Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
File:                     5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft (raw, json)
Hash identifier:          WhzxrfLnZ6+XQijWFBesOppxc6HTgQCrhzhECs4At50=
Subject key identifier:   59:8B:10:64:8F:10:0C:AD:DB:A3:7B:A9:6A:46:AC:E6:64:C6:1B:40
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       54E3910366DAA71D9E1E7F2F9006ECD757691CA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
Manifest number:          017B
Signing time:             Tue 04 Nov 2025 16:36:10 +0000
Manifest this update:     Tue 04 Nov 2025 16:31:10 +0000
Manifest next update:     Wed 05 Nov 2025 17:24:10 +0000
Files and hashes:         1: 5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl (hash: Y5/cBJ/j2SuAc7WlNG9+GARD4HiwSE7okmWH7fnnxtM=)
                          2: 3137392e39372e35322e302f32342d3234203d3e203532393632.roa (hash: d7e5o5b+wZ1NVpgfbxBsSZ31ykdK/E6OtldqceaLs/M=)
                          3: 3137392e39372e35302e302f32342d3234203d3e203532393632.roa (hash: NyAfDVp7UebyUMuEkbbd3JpFbgatstCg++vt6yyUGSc=)
                          4: 3137392e39372e36322e302f32342d3234203d3e203532393632.roa (hash: t5FiezG9zSepFcELA6KPKWN9ptCvNmlDhvCOzrA5OSc=)
                          5: 3137392e39372e34392e302f32342d3234203d3e203532393632.roa (hash: pg2kZaiGAr2vq5r51ijIZrw1QrqVbquHpvd794IkYms=)
                          6: 3137392e39372e36302e302f32342d3234203d3e203532393632.roa (hash: oObj0pPLNLyP9qAiw01WkCQzAbpQaUXdfZzN/yWvbBc=)
                          7: 3137392e39372e35352e302f32342d3234203d3e203532393632.roa (hash: HFT+CFVO93hSgn4WPBU90jsmRUg/m1IimO5sN5CsmYs=)
                          8: 3137392e39372e34382e302f32302d3230203d3e203532393632.roa (hash: RNjdcMY4Dl5sHHlQuR0YNe+2FR7gWl0FV/TDiMDZkpM=)
                          9: 3137392e39372e34382e302f32342d3234203d3e203532393632.roa (hash: SGrvi6negrHR0PKHXqJxAhsgj3KivJ94paFMNk+8O3g=)
                          10: 3137372e31312e302e302f32312d3231203d3e203532393632.roa (hash: 1UZmWnPXl0FfJV7d4pS1vW8so5XCl4uedJf3YUev3U0=)
                          11: 3137392e39372e35392e302f32342d3234203d3e203532393632.roa (hash: j9SQIesgFJbT9Fe0Im6ADGLSyRhoCILg8aBZsGTWsCc=)
                          12: 3137392e39372e36332e302f32342d3234203d3e203532393632.roa (hash: 7p9LGJYVt2fuEtFRV/kklx/o2P4zWFj2xgK8taIkQiA=)
                          13: 3137392e39372e35362e302f32342d3234203d3e203532393632.roa (hash: zG25yiwcFV1mhMd27uGfWDTVD3bIBt4d7JCtjG0voIU=)
                          14: 323830343a3331633a3a2f33322d3332203d3e203532393632.roa (hash: GaY/KkDMesX4ecslQ2IyQkLXINIqloyzn4qsHySo8g8=)
                          15: 3137392e39372e36312e302f32342d3234203d3e203532393632.roa (hash: T31Z58keaJ8qTRrS9lJMv7813UIoU2W2a7xK045NQuQ=)
                          16: 3137392e39372e35382e302f32342d3234203d3e203532393632.roa (hash: vRJs5yQM6ZgE851oB0z6pQo171yGQDsdU7FFNu5Aju8=)
                          17: 3137392e39372e35312e302f32342d3234203d3e203532393632.roa (hash: edE5rKQ9NfdSlEL+P7HBHkSwJCV98aPR67dqAZOXnC0=)
