Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File:                     2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier:          WmDBJjNHRtSoqjOHcCZmpzXAosS5cN70NFwmXVLXQCs=
Subject key identifier:   BA:BE:1E:FF:F8:74:84:F9:16:91:55:A7:1C:E0:CD:9E:08:3F:F1:90
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       29C3B6D269F881E08168D32C73D2730C296B1D5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number:          039D
Signing time:             Wed 05 Nov 2025 13:26:39 +0000
Manifest this update:     Wed 05 Nov 2025 13:21:39 +0000
Manifest next update:     Thu 06 Nov 2025 13:46:39 +0000
Files and hashes:         1: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: ZEOE1aModZQn//F6rEGH/N341h+IAF+P3KvayKztGlw=)
                          2: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=)
                          3: 3230312e34392e3232352e302f32342d3234203d3e20323634383836.roa (hash: 479anbVOZnSsEI99gJ7YrU3FPGiheVTxdi+9lXBt+14=)
                          4: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (hash: KiQwHqW4L5k313W7Ix2tqfggra0fzCmTud2HSdaR8Rc=)
                          5: 3230312e34392e3233362e302f32322d3234203d3e203532353332.roa (hash: crwNQAzkQgVzyySk2+Vvl5Tz9YU9DHls0pPUE2tU5c8=)
                          6: 323830343a326635633a3a2f33322d3332203d3e20323634383836.roa (hash: U7Fi83OtEplHzns2oD2Hh+s6/kT6Yq/unz43USIFpcY=)
                          7: 3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa (hash: mHPFOGNKvdgc/zI811HdfbTjLQWNbiDqxL/El5Lm3fA=)
                          8: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=)
                          9: 3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa (hash: XwZwnGLQtwgwMmBOul4r3/MIGHfpZbt+/M93PODrJok=)
                          10: 3230312e34392e3232382e302f32322d3234203d3e203532353332.roa (hash: eXlDeqx/uIJYF2z6711Ka9h3ZAq+z/JbyUI6PROlpnk=)
                          11: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: aAcskGlGmP8AQ7qs2cBaT1+bvYjC59f6aR7MspSUM2s=)
                          12: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: 9Yt9Pc7HV/XhiPSzeMMk9N8ewMMIgN1AVSvz9g0bbms=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 13:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c3:b6:d2:69:f8:81:e0:81:68:d3:2c:73:d2:73:0c:29:6b:1d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Nov  5 13:21:39 2025 GMT
            Not After : Nov  6 13:46:39 2025 GMT
        Subject: CN=BABE1EFFF87484F9169155A71CE0CD9E083FF190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:66:15:58:f3:38:6c:1a:ba:28:92:a3:e0:
                    c9:12:10:28:7c:2b:3c:b3:9b:d4:a9:3d:d1:c8:03:
                    b2:7c:66:7c:09:0b:b9:ab:0c:d6:d0:45:32:03:5b:
                    b3:0f:fe:7e:ac:d5:f0:a1:83:51:65:53:fe:b1:9f:
                    51:68:98:87:06:82:c2:14:c8:64:fc:66:0b:1b:b3:
                    75:ba:f4:c0:ea:ef:92:ad:45:dd:bf:92:46:c8:24:
                    30:f1:86:ef:4c:43:bb:81:dd:66:52:8b:b8:32:f5:
                    a2:63:00:ed:27:0b:e5:b3:20:d7:d7:44:66:38:8e:
                    53:c6:bb:c5:35:4b:70:65:10:a8:fa:0e:d3:18:29:
                    15:5b:33:94:91:f0:99:b2:e0:f5:b0:a6:d4:4e:83:
                    ac:90:89:76:ad:de:53:4e:c6:af:38:60:a2:38:a6:
                    b6:b3:2b:73:f4:2a:25:32:6b:d6:a0:2c:25:5e:0b:
                    a5:d2:2d:ef:86:b0:0a:89:6a:e5:42:a8:c9:df:9a:
                    3a:e5:81:57:56:61:24:28:0a:41:52:bd:04:92:09:
                    0d:aa:f9:0e:75:f1:ab:b2:07:fd:b4:85:4c:4f:9e:
                    00:c0:6a:70:f0:d5:ed:4a:30:7a:46:14:74:b0:44:
                    25:bb:25:c6:0e:64:8d:96:7d:dc:da:56:be:b2:7e:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BE:1E:FF:F8:74:84:F9:16:91:55:A7:1C:E0:CD:9E:08:3F:F1:90
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:30:2f:b6:59:44:23:20:d0:41:8c:13:e0:33:f4:de:52:88:
         c3:9c:6d:86:90:c6:f5:17:84:6d:2a:7e:dd:0e:5b:67:d8:83:
         4c:33:72:5e:12:54:56:89:72:a7:55:7a:e0:96:81:54:f7:25:
         30:80:27:c5:78:28:59:e1:c4:e5:a8:86:49:f9:de:e4:bf:19:
         45:6c:ab:8c:85:06:50:63:e7:86:12:1b:a2:c5:3d:73:21:a9:
         dc:d8:23:35:2b:6e:42:63:fa:f5:50:02:9e:5d:36:6d:63:76:
         f4:b8:98:84:8f:44:1e:0c:0a:29:1a:50:f0:1f:ce:63:69:1c:
         0c:41:0a:30:b9:66:cf:26:07:1a:60:ea:a7:13:d6:e1:46:d8:
         4e:58:fe:45:73:3c:ff:e6:9b:6a:f7:9b:b7:87:67:1c:31:8a:
         98:91:db:3c:08:46:23:bc:99:c8:bd:88:3d:fa:b1:33:76:20:
         14:39:0f:c7:c4:6b:d7:dd:8b:b3:42:e7:cc:33:8a:9b:0b:09:
         8d:69:69:a7:b9:40:27:f2:c0:c2:b1:21:58:7d:42:93:36:ad:
         54:80:08:e3:df:01:95:c4:1b:76:50:0c:12:58:67:19:e4:a2:
         5f:b5:d6:e9:84:a1:5f:46:b6:a8:a6:6c:15:bd:41:40:96:66:
         37:bc:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:02:50 2025 by rpki-client