Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
File:                     B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft (raw, json)
Hash identifier:          +9tFFo5WFzArWZLy7IaUbBvJpQrh8k8fuxDK52kz5Hk=
Subject key identifier:   46:83:93:15:9D:F9:79:5D:A8:FC:19:EE:19:0D:EF:9C:CD:57:12:31
Authority key identifier: B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF
Certificate issuer:       /CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
Certificate serial:       78349A1373A45827A0A30BF4BC508B9D10C63A51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
Manifest number:          0304
Signing time:             Mon 03 Nov 2025 14:26:14 +0000
Manifest this update:     Mon 03 Nov 2025 14:21:14 +0000
Manifest next update:     Tue 04 Nov 2025 16:09:14 +0000
Files and hashes:         1: 34352e3233382e34302e302f32322d3234203d3e20323638333131.roa (hash: Mg0sWQAlHEW7xnk3ZZaBDMEonBLQLr7YNGgZkvgx5MA=)
                          2: B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl (hash: 7ayHZC6l/OvfYnL4tshQ1TQYWCSm+G3+YyN+ynuGWTY=)
                          3: 323830343a346633343a3a2f33322d3334203d3e20323638333131.roa (hash: pVe96xhrDJsbS3v/hFVf0gfQ6Akt4/UB+6M4ltF/uHM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl
                          rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:9a:13:73:a4:58:27:a0:a3:0b:f4:bc:50:8b:9d:10:c6:3a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
        Validity
            Not Before: Nov  3 14:21:14 2025 GMT
            Not After : Nov  4 16:09:14 2025 GMT
        Subject: CN=468393159DF9795DA8FC19EE190DEF9CCD571231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:3d:8a:87:5b:29:03:cc:5c:96:af:7c:18:
                    cb:5a:93:eb:63:57:cb:95:f0:d2:0d:c5:4d:6a:5e:
                    49:ae:13:23:4e:d7:5e:69:25:b0:07:88:8c:71:b0:
                    ee:eb:bb:4e:25:55:fe:5e:7f:f6:08:2a:27:47:46:
                    44:a8:2d:fd:48:df:78:e6:d3:6f:1b:1a:6e:13:de:
                    17:d1:86:7e:f2:d8:8c:b4:bb:b7:00:69:d1:c8:6b:
                    b0:1d:d4:29:25:45:0b:46:aa:07:00:b7:ba:94:b8:
                    de:bf:08:40:01:11:7a:a4:3c:e7:48:74:8c:f6:86:
                    15:87:01:1e:ab:c8:84:18:14:72:d9:d5:2c:5c:b5:
                    ea:0f:fa:75:79:ff:5d:53:96:3a:25:f1:90:9f:49:
                    db:47:88:d6:14:29:e9:d7:5e:7b:16:e4:26:41:51:
                    36:f5:2e:69:de:8a:1d:ea:91:fe:aa:13:ab:f7:db:
                    90:93:61:c5:a7:c6:97:96:76:ea:f9:0c:0d:e4:86:
                    db:7a:2f:6c:ce:5e:2e:54:c7:ca:47:60:2c:1f:fa:
                    a4:4c:1f:fe:99:76:98:d1:b9:d9:28:12:b2:73:49:
                    5a:0f:5f:72:e9:7d:37:9a:f3:93:1c:31:1c:b8:f7:
                    71:88:12:43:0e:8c:d6:0a:70:71:0d:01:34:5a:c8:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:83:93:15:9D:F9:79:5D:A8:FC:19:EE:19:0D:EF:9C:CD:57:12:31
            X509v3 Authority Key Identifier:
                keyid:B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:12:4f:56:a5:92:9d:ad:ec:d7:df:0e:58:7c:cf:0c:fd:a0:
         8f:2c:37:c3:b6:c2:76:95:e6:4d:ce:1c:af:a0:62:d3:c9:06:
         e7:ee:1d:80:b6:bd:87:88:d1:93:4c:df:57:d7:d1:56:61:e0:
         0d:03:17:65:59:4b:cd:21:b6:3e:f7:4b:c6:aa:1e:a7:94:72:
         ae:70:61:e8:87:26:90:05:2d:d7:2c:cc:8e:ee:40:3e:d7:55:
         f3:85:12:e7:1a:d1:32:d0:8f:f1:aa:4a:c7:3d:41:41:44:15:
         28:4a:88:11:48:25:71:3a:2c:d7:aa:f6:f7:97:44:eb:20:66:
         7f:35:95:74:75:ff:a3:49:e3:d3:5c:cc:7e:0f:5e:38:f5:19:
         bf:d2:33:25:62:ae:0f:50:4a:77:5c:63:bf:b2:19:8d:dd:e6:
         eb:c0:2e:62:16:7c:72:a7:e5:1d:79:c6:1b:4a:d2:a8:33:a3:
         5e:94:c9:d0:aa:05:f9:38:fa:b9:8a:e2:46:21:66:e4:f1:c1:
         25:81:6a:76:47:e6:8a:75:b4:b0:c6:85:1d:06:fe:46:a1:6e:
         7b:17:93:c7:4a:73:37:5c:8b:43:b5:d2:04:0c:14:07:a8:dc:
         09:54:d7:59:94:62:e1:e0:ac:dd:72:85:fb:c9:9f:0e:3a:98:
         e0:c4:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:37:44 2025 by rpki-client