Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File:                     F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier:          XZSZmVUh9NjZccyYq+YTSM7FGO+neIc+IqJMjRMF6I8=
Subject key identifier:   E0:89:6B:B4:AF:A6:93:43:E9:BF:E5:B7:4F:D7:41:46:93:49:C7:60
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       2298D516D7E08641C9B9963E551A99CFE3EDDBA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number:          0302
Signing time:             Mon 03 Nov 2025 05:20:00 +0000
Manifest this update:     Mon 03 Nov 2025 05:15:00 +0000
Manifest next update:     Tue 04 Nov 2025 05:48:00 +0000
Files and hashes:         1: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: QJH4fYHcsHbgYb/UclILf3opV353t9z08DRHEej1kLQ=)
                          2: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: Zf1/par2iLXj4w2uBdHXouHogjcdK7HKEU/jZVIMwH4=)
                          3: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: Co347ncP7SR7KoR2iCTsOFvpl2Rvlgnd96a0iRNyxzI=)
                          4: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: nzGBObgZfOlb5g7ptD/ia0xytS8qU/fdfbuLNT9Fifw=)
                          5: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: ek0I4o/SvNPICrEIerJ5qOwejj1q0d8lWX8tgr6ZEEc=)
                          6: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: C2gaAeMLJCaTjaTCRD9gXMgd6K9aiWuRcNiCGX7T9FM=)
                          7: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: m0hG+WYXiFoMmdmASCV7yHnD0RxYhyjpHwh+ZVFDzoY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:98:d5:16:d7:e0:86:41:c9:b9:96:3e:55:1a:99:cf:e3:ed:db:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Nov  3 05:15:00 2025 GMT
            Not After : Nov  4 05:48:00 2025 GMT
        Subject: CN=E0896BB4AFA69343E9BFE5B74FD741469349C760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:35:62:5a:cb:e7:4d:96:89:ff:54:b9:c8:
                    6c:4f:9c:7e:f2:19:5e:c7:3b:bb:84:fc:c9:2e:9e:
                    bd:c2:16:db:5e:78:88:75:60:13:d3:e1:69:89:98:
                    91:c2:b8:47:36:52:5b:03:e4:46:27:6b:0b:4b:1a:
                    3c:da:02:7d:2c:33:0c:cf:53:01:4a:96:3f:9c:fe:
                    0c:68:59:e7:90:2d:15:fd:01:ac:d8:12:af:5c:37:
                    56:20:19:b5:0c:a8:c2:0a:e3:d0:5e:dd:37:f8:42:
                    37:42:a9:85:f7:d7:37:43:98:d0:d7:7a:a1:3a:97:
                    bf:37:08:36:e9:da:3c:8a:6d:73:60:ef:7b:3b:5d:
                    0d:1e:0d:04:bf:5f:b4:13:ed:a6:c0:47:89:35:2b:
                    e4:8d:06:22:ea:20:1c:32:f8:25:59:8a:43:34:2f:
                    2a:91:0a:48:b8:d4:cd:5c:50:68:82:3c:3d:39:f1:
                    2b:30:91:6f:5d:b8:89:b6:91:be:c9:85:b4:cd:b1:
                    07:89:bc:b4:a6:c3:a8:23:8b:72:05:e8:cd:46:17:
                    32:b2:fc:5d:68:5f:6f:69:f7:99:37:4e:5a:f8:f6:
                    1c:bb:84:f1:0c:60:89:ff:30:82:35:0b:8c:a7:95:
                    c4:f4:dc:71:57:17:c5:a9:3d:84:6d:a2:c2:55:9c:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:89:6B:B4:AF:A6:93:43:E9:BF:E5:B7:4F:D7:41:46:93:49:C7:60
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:bc:a1:2e:11:e7:df:9d:37:8b:38:96:21:3e:04:fa:14:
         0b:82:10:c7:46:c1:a2:72:1f:5e:1c:d2:c3:de:d6:8d:da:a8:
         71:b8:56:60:b7:8f:b6:50:54:37:6e:88:c2:c5:63:ee:1d:42:
         74:55:af:75:12:64:2d:e3:55:19:10:66:36:71:4f:74:43:3b:
         05:51:6b:f8:fe:98:b7:bc:ac:bb:39:b3:bb:48:fc:49:9c:5b:
         6e:66:25:2a:2e:a1:09:1f:f1:03:bd:f4:21:9c:b2:3b:b7:88:
         d2:21:90:0c:56:ff:e9:e8:da:22:34:5e:88:d3:67:df:c4:d3:
         4c:d2:33:0e:d9:8c:b9:0e:11:58:b7:8b:30:67:94:a2:d5:39:
         0c:fb:4d:a9:16:38:59:52:24:08:d6:96:c3:da:a8:ec:65:95:
         06:6e:f1:32:a7:05:ce:1e:3b:72:74:b2:ae:73:60:fc:fe:4e:
         e4:f2:61:e9:26:2c:82:a6:a6:3d:bc:9c:0f:18:ed:07:aa:76:
         1b:86:ed:b6:6e:18:bb:22:93:5f:c6:28:1c:9c:05:63:ce:2c:
         d3:e7:b2:ac:36:a5:8f:9b:84:84:5f:4e:f5:d5:3d:2b:97:36:
         6a:7a:c2:05:91:94:70:ef:83:1b:25:b8:c4:6c:99:06:18:2f:
         6a:86:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:08:48 2025 by rpki-client