Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
File:                     4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json)
Hash identifier:          DJ+dpJcTRGYNQkj/G19/Mar8xza/2XuCHN2lkZnSnBI=
Subject key identifier:   23:0D:38:D8:81:E6:E6:AF:EB:E6:D2:5E:B6:38:09:A2:E5:83:FB:0B
Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4
Certificate issuer:       /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
Certificate serial:       77349987CF1BB176167FDD0EA2474B5FE077CD74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
Manifest number:          C5
Signing time:             Tue 04 Nov 2025 14:27:33 +0000
Manifest this update:     Tue 04 Nov 2025 14:22:33 +0000
Manifest next update:     Wed 05 Nov 2025 16:42:33 +0000
Files and hashes:         1: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: fPsx4d62UPQm+f5HlAHqo78FphvrRmReo6la1d77pLU=)
                          2: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: rsVtSZ2YOM57lTpbHU9J0sdMQaleCl0hvBgZWt51gR0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl
                          rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:34:99:87:cf:1b:b1:76:16:7f:dd:0e:a2:47:4b:5f:e0:77:cd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
        Validity
            Not Before: Nov  4 14:22:33 2025 GMT
            Not After : Nov  5 16:42:33 2025 GMT
        Subject: CN=230D38D881E6E6AFEBE6D25EB63809A2E583FB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:17:fe:a3:61:4c:24:dd:99:f0:09:99:69:
                    d3:7c:b6:fe:ff:f0:41:07:0f:d3:ec:6a:c3:6a:78:
                    56:c8:58:7a:50:17:44:40:fc:9d:02:ec:7c:ed:d5:
                    e6:81:9a:26:cf:5d:59:de:0c:6c:35:02:45:16:44:
                    63:97:1e:7b:86:40:34:03:3f:4b:8d:55:17:fc:f5:
                    77:b2:70:d5:56:d0:31:23:12:90:2e:ee:73:12:37:
                    45:f5:4d:6b:d0:80:e0:05:ff:c3:19:d9:51:c4:e8:
                    41:17:bb:ac:d6:55:de:9a:01:e8:4f:8c:41:16:87:
                    6f:64:1b:38:91:11:f5:cc:f7:51:68:9d:c2:1c:f1:
                    30:f1:7a:2b:de:85:85:3f:9c:3c:7c:3c:5a:73:4c:
                    66:dd:ca:65:14:92:39:89:fe:d0:e6:80:8b:b0:e5:
                    8e:ca:d4:81:7b:5f:77:3f:3a:84:b7:19:eb:87:22:
                    45:7e:f6:6f:2a:4b:fb:fb:3b:0d:ab:f7:dd:cd:d3:
                    9f:87:81:99:e4:af:ed:42:c9:13:ab:36:cb:6d:76:
                    1a:0b:3b:a0:ff:d3:97:f7:31:b7:11:1f:23:d1:4a:
                    ea:93:1c:fd:77:b2:8a:41:5b:aa:b0:0d:43:a6:b8:
                    1d:cc:65:0d:69:87:e1:e6:19:9f:72:fd:60:9b:ec:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0D:38:D8:81:E6:E6:AF:EB:E6:D2:5E:B6:38:09:A2:E5:83:FB:0B
            X509v3 Authority Key Identifier:
                keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:32:6f:64:c3:03:88:2b:78:55:8d:23:e1:75:ea:ad:e4:53:
         55:ad:aa:05:02:ab:5a:f2:1a:57:78:d3:f6:13:82:7b:78:96:
         2f:41:cc:49:8d:e4:24:c9:9e:6b:d7:cd:48:ea:9f:ce:d8:83:
         7d:7f:a8:d4:e6:47:e9:aa:9a:5a:bd:3a:3c:93:bb:e4:be:98:
         9d:54:c2:12:02:2f:28:2f:48:d8:57:2f:b3:bb:89:73:cc:c2:
         c1:e2:4b:51:d0:4b:9a:20:ff:5e:c2:78:88:af:30:b2:93:a2:
         ad:33:58:f1:ce:13:80:46:7a:5e:87:7d:7e:06:f4:f9:5c:7e:
         a7:61:c1:0e:82:8b:3a:f1:1f:0a:86:13:bc:a7:51:6c:ee:f9:
         1a:67:be:94:08:c8:7a:d6:92:59:d0:ea:32:6c:54:b3:43:09:
         ba:cd:82:6c:96:89:b1:a7:37:4d:51:55:0e:68:5b:39:d8:bb:
         79:61:40:82:7d:f1:2b:6c:90:49:b5:7a:05:7b:bf:f5:14:4f:
         e8:3a:e7:c9:9e:c2:8e:43:5c:63:c5:59:a4:87:f2:ca:d0:20:
         1b:b2:e0:8e:b6:c6:b7:ef:a0:d3:a0:73:d6:0f:d7:13:b0:bb:
         6b:68:16:1b:d6:bc:c0:b3:ad:de:f9:eb:01:d6:40:4b:09:d3:
         77:08:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:42:33 2025 by rpki-client