Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
File:                     D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft (raw, json)
Hash identifier:          svnNDxUh7zTFgqRhqSE2SpNoJ0l2aLV94GLzDMKhoh8=
Subject key identifier:   36:01:48:9A:8F:25:93:52:80:14:A2:C4:AE:A9:7C:F1:B0:42:0F:1C
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Certificate issuer:       /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial:       1A512E9BB9C5FB526016E788628A139D74D7963E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
Manifest number:          0302
Signing time:             Tue 04 Nov 2025 20:47:57 +0000
Manifest this update:     Tue 04 Nov 2025 20:42:57 +0000
Manifest next update:     Wed 05 Nov 2025 22:26:57 +0000
Files and hashes:         1: 323830343a356332383a3a2f33322d3438203d3e20323638383932.roa (hash: IE1zJNXn6RAOdArFw8Bsas97RLb4ASTXUHeSRlYevWo=)
                          2: 34352e3137352e38382e302f32322d3234203d3e20323638383932.roa (hash: w87/DuMMNL5quM7rpiLUGB40gEl0zQN0r0/6pjpOXBw=)
                          3: D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl (hash: V/Vz62iKgE4G1a405b/BTe+WU6l6/RBd7R3wo4bswKM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
                          rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 22:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:51:2e:9b:b9:c5:fb:52:60:16:e7:88:62:8a:13:9d:74:d7:96:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
        Validity
            Not Before: Nov  4 20:42:57 2025 GMT
            Not After : Nov  5 22:26:57 2025 GMT
        Subject: CN=3601489A8F2593528014A2C4AEA97CF1B0420F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2c:4b:46:05:29:47:05:1d:02:a7:3f:3f:5d:
                    0c:5f:5c:26:52:7e:6d:3b:50:8e:5d:1a:f4:f1:db:
                    39:9e:eb:f3:16:ed:73:f8:0d:e7:1e:82:3e:c7:62:
                    c9:c7:13:57:dd:73:a0:8a:62:ca:d0:8b:ef:3d:52:
                    07:4a:90:61:0f:63:6e:09:69:4f:84:e9:29:c2:9c:
                    8b:26:e4:e5:f3:9b:2b:68:d9:4f:00:3e:e6:4c:7c:
                    3c:8b:5b:e5:2d:0b:61:b8:a6:82:e7:fa:f1:55:0a:
                    1b:9a:a7:c5:c5:3d:9d:dd:84:03:86:92:ab:33:f0:
                    aa:9f:e6:77:51:db:7b:ca:6a:6e:73:29:23:10:5d:
                    66:b4:e6:0e:72:7e:75:3d:64:8a:18:66:7a:ec:7a:
                    6c:ce:65:aa:44:5e:b2:41:8a:1f:97:d4:ea:4d:99:
                    74:0c:65:44:29:40:0e:fb:3d:48:47:c1:d7:1d:fe:
                    b0:d8:06:63:f4:af:42:a5:0c:aa:e7:c4:04:7b:ce:
                    ba:e6:e5:cd:81:57:6f:24:7f:a8:5f:f5:67:24:1b:
                    b8:72:a4:bf:69:b7:62:1e:71:7f:7e:4e:0f:ae:6a:
                    a4:e8:a8:bf:06:7b:dc:c3:88:7d:b9:60:6c:af:f9:
                    a1:55:ba:88:a3:4c:bd:71:3d:eb:7e:f8:ad:c4:f4:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:48:9A:8F:25:93:52:80:14:A2:C4:AE:A9:7C:F1:B0:42:0F:1C
            X509v3 Authority Key Identifier:
                keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:43:4e:65:f6:92:8c:d3:47:f5:d7:03:4c:26:28:61:19:b2:
         e3:90:5d:19:7c:6f:08:72:28:d9:42:4c:85:34:d6:5d:aa:85:
         0d:77:ce:93:bc:cd:68:0a:11:a0:a7:32:af:d9:b9:fd:0c:77:
         24:ae:54:9d:02:36:52:f4:ab:00:4b:fc:c6:cd:3a:13:13:ac:
         d9:1c:ba:32:a0:7d:c8:13:cf:81:67:65:f4:a2:ac:bd:c7:03:
         2c:4a:d4:39:23:c8:59:73:10:d7:f3:95:43:71:e6:83:d6:cc:
         97:ef:1b:53:9f:6d:dc:ef:7f:aa:45:35:b9:f2:d5:74:69:51:
         39:5d:ad:ac:71:ee:6a:8c:14:e0:76:6d:f4:84:92:5c:14:f9:
         ff:e5:0b:4e:03:fb:b2:af:1b:49:a1:97:5d:6f:63:50:0c:37:
         bd:72:99:03:7b:4f:68:35:ea:f6:5e:a2:c0:47:e8:e3:a8:84:
         79:a8:21:1f:a4:2c:13:bb:88:ff:17:7a:1e:f6:c5:52:7f:42:
         9e:c9:72:da:39:ea:c7:3a:27:66:a0:27:24:3e:c1:06:e5:1c:
         14:e3:cd:24:ad:8c:1e:7e:c4:0d:3e:79:92:f8:88:6c:9d:5d:
         20:91:0b:ad:c5:2c:24:90:7f:ce:d1:e3:62:84:0f:11:c0:de:
         9a:d4:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:58 2025 by rpki-client