                          18: 3137392e39372e35332e302f32342d3234203d3e203532393632.roa (hash: qnNVQQQhwrRVj61bNseCRn4y0Bt7K+ZpVFw8r9YXUyw=)
                          19: 3137392e39372e35372e302f32342d3234203d3e203532393632.roa (hash: 73nABlZU2SYDKOUHI8uallz6bXuxdGYmVYSsFZOrJ0k=)
                          20: 3137392e39372e35342e302f32342d3234203d3e203532393632.roa (hash: Maix8WLlWC2YO+tz/1TMm0xSJjdhmVq5HBsHf/R4L4o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 17:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e3:91:03:66:da:a7:1d:9e:1e:7f:2f:90:06:ec:d7:57:69:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Nov  4 16:31:10 2025 GMT
            Not After : Nov  5 17:24:10 2025 GMT
        Subject: CN=598B10648F100CADDBA37BA96A46ACE664C61B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:3b:fc:3b:fb:90:49:d3:da:9b:33:28:67:
                    32:00:0c:f7:32:02:0c:b1:99:82:c8:97:8b:fa:ff:
                    57:53:d6:bb:5c:98:43:4d:16:ca:73:57:f4:e2:80:
                    95:af:f0:a5:09:9f:bb:98:93:eb:f6:f7:1a:90:06:
                    7c:d6:64:b0:b3:20:51:66:bc:95:6e:57:79:8d:25:
                    33:18:02:fc:48:b8:4f:cf:b5:b4:4f:f7:7e:1a:3b:
                    40:b9:a3:6a:a6:7f:94:01:d1:81:cb:38:71:ba:0d:
                    9e:88:ea:9c:44:e9:29:59:e0:17:18:9d:fe:9d:a4:
                    eb:4d:04:27:2a:5c:a3:43:0b:b0:48:c3:f2:e7:3b:
                    10:fa:40:6c:50:86:54:f8:95:3c:af:b1:f6:dc:64:
                    f6:20:b5:28:08:f7:e5:51:0e:de:8a:2a:c4:7d:b6:
                    66:0b:af:62:1b:ae:95:62:0d:2b:29:3d:65:59:ae:
                    c6:4f:16:cf:30:8b:95:88:c3:24:ed:a5:51:4e:bd:
                    da:d0:fe:2e:cf:fe:b1:30:6a:88:6c:97:15:3e:64:
                    f9:e8:d3:0e:d7:7e:8f:b7:37:39:f5:d3:61:5c:31:
                    a5:c3:d5:5e:6f:44:40:04:bf:00:61:03:fc:15:7b:
                    d2:c4:72:e4:0c:93:53:68:ed:09:36:f6:0a:60:a4:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:10:64:8F:10:0C:AD:DB:A3:7B:A9:6A:46:AC:E6:64:C6:1B:40
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:de:73:ba:e0:5c:db:12:85:4c:2e:bb:60:20:67:51:f0:eb:
         6b:aa:d2:d6:84:03:52:df:00:0d:a4:c5:1f:90:19:5d:cb:0d:
         de:c1:40:d1:24:6a:b5:7f:19:80:9e:50:d7:24:a7:9d:47:15:
         2d:45:37:4f:18:c4:e1:53:4d:b6:bc:9e:4f:2d:2a:9a:a7:a1:
         50:f1:f6:6c:62:f1:b8:b7:b1:ad:fd:6c:ef:50:a7:c5:a6:0b:
         5e:cb:3a:ff:b6:46:9b:8b:ed:66:09:c1:98:8e:24:7e:51:79:
         3e:65:f7:2b:8e:c5:a8:24:e7:a7:5a:b3:3c:3e:a8:fb:ca:71:
         f0:a9:af:db:5e:2c:37:77:9d:a2:c7:97:40:c5:23:ff:0d:0c:
         8f:7d:1c:a3:8d:2e:3e:17:c5:c9:c1:da:24:99:4b:8e:c5:39:
         c9:30:c2:7c:f5:8d:63:07:bc:0a:50:3b:cd:44:0c:69:20:15:
         5f:e5:c7:f1:b5:5a:63:91:b3:ce:1c:18:88:25:94:41:3e:8c:
         66:4d:c5:bb:f1:98:38:69:09:6d:c2:64:62:d5:bd:d0:16:df:
         90:17:8d:83:21:82:3e:77:2f:0b:1c:e2:87:e4:a2:c4:f7:b4:
         87:6d:45:4a:6e:df:2c:bf:47:a5:c9:80:d3:11:de:41:86:38:
         f1:e0:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:36 2025 by rpki-client