Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
File:                     B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json)
Hash identifier:          oIpyS0nMhhTYnJrWis/2NGGqjpgi0tr05Al9O5GZ9rg=
Subject key identifier:   A6:C3:E4:30:6D:EB:49:D8:A8:78:50:D7:9F:BA:2C:56:D2:02:D6:0E
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       2944E183BBEEC4F3585A1DCA46414F6DA96C768D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
Manifest number:          0305
Signing time:             Tue 04 Nov 2025 11:20:02 +0000
Manifest this update:     Tue 04 Nov 2025 11:15:02 +0000
Manifest next update:     Wed 05 Nov 2025 11:29:02 +0000
Files and hashes:         1: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: DMUnuExQBRpGmDUBXDlqAwPIk25BrBmWtwxXz14GAww=)
                          2: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: 3cJ6i4eVfePj/znbhXPN+EEU/pcnQn4cPiUP8LWIC6M=)
                          3: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: nM938q4SN87BNGIJ3b3ggcn3PsaDtJUz1la3aiK7viU=)
                          4: 323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (hash: 5JMhZ4cEqX3OysQlgCAgv6BovY6KpEJinhAlGzZkJNc=)
                          5: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: oxHxONE9x52U+e5QcW3K1P/Di5t/pz6PYQ4GKPQ5jt0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 11:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:44:e1:83:bb:ee:c4:f3:58:5a:1d:ca:46:41:4f:6d:a9:6c:76:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Nov  4 11:15:02 2025 GMT
            Not After : Nov  5 11:29:02 2025 GMT
        Subject: CN=A6C3E4306DEB49D8A87850D79FBA2C56D202D60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:79:8c:fb:76:8e:57:a8:9b:2a:5c:ed:8e:4d:
                    ff:60:f0:fc:42:48:0c:f6:31:04:9a:13:fc:0e:2b:
                    07:a4:40:6c:f7:58:35:f7:a2:d4:90:be:a9:86:41:
                    3c:e9:49:a4:d5:c2:a7:d0:e9:75:ae:c7:65:69:4d:
                    ec:db:64:de:65:c9:6a:28:b7:9d:30:fd:e3:83:e1:
                    73:41:52:ac:bc:3f:95:79:11:ba:a8:9c:b5:26:28:
                    6a:ee:cf:df:5f:98:7d:39:42:00:7c:60:96:92:40:
                    73:c5:90:16:ac:8f:fd:b7:51:d2:87:a3:d7:ee:26:
                    d7:44:5e:a2:a4:f1:7c:6e:16:90:b8:8c:fb:33:f5:
                    d1:40:37:30:9b:f7:6a:62:c3:80:44:b8:05:69:15:
                    0c:4e:97:04:2a:1b:d2:ee:68:e7:82:2b:27:6a:e3:
                    e8:99:10:4f:1d:a5:57:3a:ae:d4:8b:d8:2c:28:76:
                    db:65:77:f7:a0:61:11:fd:9b:70:3d:cd:87:c8:ee:
                    6b:41:3a:02:a1:2a:8b:a6:f5:c4:6a:50:ba:6b:c3:
                    bf:cc:5f:89:63:56:6d:c3:2e:97:7e:c9:0a:e8:d4:
