Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
File:                     D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft (raw, json)
Hash identifier:          wfXlQoBvk5ER4pZM/4l3RyRDg2SgXnbuMHp9thfYqt0=
Subject key identifier:   0E:A9:15:CF:A1:F4:D7:FB:10:BD:6C:87:D7:FA:E0:8E:C8:93:5E:32
Authority key identifier: D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF
Certificate issuer:       /CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
Certificate serial:       0657926AF7D19AB9FD4F907F32B383CC05B4CE65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
Manifest number:          37
Signing time:             Wed 05 Nov 2025 07:04:08 +0000
Manifest this update:     Wed 05 Nov 2025 06:59:08 +0000
Manifest next update:     Thu 06 Nov 2025 08:45:08 +0000
Files and hashes:         1: 3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (hash: Uowem+LzYl1JyCZCsHEfTMQHEAC3Ebsrx0Hmo5HI4bQ=)
                          2: 323830343a373930343a3a2f33322d313238203d3e20323731323830.roa (hash: lYvNUFCnmy0F9mKUaBfM6n6xRFogG6MEYh7M55VBPSM=)
                          3: D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl (hash: DTyz5T3xSt8dUnb/37eXFkA+q3Svtt+QRrB8RNY8y7U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl
                          rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 08:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:57:92:6a:f7:d1:9a:b9:fd:4f:90:7f:32:b3:83:cc:05:b4:ce:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
        Validity
            Not Before: Nov  5 06:59:08 2025 GMT
            Not After : Nov  6 08:45:08 2025 GMT
        Subject: CN=0EA915CFA1F4D7FB10BD6C87D7FAE08EC8935E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:cf:db:9b:51:ea:d0:fd:ca:a4:50:10:be:
                    f0:3f:8a:36:2b:12:60:2d:b7:c5:ec:75:4e:d4:a7:
                    76:0a:f9:51:2d:24:26:6f:e3:68:25:54:d3:eb:f3:
                    f7:95:8a:d3:59:48:5b:d4:8f:7d:2e:84:cf:d9:c2:
                    74:f5:35:2b:84:b4:01:82:4f:a2:79:7a:eb:7d:61:
                    18:4c:74:99:ee:e2:40:62:31:44:f0:9d:2e:35:c1:
                    7a:5b:f4:b6:5b:78:56:bf:f0:13:44:ac:f2:55:70:
                    de:29:76:4a:95:d2:59:65:c4:e3:3b:67:e7:71:34:
                    af:c2:33:5a:20:80:ce:0c:7c:e6:98:db:a2:58:d4:
                    93:c4:f4:70:4e:a9:1f:dd:d0:67:1b:c0:8f:24:70:
                    ef:ef:16:03:9c:5c:b6:cb:e3:bc:6f:e0:e6:7b:3e:
                    cf:d3:97:a1:c5:03:09:76:da:15:cc:46:10:7f:f7:
                    ab:3f:0b:3a:c4:e8:87:3c:83:27:8a:db:9d:4a:32:
                    a8:ad:b8:71:4b:a5:d4:40:15:a9:de:fb:2b:0b:63:
                    17:e5:f3:29:3c:15:2f:be:ea:67:cb:8d:23:50:21:
                    f3:16:0a:d4:84:13:23:a2:3f:95:29:4e:84:99:58:
                    60:a1:e1:8c:28:e1:af:9b:ec:e2:be:a8:94:8b:c2:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:15:CF:A1:F4:D7:FB:10:BD:6C:87:D7:FA:E0:8E:C8:93:5E:32
            X509v3 Authority Key Identifier:
                keyid:D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:38:69:83:13:a9:20:b9:de:7c:17:a0:12:d6:3c:d0:fb:
         55:7a:bd:e2:b6:3f:04:37:ad:b0:91:b2:38:e6:63:cf:96:54:
         7b:bc:b6:32:27:bf:9d:bc:88:70:e2:9d:3f:ff:a8:32:2a:63:
         d1:6b:ee:61:28:56:c5:9b:26:69:6e:e3:44:bb:30:25:12:35:
         23:73:b8:15:3e:eb:f0:85:22:01:78:d9:c0:d9:a3:6b:08:18:
         b2:a8:b1:30:10:16:15:ea:6b:55:50:01:85:61:8e:cb:33:3d:
         de:b2:e5:fd:62:02:8c:0b:82:e9:90:7e:8b:0d:bb:85:b9:9b:
         71:e5:5e:33:d1:fc:94:23:91:a5:bd:b2:8f:ee:7d:1b:dc:13:
         50:1a:8b:c6:df:23:70:c1:bc:d7:50:76:85:46:ab:93:1f:fc:
         bb:92:ba:c6:49:89:5e:94:bf:1d:95:22:0c:fe:c0:dc:8d:ea:
         26:9d:49:0f:ee:f7:1e:46:c0:a8:c1:8e:0f:ba:1e:98:e0:08:
         3e:1f:2c:d5:ab:7f:42:47:7e:51:20:51:25:86:4d:e0:42:3b:
         91:24:e7:ed:b2:96:75:c9:96:84:a2:12:91:41:0e:fd:bc:c7:
         d5:aa:0a:90:06:35:eb:c8:e0:3b:7e:56:2d:31:b6:f1:cd:24:
         eb:84:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:35:44 2025 by rpki-client