Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
File:                     99143CBAF11D170944D719FD796009BC38F9F201.mft (raw, json)
Hash identifier:          V6sUFDVqRIHs8heMcb/kSWIUC2y/ZFelr/D81tWtWkw=
Subject key identifier:   B0:D9:B5:CB:37:D7:95:B4:FF:4C:32:F9:C3:DC:2E:AA:53:73:3A:2D
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       7FAC3036BFE160AB54FD8BDB04CE46176BD00719
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
Manifest number:          0156
Signing time:             Tue 04 Nov 2025 00:30:18 +0000
Manifest this update:     Tue 04 Nov 2025 00:25:18 +0000
Manifest next update:     Wed 05 Nov 2025 01:02:18 +0000
Files and hashes:         1: 323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa (hash: g+kDGTXDx32jeHWBRz886fdCkrH4EgBpA9ppSeKKh58=)
                          2: 3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa (hash: wGmW5HddS84Jo/UI8qqwdMdyTdX5hWciOmvr9JPT1Hk=)
                          3: 3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (hash: dT3drk2apCMlmTaJ587FJLVDRKf659GM5r5ocqzqC5s=)
                          4: 3137372e38352e3230392e302f32342d3234203d3e203532383438.roa (hash: +e4JE9WbQSTeKpKZM4B9htThLOM6QwAAvUGG04RlxEg=)
                          5: 3137372e38352e3232302e302f32322d3232203d3e203532383438.roa (hash: bpwbadI4PJrdbgkJUAI3blXoAxBzzJDOU/RK8agy34I=)
                          6: 3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (hash: MK46EOQmbC35WhEWUmA1L+F9AWzxso9iv0FyQJWVVEg=)
                          7: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (hash: RRqoJBiXii3TgpvUYwzTzwuOv7ddzpllt21x0hxGtNA=)
                          8: 323830343a3666383a3a2f33322d3332203d3e203532383438.roa (hash: ArZW0IEPQT9qmNg5J+/twX+29UWHR8soH8MuXLBopaw=)
                          9: 323830343a3666383a3a2f34382d3438203d3e203532383438.roa (hash: 8xtcR24IPJaMX/rjvHeT8tMqZCtqzrZlmnUr2V0pZho=)
                          10: 99143CBAF11D170944D719FD796009BC38F9F201.crl (hash: cZHnrj0pbBwKQPS7zIq5Lf0lIAuPiEsLqlD5MQ4zzdY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ac:30:36:bf:e1:60:ab:54:fd:8b:db:04:ce:46:17:6b:d0:07:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Nov  4 00:25:18 2025 GMT
            Not After : Nov  5 01:02:18 2025 GMT
        Subject: CN=B0D9B5CB37D795B4FF4C32F9C3DC2EAA53733A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:47:5a:0f:fd:27:67:ba:a4:ab:da:8e:66:
                    3a:64:73:0f:a2:a9:d1:6d:56:a0:39:ed:eb:e9:4a:
                    b1:b3:d2:ce:5d:ab:cc:35:95:3c:aa:9e:5b:6b:74:
                    ce:7b:f3:28:19:86:86:42:ca:52:d1:50:07:fe:95:
                    37:67:78:46:a0:22:cb:f9:f8:f1:7b:39:76:33:3c:
                    68:8b:ec:89:d1:e5:d0:c1:84:15:b6:96:fc:49:1e:
                    1d:5e:5b:54:ce:ef:89:49:17:f6:e2:d1:94:56:ff:
                    1f:a6:bd:ae:fa:c5:f8:86:6f:24:07:7d:5d:92:02:
                    fe:a4:1a:54:45:a7:b8:23:a5:ab:58:8d:99:ac:53:
                    06:a2:9b:47:7a:f4:b7:98:f7:15:f3:01:e7:3a:34:
                    d1:20:9b:64:44:1c:7a:10:8c:7a:74:c7:09:11:68:
                    e9:22:7c:51:83:b7:5a:c8:66:16:08:35:11:d6:af:
                    8e:80:99:79:bd:26:55:c5:64:11:97:dc:2b:e8:10:
                    0b:5d:6d:66:93:7d:0e:d4:d0:b6:34:ab:2c:65:e6:
                    67:64:ee:31:4d:38:f5:92:77:80:f6:12:e9:bd:7f:
                    a1:f6:f6:30:53:7a:23:9d:a9:4f:c4:07:a2:06:ee:
                    53:9c:48:66:58:c3:8f:e5:5e:e3:c4:d2:c1:c4:8c:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D9:B5:CB:37:D7:95:B4:FF:4C:32:F9:C3:DC:2E:AA:53:73:3A:2D
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:ce:2d:e4:86:85:fc:89:97:23:f1:b9:8a:11:15:ce:9a:
         18:96:57:44:d9:09:52:a5:98:cd:8f:72:36:3a:03:e8:7e:fc:
         4b:cc:0b:b0:1b:3b:76:ab:cb:c6:13:fa:c7:a5:e1:54:cf:a4:
         c5:bc:e7:9a:fb:c5:62:6e:09:ad:7b:df:ec:bb:c5:2b:2e:81:
         22:3f:a8:85:da:02:26:78:87:bf:f1:84:96:bd:63:57:8e:ae:
         de:27:46:51:78:c2:ce:c1:fa:8c:82:73:d1:d1:73:40:7a:ad:
         1e:3e:3b:24:c4:44:a3:1c:8a:e3:f1:49:a9:2e:e2:dd:9c:11:
         89:02:d1:39:be:8e:db:bf:82:e0:e3:7a:71:6e:70:9b:09:98:
         34:45:52:24:f5:22:11:c2:64:9a:eb:28:9c:d9:f3:78:38:de:
         74:4b:77:48:de:3d:2d:b8:0e:cd:3a:18:55:91:a1:6f:90:42:
         d9:fe:24:12:c9:56:fe:b9:78:0b:65:de:59:e0:50:5d:5b:c7:
         a2:c4:bd:23:2d:84:38:d9:be:3a:59:2c:59:89:61:39:d1:90:
         59:4f:22:10:e9:9c:ee:8d:a8:51:89:3b:5e:86:19:da:31:5b:
         b7:28:a8:55:77:44:32:e5:8e:c2:76:ab:8f:38:5c:00:9c:6c:
         7d:5e:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:15 2025 by rpki-client