Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          Wi+9haVXzeH3Kh873gzc8E7sj/R87pTqclGXejl8zyU=
Subject key identifier:   5C:DA:CB:E5:81:C7:4F:3B:BA:D7:E9:BA:99:EF:AC:0C:60:87:F7:FF
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       0120EEB961F85D8CE06B078B89347C8261AC10EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          0300
Signing time:             Tue 04 Nov 2025 17:56:37 +0000
Manifest this update:     Tue 04 Nov 2025 17:51:37 +0000
Manifest next update:     Wed 05 Nov 2025 18:32:37 +0000
Files and hashes:         1: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
                          2: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: csJgaqB7RuAXPxK3sfXeaWgnXziDnwF1/uZ82NZS3hE=)
                          3: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          4: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          5: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
                          6: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
                          7: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
                          8: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 18:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:20:ee:b9:61:f8:5d:8c:e0:6b:07:8b:89:34:7c:82:61:ac:10:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Nov  4 17:51:37 2025 GMT
            Not After : Nov  5 18:32:37 2025 GMT
        Subject: CN=5CDACBE581C74F3BBAD7E9BA99EFAC0C6087F7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:d1:5c:5f:6c:79:a3:ae:96:3e:eb:26:fb:
                    0d:5f:62:8f:04:e4:d5:37:82:2e:33:92:ab:ea:54:
                    18:39:34:47:b9:84:64:d0:53:47:84:ee:3e:59:c7:
                    da:cd:71:6e:7d:81:fc:8d:15:c5:4b:62:4c:4e:aa:
                    db:8a:08:cf:f4:6b:92:23:90:9d:d0:25:e9:3c:46:
                    be:9d:e3:2f:82:f5:5b:25:50:46:a9:07:3e:17:ed:
                    df:b2:37:1e:69:f5:12:a0:41:91:53:21:3d:dc:63:
                    86:6d:67:14:47:d4:e1:79:0b:a6:39:2a:f3:f2:d9:
                    43:da:16:90:b8:4e:f6:3d:70:29:fc:69:8a:14:2e:
                    58:e7:7d:5b:1a:0d:bd:56:53:27:4b:be:a5:d9:4b:
                    09:8f:d1:c2:91:96:b4:5e:ab:47:5c:69:fd:96:59:
                    f7:dc:bc:fe:f5:12:48:ea:b9:fe:72:9a:37:b9:d6:
                    2d:a8:6c:98:f6:6a:3f:71:00:c0:87:6b:90:83:78:
                    ac:6d:6d:8f:75:66:70:76:27:36:db:d4:cd:56:66:
                    be:d3:67:6a:03:64:9a:9f:45:04:e1:67:11:fa:5f:
                    ee:4b:e2:d8:91:98:5b:86:cd:0c:08:3a:53:36:db:
                    56:1e:ad:e5:1a:7a:64:1a:32:f1:2c:81:ce:41:1b:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DA:CB:E5:81:C7:4F:3B:BA:D7:E9:BA:99:EF:AC:0C:60:87:F7:FF
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:5d:5a:96:dc:b0:64:31:e2:89:84:b5:16:00:65:18:6e:
         5c:f2:99:02:9b:4e:cf:22:a3:83:27:4b:9f:d1:fe:81:6f:11:
         9d:9e:41:e2:90:12:e0:da:12:cc:30:84:67:03:f6:b7:11:6c:
         ef:0f:1b:b4:4e:c6:a0:66:44:fc:7b:cb:4f:ff:2e:26:9f:b6:
         b3:9a:e1:24:97:b6:b2:1a:24:d6:02:a3:5e:52:4a:38:ae:0b:
         75:6f:57:16:d4:28:13:0d:b7:b1:9b:7c:a5:0a:03:d6:8c:bb:
         23:2a:01:46:f6:43:e5:ca:ba:29:34:46:bc:aa:60:e5:ab:1e:
         57:35:5f:be:e8:a2:ee:3c:3b:a9:b0:e0:04:74:8a:58:d0:de:
         7a:83:00:75:57:04:bd:ce:cd:63:52:b4:44:67:cf:b8:2e:71:
         99:49:fa:18:18:60:64:50:ab:2d:31:1d:5b:8a:ec:ac:cd:a1:
         e2:51:6b:de:f6:9f:f0:4b:0f:bb:5a:ff:cc:ae:22:ab:ed:35:
         1a:e7:5d:0c:30:63:53:e3:4f:ce:44:25:8e:39:4e:e2:db:61:
         1d:25:d7:6d:09:4f:c0:e2:3a:37:32:c2:aa:d4:7a:51:d1:45:
         58:79:a2:5b:77:7b:28:e4:e8:c2:e4:d1:99:43:6e:18:f2:38:
         86:74:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:48:44 2025 by rpki-client