Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
File:                     F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft (raw, json)
Hash identifier:          o2BKFB8xx2taK3b8Y3ppviN6KgDXhexK1MPnmoAXZZM=
Subject key identifier:   E2:31:21:7F:BE:48:97:5A:80:AD:F7:14:B5:E0:48:65:29:89:23:66
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       329381E6797FFF9CF18175E22F27F329D073012F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
Manifest number:          02D4
Signing time:             Tue 04 Nov 2025 17:52:22 +0000
Manifest this update:     Tue 04 Nov 2025 17:47:22 +0000
Manifest next update:     Wed 05 Nov 2025 21:22:22 +0000
Files and hashes:         1: 3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (hash: TQIWvgPybckuRDgNawrWl52foQOzfxhU4LVG+2RgegQ=)
                          2: F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl (hash: /IO75FJ7tS2ykaFyrEtmLbFrLZK/DcxnimA5rng56Hw=)
                          3: 3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa (hash: Go7TcquwR4G1UTCt6xeUgqLYsgVcMbp3HrsiJ/xhTk4=)
                          4: 323830343a326263303a3a2f33322d3332203d3e20323635313733.roa (hash: qlnQpU73FbSXznUJHCT77htNnJtXlni/QbqOTtQBAV4=)
                          5: 3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa (hash: mWib45VxzqTtIDFo0pUsBgtHjql0ZMDSZQrkSOQEjyk=)
                          6: 323830343a326263303a3a2f33352d3335203d3e20323635313733.roa (hash: 81quRLXzAQrAUJA5767+FF09C1sCrDcipfqqA05ufxE=)
                          7: 3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa (hash: 0t3O515ZscUD7AYUpjPRRl0QmL8XDr+TJdwKclAgX9g=)
                          8: 3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa (hash: afaAWesiSlnf9FW7f8Tv0SLaJtA7zURFxVjGP8k60Xg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:93:81:e6:79:7f:ff:9c:f1:81:75:e2:2f:27:f3:29:d0:73:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: Nov  4 17:47:22 2025 GMT
            Not After : Nov  5 21:22:22 2025 GMT
        Subject: CN=E231217FBE48975A80ADF714B5E0486529892366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:56:48:da:e8:14:fe:50:74:4e:c2:8b:9a:
                    6e:e1:0e:6c:b3:92:f1:4a:c0:d3:80:02:0d:ea:a3:
                    c6:c6:b3:c1:d4:95:cc:10:2c:58:2c:37:f4:03:bb:
                    10:6d:82:7a:56:a5:57:e4:18:eb:db:92:b9:f5:d5:
                    11:d5:f0:c7:fd:05:db:8f:bc:3c:26:bd:13:8f:35:
                    dd:8f:55:49:64:80:cc:71:9d:5c:28:ee:a8:cd:86:
                    41:09:0e:20:6b:50:d4:80:8a:5a:67:9d:50:80:69:
                    0e:e0:42:1f:42:dc:80:7a:12:93:ff:ae:ff:be:64:
                    4e:51:2f:75:25:32:4f:47:6b:1e:51:5f:e0:73:bb:
                    50:73:fe:24:27:fb:aa:c3:6a:02:20:0a:37:34:2d:
                    f7:60:81:61:fa:ae:e5:ea:b4:7c:b8:3a:15:3d:70:
                    bf:c3:4a:25:1d:6a:89:01:0b:42:47:fc:8f:4d:a7:
                    3e:8a:2e:f4:23:7a:f4:e6:18:a1:6f:f5:02:04:f0:
                    be:26:76:ed:0f:d4:19:57:55:a1:90:ca:40:5c:f2:
                    93:cc:7e:73:d9:ca:79:fd:5d:1c:e0:e6:4c:c8:6f:
                    d6:eb:bc:27:e3:da:b5:8f:fb:2b:b2:cb:d0:e9:f9:
                    d3:97:41:e3:56:2c:72:77:af:a3:81:b0:1e:67:f0:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:31:21:7F:BE:48:97:5A:80:AD:F7:14:B5:E0:48:65:29:89:23:66
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:08:5a:1b:20:66:eb:5a:29:e8:18:a5:0f:07:ab:b0:a2:
         75:89:f4:48:d4:58:e0:0f:d7:76:af:5f:0f:de:bc:d7:76:69:
         c1:92:e6:4a:88:b2:43:20:10:35:64:f0:a8:4f:81:88:ad:e2:
         1f:10:96:f3:0b:2a:d3:b4:4f:40:52:0d:51:9c:29:e4:b7:17:
         54:1f:f6:38:a0:49:5b:fb:78:d1:1e:17:81:c4:34:46:04:b4:
         45:f2:ba:d7:22:b4:a4:44:37:7f:e8:7c:8e:67:35:08:f8:cd:
         46:e3:f2:cf:cc:69:73:ce:4a:83:e6:e3:b3:43:25:e5:db:0d:
         99:32:ed:ef:3e:44:7b:43:37:cd:e4:09:d5:30:ca:9c:16:cc:
         be:01:66:1e:2b:45:75:f2:48:75:da:75:67:ee:a6:a3:fd:45:
         19:88:28:ac:9b:01:f3:fa:40:68:43:c4:b0:71:93:52:a9:86:
         b7:2e:92:34:68:db:30:fa:f8:b1:99:05:5d:9b:e9:2a:c0:ec:
         3f:79:a8:1b:c4:1d:24:a1:f1:c8:58:65:98:66:f7:f6:14:bd:
         58:6a:99:34:67:ad:9a:cf:67:04:63:5c:2d:83:5b:78:1e:83:
         fb:1e:04:d1:21:bd:f8:3e:e5:a5:a5:e5:aa:19:a4:a6:f4:e2:
         dd:3a:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:01 2025 by rpki-client