Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
File:                     2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft (raw, json)
Hash identifier:          eAH7B6JTQHhIHlILGJhT/dcFo74AKl95DUqramdQ0/0=
Subject key identifier:   AA:6F:72:A6:C1:EC:A1:F8:DE:E8:3E:9E:B7:F8:DC:1D:84:D0:46:5A
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       749DAA27771C5A006AF840606EEA79D49E59AF88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
Manifest number:          0199
Signing time:             Sun 02 Nov 2025 20:08:27 +0000
Manifest this update:     Sun 02 Nov 2025 20:03:27 +0000
Manifest next update:     Mon 03 Nov 2025 20:29:27 +0000
Files and hashes:         1: 3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa (hash: jkoEPVj5CwO+UHZUwS1R8VzH1Md5GDd+v74YV5Y+1eE=)
                          2: 323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa (hash: Y0tFHHqmOfumtLoGnSC4p2sgvFE3tgpxEY3YgdRQX4M=)
                          3: 3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa (hash: FP49kIC2o9ve5FeQPxjBiciH/Hm67a+98Tf6eJ44ZIQ=)
                          4: 3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (hash: AJ/KXBH0F3Lo+FaEuMWX0v5Ko4hHoAW3z9BgaWSvLvw=)
                          5: 323830343a333933633a3a2f33322d3332203d3e20323636303230.roa (hash: xHWAeA0Cgl76WslKoPxKYeAl4nPfwsN0r2FRwxAm3Hc=)
                          6: 3136382e3232382e3138392e302f32342d3234203d3e20323636303230.roa (hash: WgHjKKnRcPOCOcHBhCCtR4dGRxiBafdGRse0ADt7cGA=)
                          7: 3137302e3234352e3233382e302f32342d3234203d3e20323636303230.roa (hash: wR3va8jKsVNGWlsg37FAbmpwDecH7FxL1wgBCYJBUyw=)
                          8: 3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa (hash: rJhXVqLpsYkngwan8Z+HVH8q5X4aOVj3SVdMUso2xGQ=)
                          9: 3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa (hash: NBvspvXpYUCWx/SgDUAz8RsBlUbtVVjXpIPVZMxYAIQ=)
                          10: 2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl (hash: DUYTuD8BdZi/I5P7VHCnH8Sj2D9XyOJRwy6jQ7HdDlY=)
                          11: 3137302e3234352e3233382e302f32332d3233203d3e20323636303230.roa (hash: fdfzLPEeWVlNfYGCe0TgP7cK/Jy/inpMxiKv51d8RfI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 20:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9d:aa:27:77:1c:5a:00:6a:f8:40:60:6e:ea:79:d4:9e:59:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Nov  2 20:03:27 2025 GMT
            Not After : Nov  3 20:29:27 2025 GMT
        Subject: CN=AA6F72A6C1ECA1F8DEE83E9EB7F8DC1D84D0465A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:27:54:ad:c1:20:60:2e:a2:9c:75:25:d6:
                    b9:f9:e0:64:c7:5f:d6:ac:d4:f8:ee:1c:19:ac:ef:
                    c1:d8:47:0b:ae:66:30:1d:46:c6:2f:90:4d:e6:5c:
                    29:b2:9a:3c:17:b0:ef:d8:b6:77:99:b5:52:29:f6:
                    27:6b:ff:36:e2:f0:a6:4d:e3:e3:8d:19:b8:0b:f5:
                    09:2d:17:00:cf:80:b2:89:2d:58:dc:eb:33:f1:89:
                    89:b6:f3:eb:d6:3f:cd:24:e0:c4:4a:7c:e3:2b:3c:
                    6c:2d:50:ad:cf:d7:96:66:f7:77:bb:ec:de:95:e4:
                    c6:7b:3a:1f:57:d8:39:66:b8:c2:fc:c0:9f:1a:a0:
                    95:ec:d8:85:f2:a4:4a:26:ff:ab:b3:54:2f:81:3a:
                    c4:d2:ca:17:ac:82:78:3a:91:c8:bf:48:81:e1:41:
                    a2:f3:ee:0a:13:b7:6c:5f:34:36:41:bd:ad:9f:11:
                    46:f0:d5:44:8a:01:48:35:80:a2:1f:d7:14:04:aa:
                    e9:94:ff:95:73:75:c9:a3:46:85:ee:85:d2:77:ca:
                    60:97:77:b0:9f:94:ab:08:96:d8:80:c1:ae:10:0d:
                    8f:10:8a:99:42:ac:81:9d:8f:9e:7a:b1:48:20:00:
                    2c:ba:8d:f6:84:78:72:48:48:b8:e7:89:a9:f0:9c:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:72:A6:C1:EC:A1:F8:DE:E8:3E:9E:B7:F8:DC:1D:84:D0:46:5A
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:88:46:54:fd:33:73:b0:97:c4:06:23:03:e0:2c:76:8f:77:
         3c:0b:85:a2:a4:73:07:e0:7b:0c:1f:cd:0d:6f:92:98:de:1f:
         c8:ef:dc:6d:5f:50:a9:81:fe:f0:0d:7a:f8:3f:1f:31:c1:49:
         1e:89:23:1a:c4:c5:c5:2a:61:a3:fb:c9:85:1a:0c:f0:c4:ec:
         ee:18:c3:a7:ee:c0:de:6a:ef:a9:71:d3:2f:ed:6f:46:1c:79:
         40:34:94:8e:66:33:e5:fe:21:35:bd:4c:f8:5c:eb:09:04:0a:
         77:04:25:59:d5:ca:1e:ef:2e:65:e9:82:96:15:9e:46:61:6f:
         7f:c6:e4:02:7c:aa:29:bb:fc:55:b1:e8:b0:94:08:5f:bd:53:
         47:8e:5b:a7:93:ad:81:98:f6:ce:e4:c7:ec:9a:58:43:1d:a7:
         fc:3a:de:5c:7d:54:9a:7c:1c:98:17:69:7b:ab:4f:46:8d:1e:
         18:bf:52:52:30:97:62:4b:b2:f4:51:e3:ad:89:97:63:3c:fa:
         b3:d4:5b:5b:7e:84:37:57:80:94:ce:c9:2b:e6:e9:d1:97:9e:
         0d:51:ea:86:86:61:79:24:68:0d:ea:be:2d:a4:07:5b:d8:be:
         dd:2f:95:b1:d0:a7:af:c6:ec:c9:5d:ac:21:95:37:eb:68:35:
         12:3b:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:44:09 2025 by rpki-client