Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft
File:                     25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json)
Hash identifier:          E6OAQ4d1twGw5ropLXxhWbvcCDeWsiaxsByZQfDVoWg=
Subject key identifier:   03:5D:CC:2F:57:26:36:B1:2E:7C:F0:E7:8A:9D:0E:41:75:B7:90:A1
Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80
Certificate issuer:       /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080
Certificate serial:       5815095B9CDDEF5559FE4F6FFE4F7C0FAD0FDAEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft
Manifest number:          C5
Signing time:             Mon 02 Mar 2026 04:53:28 +0000
Manifest this update:     Mon 02 Mar 2026 04:48:28 +0000
Manifest next update:     Tue 03 Mar 2026 07:35:28 +0000
Files and hashes:         1: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=)
                          2: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: 3jEBhwQRhBUjG63oCKp1ZjQkrcxdEA0Z+g/TAZpQr6c=)
                          3: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl
                          rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:09:5b:9c:dd:ef:55:59:fe:4f:6f:fe:4f:7c:0f:ad:0f:da:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080
        Validity
            Not Before: Mar  2 04:48:28 2026 GMT
            Not After : Mar  3 07:35:28 2026 GMT
        Subject: CN=035DCC2F572636B12E7CF0E78A9D0E4175B790A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:ab:6b:ad:88:dc:02:ef:44:74:ee:39:f6:
                    f2:90:15:9b:b9:27:ca:4e:09:6f:1e:29:22:d5:49:
                    cc:ac:74:8b:ff:7b:d6:57:3b:df:3b:64:ed:fb:32:
                    72:6e:39:6a:af:65:ef:f8:f7:9f:0c:30:7f:9a:7c:
                    21:46:e0:8b:db:04:0c:96:c6:8f:65:0a:05:aa:57:
                    b0:83:e7:c9:6a:6e:c9:16:84:b7:e7:f8:66:b9:9b:
                    eb:25:0c:7c:07:fe:e5:06:9e:6a:d2:a5:31:f0:89:
                    7f:3f:67:fb:3d:6e:82:22:f2:c7:7e:e5:ff:75:ea:
                    eb:42:af:49:d5:31:02:ef:17:c0:f7:2c:be:3a:77:
                    c8:1b:08:fd:11:f6:24:5b:ea:ac:ba:0a:97:53:07:
                    36:62:c5:ea:d6:bf:33:25:0f:84:fb:b3:f4:c4:bf:
                    16:dc:ae:6e:2e:2a:b3:b1:61:00:ed:56:96:b1:ab:
                    4a:0e:04:d1:ef:4e:48:00:da:45:f8:06:a2:f8:02:
                    20:aa:52:3b:5c:9e:c5:67:41:9c:6e:37:07:97:75:
                    2f:14:b1:e9:a9:6b:77:74:c1:35:28:b9:04:83:da:
                    b2:19:2e:bd:eb:1d:a0:4c:94:68:52:5e:98:d9:de:
                    87:7b:71:a3:af:b2:2a:84:7a:32:13:15:54:01:bc:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:CC:2F:57:26:36:B1:2E:7C:F0:E7:8A:9D:0E:41:75:B7:90:A1
            X509v3 Authority Key Identifier:
                keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c7:da:5e:be:53:8f:0b:c6:82:06:1b:1b:0d:46:0d:ff:0c:
         c0:f3:83:fb:c6:4f:b8:09:b5:0a:5c:f3:d0:c6:97:61:8b:d4:
         74:b6:d1:00:bc:c6:fd:65:d0:54:d0:82:d6:e3:14:89:3e:8b:
         72:82:88:44:7c:09:10:0d:59:ae:48:36:29:2b:88:b7:b6:8b:
         aa:c5:82:75:2f:28:48:72:e7:24:7b:5e:18:90:46:f2:5d:9f:
         e7:47:73:1e:3b:37:8f:03:2e:1e:f5:32:15:90:1c:73:b6:7e:
         52:53:6a:00:76:0d:48:eb:a6:43:ab:9c:69:cf:20:8a:02:89:
         4f:f4:58:e6:54:1d:4a:40:97:f5:47:f8:b0:75:e7:11:04:39:
         08:b8:34:a6:bf:8b:f7:25:e7:7e:12:d1:78:9b:80:35:12:94:
         5a:f7:54:92:9d:34:bf:95:54:94:e6:28:c2:d7:95:fc:ec:2b:
         22:67:cb:3b:03:4e:4a:ec:c7:53:cd:bb:30:ff:61:84:96:de:
         89:06:91:48:f8:23:51:de:d4:05:2f:d0:9a:34:af:fc:e6:1e:
         09:e6:e7:eb:34:0d:9a:cb:d4:db:e2:3a:7c:b2:30:d4:ff:41:
         17:0e:01:cd:0a:c2:b2:4f:7b:58:79:fb:09:3c:a5:0f:0c:0a:
         cd:f3:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:47:09 2026 by rpki-client