Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
File:                     5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft (raw, json)
Hash identifier:          rUatnHIzWfEg/ZBb1gLPmjo4I4TYPzD36zsjN2USViE=
Subject key identifier:   76:F4:1F:54:C0:C8:FD:D0:68:0A:49:11:D0:FD:97:FC:4F:D4:6D:29
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       0691FFADD571383BFCB0DCD99524BAF8420AD00A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
Manifest number:          0303
Signing time:             Tue 04 Nov 2025 20:31:37 +0000
Manifest this update:     Tue 04 Nov 2025 20:26:37 +0000
Manifest next update:     Wed 05 Nov 2025 20:57:37 +0000
Files and hashes:         1: 3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (hash: 9mykslR77fZ7xC9MLu79f7z8bzLyXOic2iyPtYgwpU0=)
                          2: 323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (hash: RTx6CCPuW1lY1SE9RqyeFLKfpghK/ucENv3ATWs3J+g=)
                          3: 3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa (hash: qoIZEu1/WWy4s44he/lhY8Elf0Ze8PVUEg3vPzj5UoM=)
                          4: 5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl (hash: smAla2gw6q0vcWkS0kG8PSN24XzLjAo3w34Z9MrxQOc=)
                          5: 3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (hash: DavKGaLt8+OCiM0sr6n2fHGnv4su2dNtgMGBKD7OrZI=)
                          6: 3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (hash: d08Pl+W/dTWpZFlmMKe8w3cnyJqa/CScvBLfxR4G/Og=)
                          7: 323830343a323037343a3a2f33322d3438203d3e20323634343931.roa (hash: 0+yyYhzefzIILi0EAiz+ba5lOaT5HBHgqWt7VVeb80Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:91:ff:ad:d5:71:38:3b:fc:b0:dc:d9:95:24:ba:f8:42:0a:d0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: Nov  4 20:26:37 2025 GMT
            Not After : Nov  5 20:57:37 2025 GMT
        Subject: CN=76F41F54C0C8FDD0680A4911D0FD97FC4FD46D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:b2:a4:ca:83:52:6e:ba:28:84:c2:da:f9:
                    10:d5:41:3f:fb:85:0a:bc:53:00:ad:14:d7:6f:43:
                    cb:d6:33:34:11:e6:c1:a4:8e:ba:e4:76:50:5d:ee:
                    8e:9e:e8:ec:12:8e:ee:49:ce:73:ab:31:09:e2:d7:
                    fc:8a:c2:4d:3e:18:b0:d7:9c:59:89:43:af:b1:5c:
                    25:bd:93:3c:f5:f1:bd:59:9b:b3:c1:cc:fa:34:af:
                    8d:0f:f2:82:89:14:fd:ab:1b:59:eb:03:c7:cf:90:
                    c0:4b:8b:88:31:98:af:61:0d:27:d0:1b:ce:1d:b8:
                    81:26:7b:03:f0:ac:49:f3:a2:51:58:23:89:32:eb:
                    ea:48:cf:0d:e0:6d:ce:3d:6c:2a:ba:6b:4b:94:44:
                    ce:33:44:84:92:5a:05:41:41:61:4d:b6:a3:38:c7:
                    14:b9:8b:ca:d5:fc:9e:9a:93:e9:c8:46:d7:15:4c:
                    9c:e7:ac:ed:af:e7:b7:62:9c:0e:e4:b7:6a:30:29:
                    3b:71:4d:c8:81:be:dc:09:eb:3d:83:cf:5d:14:d3:
                    3d:c9:4d:24:69:4f:4d:e5:41:1b:0f:13:5d:76:47:
                    11:e5:fd:2d:81:d1:b1:c1:a4:78:78:49:d7:37:1c:
                    54:ba:c5:fe:0e:26:ca:91:3f:b9:49:60:50:c8:35:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F4:1F:54:C0:C8:FD:D0:68:0A:49:11:D0:FD:97:FC:4F:D4:6D:29
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:93:bc:d7:7b:35:42:37:3f:74:c3:89:f5:90:61:f2:e8:
         bb:52:37:5f:ff:b5:03:ce:32:5d:8f:40:60:20:31:a3:b3:bf:
         ec:9c:b8:a3:d2:d6:eb:ba:e2:07:9b:55:3b:bb:44:7f:53:d6:
         77:7e:df:ff:11:08:d5:28:f0:8c:0b:b9:3b:1b:73:39:ca:b9:
         4e:03:29:ec:74:8a:27:d0:bd:90:6d:53:cd:8f:5b:18:d2:90:
         1b:b5:25:19:3c:53:6a:65:e3:28:45:14:0f:95:b1:e9:00:c4:
         75:99:e5:c3:db:27:9e:36:b1:9e:df:7f:ae:10:b3:c6:95:c9:
         8a:6d:89:6f:c5:ab:4a:24:43:d2:13:cf:e5:7d:35:e0:c9:28:
         6a:93:27:2b:66:a4:0d:03:b2:4a:7f:f9:54:a4:9b:ce:11:f6:
         ba:9e:a7:cc:25:00:f1:15:98:4d:55:ac:68:34:75:f3:10:15:
         c5:05:dc:cb:ed:ae:63:b4:01:fb:c5:5e:92:0d:b9:d5:20:50:
         0b:ba:80:08:68:92:40:b8:98:db:ac:19:97:30:39:8c:57:70:
         fc:1a:64:39:d2:bb:0f:ea:0d:08:b8:e4:1d:40:45:e4:ae:97:
         d9:03:dc:c8:68:89:a2:d0:cb:b1:c0:7b:ef:13:a4:24:c2:90:
         81:15:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:30 2025 by rpki-client