Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
File:                     E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft (raw, json)
Hash identifier:          CUp04g32/A1h3MA1uoY7O/WDfj1Dw05LovVbpQZRezw=
Subject key identifier:   17:5B:25:74:4E:08:9A:AD:F2:5A:2B:CE:EC:F9:64:09:95:77:2C:17
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       57DB509211B71D5B2EA93A71F024510FC6611BB1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
Manifest number:          030A
Signing time:             Wed 05 Nov 2025 06:10:00 +0000
Manifest this update:     Wed 05 Nov 2025 06:05:00 +0000
Manifest next update:     Thu 06 Nov 2025 08:29:00 +0000
Files and hashes:         1: 3136382e302e3234382e302f32322d3234203d3e20323632373535.roa (hash: JHOjZZUGBlYXmHbNLaRVEDiQdvVCR00FHcE5zE2VR1o=)
                          2: 3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (hash: 1RVO1BwgXdSM2bftm7wMF4hlkwNFkTw5yTtBr+ti2xw=)
                          3: 3133382e302e33322e302f32322d3234203d3e20323632373535.roa (hash: 26VP2I7LpoCAHTt32QK9IDHLKHd1mS0OHJLBS3eYfQ4=)
                          4: 3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (hash: KuJaichzw2NzPyx1P41olphXNBe8KWCNtBYJumHvfYo=)
                          5: 323830343a3139633a3a2f33322d3438203d3e20323632373535.roa (hash: 3VrZ71GugeVAb3Hc1/0M6jmimLVihUgj0EPI6ULcAR4=)
                          6: 3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa (hash: /jZiQCgrjd3LZOoQiP3ggz/S/Het+nICwp/be9sdYOU=)
                          7: 3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa (hash: pHqGjv8poyAQEmt3KTrMjCwYjnOhITtASkvmz+Z7/Hk=)
                          8: E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl (hash: aKyOaYjMwH8MQ/Zlmsvrpvs3edtk6TsgfANBzulQ9ik=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 08:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:db:50:92:11:b7:1d:5b:2e:a9:3a:71:f0:24:51:0f:c6:61:1b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Nov  5 06:05:00 2025 GMT
            Not After : Nov  6 08:29:00 2025 GMT
        Subject: CN=175B25744E089AADF25A2BCEECF9640995772C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:cf:c0:27:36:0a:da:22:db:fa:e8:c4:01:
                    41:39:56:0b:c4:48:12:7d:d2:5d:b4:45:84:99:6e:
                    99:7a:fd:37:d0:f7:20:0e:24:42:d4:10:ee:3a:a0:
                    f6:51:b3:59:b9:ba:a9:92:55:4f:e1:d0:36:c3:bd:
                    72:88:b8:b8:14:a2:5a:94:4c:c3:24:f7:fa:a1:bd:
                    90:c9:a9:18:2b:4c:f7:de:45:ce:87:6f:0b:3a:ee:
                    99:aa:8c:2c:b7:2d:ca:8c:3d:2b:4e:54:b8:5b:7e:
                    d5:00:b7:ff:65:da:db:74:cf:15:5a:72:a4:92:ae:
                    08:aa:66:a5:1c:59:70:0c:aa:86:17:58:c2:3c:5f:
                    4b:3a:a8:bb:fc:40:9e:79:18:8d:e5:96:56:24:81:
                    e8:37:5e:fb:31:48:9c:7a:13:cf:2b:b0:ed:d4:04:
                    1e:7a:bb:e6:e6:52:c3:ec:77:75:e8:1f:88:af:18:
                    08:9a:37:3e:b7:c6:50:72:37:92:dd:a6:6e:86:f0:
                    d2:05:ba:36:43:38:b4:79:8b:96:48:96:f6:f5:fc:
                    ab:3f:5b:59:a7:af:41:1e:2e:ad:2a:02:55:38:49:
                    10:98:78:10:57:2b:50:4b:32:9b:b1:94:2d:c3:18:
                    41:db:f3:67:bb:0a:ce:b8:40:58:8c:b9:93:e9:2f:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5B:25:74:4E:08:9A:AD:F2:5A:2B:CE:EC:F9:64:09:95:77:2C:17
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:3a:9a:a1:ea:3a:03:9b:5a:0b:1d:47:af:1d:4b:62:9a:
         a6:f8:42:c4:d3:23:1b:0e:43:4f:ef:0a:5e:19:6f:c0:36:ca:
         29:61:d1:be:0b:fc:70:e6:26:7c:a6:fa:28:05:19:5b:af:20:
         d5:f7:db:11:6a:f4:8a:0f:2f:59:41:c2:81:14:e4:36:88:3a:
         c4:85:fd:e6:fe:7e:02:ea:3a:62:11:85:65:99:63:fd:52:50:
         a5:c0:d9:ae:a9:ff:8a:1b:a6:79:28:08:61:37:3f:e1:ba:c4:
         07:89:c2:82:3d:fc:74:55:1f:71:6a:9e:6e:e6:4b:69:55:c4:
         8b:19:68:95:ad:be:ef:f3:6c:cf:b3:b8:c2:5e:55:ff:74:57:
         22:41:15:5c:0a:c0:bc:ea:05:af:96:56:55:fe:7d:82:dd:0e:
         fa:87:07:c4:a2:d1:a9:52:00:a0:8b:83:81:9a:c9:af:92:aa:
         f6:22:e2:65:e1:ff:95:ca:4c:5a:b0:74:09:c6:ea:6f:52:64:
         f3:9a:3b:3c:70:02:62:6d:62:e5:24:fd:fb:27:53:44:f8:77:
         5d:0e:0b:d1:fb:8c:b2:64:b7:e2:45:c0:90:c6:18:3f:b7:d0:
         0a:a6:d6:5b:fb:c5:5a:d9:38:bd:80:cf:d1:6f:93:f2:42:59:
         26:18:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:51 2025 by rpki-client