                    9a:c5:78:ba:52:68:f9:e5:8c:20:ef:a3:f7:62:ea:
                    a5:55:79:ed:cd:35:6f:ef:9c:72:76:55:91:e6:df:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C3:E4:30:6D:EB:49:D8:A8:78:50:D7:9F:BA:2C:56:D2:02:D6:0E
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:c5:21:ba:81:36:9e:90:b4:97:04:07:49:8e:01:67:5f:
         f4:e1:4e:ea:b8:3d:1e:c0:ce:2d:68:cf:bd:32:38:d8:4c:dc:
         70:94:bd:4a:f8:3f:a0:a6:1e:f4:5b:c0:19:de:d7:78:03:60:
         d3:f7:77:d8:e9:5e:ae:a4:90:36:2e:b3:ea:7a:c6:26:df:55:
         ea:85:ab:0f:0d:59:31:d8:38:c5:e7:3e:f8:e5:53:2e:4b:0d:
         45:9b:0b:f2:4b:01:68:72:9a:72:5e:60:98:a2:df:ea:4f:f3:
         30:c1:7a:be:c9:57:22:97:a5:14:96:d4:ae:f4:70:a0:14:6f:
         35:12:5a:bc:1c:36:01:fe:db:60:d3:80:a7:22:ef:6c:bb:d1:
         cd:f7:b4:0c:b5:45:f7:ec:0a:50:10:74:32:d3:ea:aa:40:09:
         3e:51:30:a9:b2:58:05:10:3e:bf:9d:c8:86:cc:59:45:8c:11:
         53:11:6a:db:ac:71:07:2a:00:39:a7:29:69:29:35:1b:49:af:
         4b:b7:d2:28:73:47:a8:f5:e7:5e:34:87:7c:ea:38:2f:54:c5:
         9d:31:24:17:a6:5c:f1:98:82:65:de:a1:86:3e:38:f3:70:3e:
         75:5a:ae:55:ca:3e:97:47:6e:e8:c9:e1:94:4b:ea:78:db:d7:
         87:ae:71:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKUThg7vuxPNYWh3KRkFPbalsdo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGQzVGMDhCOEM0ODY0MDEzREMzQTRDQTQ3QzIyMDBC
M0MyQjgxOTAeFw0yNTExMDQxMTE1MDJaFw0yNTExMDUxMTI5MDJaMDMxMTAvBgNV
BAMTKEE2QzNFNDMwNkRFQjQ5RDhBODc4NTBENzlGQkEyQzU2RDIwMkQ2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDweYz7do5XqJsqXO2OTf9g8PxC
SAz2MQSaE/wOKwekQGz3WDX3otSQvqmGQTzpSaTVwqfQ6XWux2VpTezbZN5lyWoo
t50w/eOD4XNBUqy8P5V5EbqonLUmKGruz99fmH05QgB8YJaSQHPFkBasj/23UdKH
o9fuJtdEXqKk8XxuFpC4jPsz9dFANzCb92piw4BEuAVpFQxOlwQqG9LuaOeCKydq
4+iZEE8dpVc6rtSL2Cwodttld/egYRH9m3A9zYfI7mtBOgKhKoum9cRqULprw7/M
X4ljVm3DLpd+yQro1JrFeLpSaPnljCDvo/di6qVVee3NNW/vnHJ2VZHm34ldAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpsPkMG3rSdioeFDXn7osVtIC1g4wHwYDVR0j
BBgwFoAUtfxfCLjEhkAT3DpMpHwiALPCuBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hM
ZEQvMS9CNUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RkM1RjA4QjhDNDg2NDAx
M0RDM0E0Q0E0N0MyMjAwQjNDMkI4MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hMZEQvMS9C
NUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALQ7FIbqBNp6QtJcEB0mOAWdf9OFO6rg9HsDOLWjPvTI42EzccJS9Svg/oKYe
9FvAGd7XeANg0/d32OlerqSQNi6z6nrGJt9V6oWrDw1ZMdg4xec++OVTLksNRZsL
8ksBaHKacl5gmKLf6k/zMMF6vslXIpelFJbUrvRwoBRvNRJavBw2Af7bYNOApyLv
bLvRzfe0DLVF9+wKUBB0MtPqqkAJPlEwqbJYBRA+v53IhsxZRYwRUxFq26xxByoA
OacpaSk1G0mvS7fSKHNHqPXnXjSHfOo4L1TFnTEkF6Zc8ZiCZd6hhj4483A+dVqu
Vco+l0du6MnhlEvqeNvXh65xXQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:04:50 2025 by rpki-client