Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          B3V0MwwVU9Hm9QmByc1kMQ5ckJ/ZrPFrwy13Ec8li/k=
Subject key identifier:   53:BD:44:56:69:3F:32:96:B1:FD:B0:50:1D:C7:3A:57:D2:EA:2B:AB
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       2A9DBF6238FF82595670B3E7F15823280BB6B2F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          02FA
Signing time:             Tue 04 Nov 2025 06:47:17 +0000
Manifest this update:     Tue 04 Nov 2025 06:42:17 +0000
Manifest next update:     Wed 05 Nov 2025 10:41:17 +0000
Files and hashes:         1: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: 2IFKTZTlJCa+APi4DHL5ZGrLP6V7wvRKfC3Pbw7u3gs=)
                          2: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: DkwtmlkNsx8L7Qk3qD/RgaLiNh7K+HBzbj0ah7JvCj8=)
                          3: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: j3SnVydXwCOFbRSiBrLivnOpm0lRoBpHA211H3fv4r8=)
                          4: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: LoNT6rAzouHElCAxQfq7lbXt6avk0AfPnw2zLK+lX6c=)
                          5: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: ipYqZy2Bw5WltHHZykTTJnZ3JhG9BblnpE6LKfOMyUY=)
                          6: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: 9Em0FD++Jb7iPbuHi9g4Eapqpd4aKkp2CQyjnM/Ml0k=)
                          7: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: 79YrqQF0IndROrk+cfePatBDpYvG+DokRE6q0LebRRs=)
                          8: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: xZZjbro5zLk1oyGqVK7m76LBNIEgAirpjrwgFYj51So=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 10:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9d:bf:62:38:ff:82:59:56:70:b3:e7:f1:58:23:28:0b:b6:b2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Nov  4 06:42:17 2025 GMT
            Not After : Nov  5 10:41:17 2025 GMT
        Subject: CN=53BD4456693F3296B1FDB0501DC73A57D2EA2BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:a0:2b:29:60:2f:7c:b6:b8:24:3a:e9:a1:
                    94:a5:b1:b5:d3:d4:eb:f8:7b:7d:2f:59:c4:3f:9f:
                    8a:39:67:37:8a:28:58:42:54:0b:24:66:f8:85:f9:
                    9d:c4:2c:54:d4:d7:bf:7c:36:6c:20:77:c5:89:b9:
                    2e:b6:7f:06:9e:9a:df:95:54:c7:09:d4:8c:04:59:
                    ca:ee:a7:a6:00:b0:1b:bd:18:b4:2d:8c:35:9c:8a:
                    ef:69:be:0c:2b:fa:58:10:e4:0b:e3:15:cc:25:aa:
                    3a:9f:34:bd:61:86:b1:3e:50:73:8e:6c:4e:b2:04:
                    c3:95:aa:91:cf:b3:28:52:50:8a:b0:09:6c:63:13:
                    a2:e2:6d:89:79:10:3d:6d:a7:61:d9:85:8e:2a:b8:
                    fb:64:66:3f:79:b3:f1:21:33:16:d0:3f:f1:e0:11:
                    1d:c6:23:1c:73:a7:86:00:c7:13:e1:ab:5d:3b:88:
                    6e:09:ea:f6:ae:56:28:c0:cf:cf:00:3c:5c:db:3f:
                    c1:1f:14:98:26:db:e6:52:f2:c4:d5:4f:dc:01:a5:
                    2e:f3:c9:2e:7b:e2:5a:83:6c:75:c2:d7:9e:0f:54:
                    50:a9:9a:34:8e:4a:bb:51:f8:51:85:66:0d:1e:52:
                    ab:9c:fc:0a:f4:7f:f6:39:69:40:2d:9f:83:bb:ca:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:44:56:69:3F:32:96:B1:FD:B0:50:1D:C7:3A:57:D2:EA:2B:AB
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:29:af:4b:c9:b1:2a:93:13:8c:11:ff:4d:1e:0a:40:e1:10:
         11:09:27:c6:be:18:20:2e:cd:68:29:f1:d4:3c:70:58:42:81:
         91:db:d7:2e:ea:7c:6d:2e:9e:0f:2d:4e:cf:5f:27:f9:f0:1c:
         5e:2d:3b:3d:72:b9:51:36:ac:e0:bc:a6:3d:19:be:cf:c4:86:
         42:62:01:7d:ad:ee:94:f0:7a:77:c3:e1:90:09:09:8d:9a:71:
         af:e4:91:04:f7:5f:50:8e:ee:14:00:5e:b3:ba:6d:1a:bb:97:
         13:cf:36:8e:85:1f:fc:ed:b9:31:c9:49:13:24:66:88:88:65:
         a6:37:01:08:0b:52:c8:a4:a1:1e:ee:40:51:0d:51:42:cb:59:
         31:31:39:59:a5:90:d1:2b:4f:0a:f6:95:a9:42:88:97:a5:1f:
         9c:0f:97:78:a2:d8:da:46:b5:00:81:64:0f:ab:da:34:5e:f7:
         4f:a7:05:e0:c5:73:c1:14:1c:25:bc:bd:a4:35:69:3c:9d:f2:
         b0:cf:35:a2:2f:2e:81:a5:ba:1d:e3:14:13:a0:67:3b:aa:23:
         68:1e:9f:21:0e:e9:01:bf:07:97:35:94:75:69:bd:23:12:19:
         a8:94:08:65:28:c2:6f:ae:a2:f4:cf:f3:a3:19:3f:cb:05:47:
         fb:46:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:12:59 2025 by rpki-client