Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft
File:                     5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft (raw, json)
Hash identifier:          YkIC2lEJ5vI0INJDHfOAPqAh1Ym+21U6SSP9ApUBldA=
Subject key identifier:   D9:53:A5:48:E6:79:E5:84:1F:A0:39:CF:7A:51:D8:A2:AC:20:BD:95
Authority key identifier: 5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF
Certificate issuer:       /CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
Certificate serial:       3809932D1530FFA65177E38D733D6FEB4170881E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft
Manifest number:          D2
Signing time:             Tue 04 Nov 2025 20:16:02 +0000
Manifest this update:     Tue 04 Nov 2025 20:11:02 +0000
Manifest next update:     Wed 05 Nov 2025 23:30:02 +0000
Files and hashes:         1: 3230302e39352e3137392e302f32342d3234203d3e203532353439.roa (hash: Or8U/2QfNAs8fHsR569N45/cYkSMfFkoftfTbyNLKwY=)
                          2: 3137372e38362e33372e302f32342d3234203d3e203532353439.roa (hash: IhhqKMF1nCTwHXm7Sp2H2mZpGFEdiORWL8CyHmKthbY=)
                          3: 5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl (hash: t477SwSNLIpTQOTFOdwr+DY4yqQCrEYMiRrMCeF9bGo=)
                          4: 3230302e39352e3137382e302f32342d3234203d3e203532353439.roa (hash: 9VjzFrc1m0F0hbD852vakAsuPbNhUYtj3YalV46pnWM=)
                          5: 3137372e38362e33362e302f32342d3234203d3e203532353439.roa (hash: HV92tDOW5r1qXWmn40UoT4Kc8uEAMWDiRI0jL6rHD30=)
                          6: 3230302e39352e3137362e302f32342d3234203d3e203532353439.roa (hash: TtLKaRL64vsO8tIczpikM1ILYvpnQMwBSGlmOe5gaTE=)
                          7: 323830343a6362633a3a2f33352d3335203d3e203532353439.roa (hash: zQ3WU9W9oz0EO7/Ew3e2ZUZWetEDiE40hHyG2/0SP4Y=)
                          8: 323830343a6362633a363030303a3a2f33352d3335203d3e203532353439.roa (hash: TVGxHElYGAJrGKcDNfcuplfQgduiuAMg0oiHcYhxns4=)
                          9: 3137372e38362e33382e302f32342d3234203d3e203532353439.roa (hash: VHzFKuefZl41rBTSUZm8SCmM5AtVb4U1B6X4xw0zqAA=)
                          10: 3230302e39352e3137372e302f32342d3234203d3e203532353439.roa (hash: 0yWyywE695hu0t9+pzJX0Y8L9foTXTcuIYModQavY3Y=)
                          11: 3137372e38362e33392e302f32342d3234203d3e203532353439.roa (hash: /Z5+QCF0MowCTlkDi9424CoRyG+/CBMBRr5i0zTN+Fk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl
                          rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 23:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:09:93:2d:15:30:ff:a6:51:77:e3:8d:73:3d:6f:eb:41:70:88:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
        Validity
            Not Before: Nov  4 20:11:02 2025 GMT
            Not After : Nov  5 23:30:02 2025 GMT
        Subject: CN=D953A548E679E5841FA039CF7A51D8A2AC20BD95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:56:c9:ca:7e:5c:e7:a7:19:f6:f4:ef:88:
                    30:ef:24:cb:a0:d7:e3:d7:33:0c:42:ca:a3:aa:97:
                    d7:7e:90:59:4d:7c:35:d1:c7:15:f3:d0:81:48:03:
                    55:c8:7a:a4:c3:08:1f:5d:a3:17:9f:da:36:5a:12:
                    fe:b6:60:c6:2d:af:e4:de:11:f2:70:c8:c3:d0:9d:
                    3e:19:38:fb:47:e0:01:91:25:f9:41:4c:d7:67:2e:
                    58:09:2c:27:22:98:72:f9:5e:9c:f6:dd:28:c3:05:
                    07:b4:6b:12:bf:13:a9:fc:51:61:ce:a6:68:4f:22:
                    d3:08:89:3c:27:98:b1:d8:27:13:ac:a5:be:d9:49:
                    d6:b2:0a:af:fb:9e:1c:ef:c8:71:01:7e:a1:bc:1d:
                    8f:79:9e:c6:69:09:ee:dd:3b:60:0a:6d:a5:2f:59:
                    9f:f8:e3:0c:99:2a:f6:49:f6:42:ce:5b:ea:39:93:
                    40:d5:c4:c3:fe:e4:d9:a7:b1:4b:8e:b1:10:97:be:
                    05:3a:a2:c8:58:82:1b:4a:a6:82:c3:1a:3d:63:34:
                    44:30:ea:a7:42:8c:f4:d5:e1:b3:27:b5:4b:0a:62:
                    4b:c9:51:5c:d0:6d:f6:04:8d:a1:5e:46:05:7e:b0:
                    02:14:4d:84:3c:b3:b4:a3:63:f4:26:86:76:3d:ff:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:53:A5:48:E6:79:E5:84:1F:A0:39:CF:7A:51:D8:A2:AC:20:BD:95
            X509v3 Authority Key Identifier:
                keyid:5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:04:98:3e:02:26:8f:31:67:bd:66:0a:13:a1:13:bf:f6:
         ff:00:b6:86:fb:d5:d6:2b:af:d5:0f:64:33:1d:f7:f1:7b:41:
         d6:cb:71:be:e1:d2:64:ef:c2:d6:5c:e6:8d:29:1a:2b:25:06:
         76:81:f2:5c:2a:4e:28:ca:c9:3b:2c:aa:f1:76:1e:a1:3c:74:
         5d:3c:e7:1c:e7:67:f8:ce:fe:2b:a6:b0:8b:bf:3d:f0:0f:70:
         11:bb:7e:14:c8:b1:9e:e8:50:cc:3e:9b:db:3a:1e:63:36:14:
         c4:4b:dd:ab:f2:4c:3d:72:f1:7c:4a:b2:3c:71:a7:e7:46:d1:
         a5:57:89:36:74:9b:c0:0c:fe:35:f9:44:0a:e7:34:7b:ad:de:
         ac:ee:18:3c:8c:90:fc:8b:77:18:fd:3a:57:0e:d1:32:a9:8c:
         4b:9f:5b:3f:61:f0:bc:6a:5d:5d:c9:9a:2e:2a:12:da:05:68:
         96:d2:8e:55:1b:6d:aa:1f:70:3c:c3:05:34:be:17:23:22:da:
         cf:e1:81:e9:4b:3a:9e:33:d1:92:74:bf:9f:4f:f6:71:9b:bb:
         41:e7:ff:3e:21:fc:b4:eb:2e:5f:22:8a:3e:9d:9f:45:da:68:
         9c:eb:dc:7e:52:a9:47:9e:ba:47:40:9c:9c:87:d1:3d:6c:65:
         bc:c6:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:36:49 2025 by rpki-client