Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
File:                     5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft (raw, json)
Hash identifier:          6WeFDR7eFmNLBVRmsM95Oik3XOHOPGuZ5KtwHwY6RZE=
Subject key identifier:   BF:01:3D:9C:96:29:A9:DB:94:FD:A6:17:A2:A0:67:03:56:3E:64:33
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Certificate issuer:       /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial:       5D9809BCA91853B5CB3B599F3C4472BAF0C32780
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
Manifest number:          02DD
Signing time:             Wed 05 Nov 2025 00:41:29 +0000
Manifest this update:     Wed 05 Nov 2025 00:36:29 +0000
Manifest next update:     Thu 06 Nov 2025 03:54:29 +0000
Files and hashes:         1: 323830343a336263383a3a2f33322d3438203d3e20323636313730.roa (hash: mmaNkLilF/EoRmlf2yN+2d1pUoBI37qNRTNeSqh4Clg=)
                          2: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl (hash: wwIuptwKjqy+7YCWvWQu8hdl3pKOnI8hctv71/vORVk=)
                          3: 34352e362e3137362e302f32322d3234203d3e20323636313730.roa (hash: u6Qidk+dRJmAVIClo38LWMEpvi2huJ9R7RSbffvo+sI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
                          rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:98:09:bc:a9:18:53:b5:cb:3b:59:9f:3c:44:72:ba:f0:c3:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
        Validity
            Not Before: Nov  5 00:36:29 2025 GMT
            Not After : Nov  6 03:54:29 2025 GMT
        Subject: CN=BF013D9C9629A9DB94FDA617A2A06703563E6433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:96:95:bb:c1:58:6a:4b:25:5f:80:66:3e:
                    17:a1:8f:b5:c8:f4:fa:92:f1:fe:fb:a1:46:90:be:
                    b5:d1:49:ac:5a:2e:15:23:b0:09:1d:f1:9b:00:55:
                    f2:b1:ba:9f:69:61:41:5e:51:51:11:4a:4a:26:05:
                    a0:aa:21:ff:a5:c4:97:cf:2d:16:27:e2:97:8a:86:
                    d8:db:9f:fb:08:61:6f:30:5d:dc:e1:52:48:a3:4d:
                    41:02:6f:51:1d:29:ff:b3:0d:99:26:5d:9d:c4:79:
                    49:76:e5:30:b1:8f:85:28:64:42:e2:e1:10:4d:33:
                    b4:0e:26:4c:db:b3:10:7d:b2:86:f5:5b:cb:ad:68:
                    2c:ac:e4:0a:d4:6a:50:7e:6e:f5:bc:b0:59:a5:01:
                    7a:7c:14:eb:29:ee:e5:ad:d3:8d:94:b4:a8:0b:20:
                    ce:94:94:04:76:65:33:ad:a2:eb:3c:6c:7b:68:5d:
                    48:71:bf:fc:e4:73:ae:e1:3c:53:e6:c3:b2:15:cf:
                    30:8c:ef:5f:26:99:d6:ab:58:c9:01:87:99:ab:ab:
                    1d:a3:dc:09:ec:ae:4e:76:53:d7:a3:cf:a8:f7:8e:
                    4d:e9:09:9a:91:75:22:41:0d:bb:6f:b8:2c:3b:b9:
                    5c:10:73:e9:60:f0:c4:43:48:3c:f7:bb:dd:88:3a:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:01:3D:9C:96:29:A9:DB:94:FD:A6:17:A2:A0:67:03:56:3E:64:33
            X509v3 Authority Key Identifier:
                keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:09:8b:23:37:c9:f4:90:57:06:1c:cc:c4:b3:94:a9:d1:e3:
         bc:b2:ba:d9:b4:05:23:5e:d4:46:a2:c4:85:29:4c:fa:f6:70:
         83:20:ac:80:89:c2:01:f3:77:bb:82:37:44:3c:39:48:0b:06:
         e7:59:5b:46:c0:c5:05:cf:86:46:77:fa:81:77:70:2f:4b:82:
         0d:1d:58:bb:9c:15:db:6e:74:f1:95:e6:cc:73:af:7a:8d:da:
         de:8b:b8:1a:b0:20:b9:6a:37:13:66:e4:b0:cf:4d:79:46:0a:
         1f:6b:0c:b3:69:b5:cc:96:bd:26:c7:d1:6d:85:b9:7b:8e:86:
         7a:21:86:c3:ef:7a:1b:01:ed:1a:9b:c7:6a:09:b9:57:e4:d1:
         b5:ae:8c:d2:98:31:38:50:4b:6c:4e:0e:44:07:d7:38:95:52:
         6b:c6:73:94:e4:da:a8:9e:3b:fa:19:dc:87:2d:f3:b9:28:07:
         42:44:49:15:a7:fa:f8:66:dd:36:89:4a:0b:28:e6:58:1e:a6:
         12:0a:b4:c4:12:64:dd:89:79:83:34:84:4c:06:4c:85:0c:b8:
         42:bd:86:75:03:8a:1e:13:b0:d3:20:d2:d3:9c:91:8d:e9:e4:
         4f:22:26:6b:7b:ec:e4:a0:c4:a8:17:7f:6d:fd:1f:52:28:6f:
         0a:aa:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:05:57 2025 by rpki-client