:
                    ff:9b:de:a8:cc:62:d1:e7:56:04:ff:ab:10:5d:96:
                    90:3d:31:1d:3a:e6:53:6a:93:38:63:69:a2:c8:5c:
                    05:de:c2:d8:45:f7:34:33:3b:7d:94:83:e3:8c:04:
                    f9:51:00:da:5d:8e:01:7d:30:55:8e:55:ca:5d:03:
                    55:cd:07:ee:96:80:c5:39:42:5c:b1:50:c7:b0:cb:
                    28:ca:fb:2d:ec:41:b4:58:3f:ea:53:9f:ae:3e:a8:
                    4e:7f:af:4c:23:29:82:09:95:92:1a:91:f7:91:31:
                    b0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5D:06:E2:F6:14:D0:EB:7B:EB:19:58:66:59:FE:FA:39:46:A3:03
            X509v3 Authority Key Identifier:
                keyid:D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:af:ff:ce:8a:e8:a5:10:b5:ae:5d:43:07:36:1e:f4:e8:
         8e:2a:51:29:c3:74:62:66:0f:78:fa:fe:77:af:e4:f4:a1:e3:
         77:57:0b:2c:b4:ab:88:1f:62:6d:94:37:e2:14:af:58:fb:b7:
         f4:72:db:b5:e1:75:73:97:39:02:2d:a5:8d:60:b7:c4:19:21:
         5d:1a:b8:74:fe:3a:74:58:ed:ac:8b:96:fd:f5:c6:22:a0:0c:
         72:23:7e:ad:7c:fd:a4:e7:ff:49:81:7d:3e:b6:c1:25:1e:64:
         8f:5d:af:2b:8f:3f:8b:ca:b1:0c:fd:aa:fa:cc:86:93:39:f2:
         82:f6:27:39:0a:95:be:55:ce:78:c6:3f:75:d4:af:8d:99:d2:
         a6:8b:d4:3e:e2:2d:5d:43:c1:ce:72:6b:99:ab:f0:b2:79:2c:
         51:57:a0:bc:05:11:c2:30:fe:22:7b:64:69:92:b4:b0:52:76:
         cb:89:5f:55:37:57:32:e8:dd:29:be:e1:a5:d3:c6:7a:6d:b7:
         cf:5f:32:39:9f:0a:c2:76:4d:eb:fb:cc:14:23:8d:b3:80:9f:
         75:68:79:43:f1:2a:53:f1:a0:80:f9:e5:cc:8d:1b:75:7e:74:
         9d:d8:36:9b:0f:29:3f:4a:bd:7e:82:e2:a9:b6:2c:b4:c6:f4:
         ef:21:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:00:00 2025 by rpki-client