Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          yjJruOrukN4K4IMa4u1PHdllMCNnS4B8YPP8v0rbEW4=
Subject key identifier:   70:C9:4E:EA:64:28:62:09:00:F3:B8:77:99:F8:A1:42:F9:13:A4:BB
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       232179F54619E549169F17556EC86905F9026A33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          0179
Signing time:             Tue 04 Nov 2025 00:03:43 +0000
Manifest this update:     Mon 03 Nov 2025 23:58:43 +0000
Manifest next update:     Wed 05 Nov 2025 03:55:43 +0000
Files and hashes:         1: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=)
                          2: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=)
                          3: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: uxMsNodDKgA+bGrzzwEnOhSi9uyUNZW2bMEYVgaQbus=)
                          4: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=)
                          5: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=)
                          6: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=)
                          7: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 03:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:21:79:f5:46:19:e5:49:16:9f:17:55:6e:c8:69:05:f9:02:6a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Nov  3 23:58:43 2025 GMT
            Not After : Nov  5 03:55:43 2025 GMT
        Subject: CN=70C94EEA6428620900F3B87799F8A142F913A4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:49:e7:c8:a7:c8:2c:a2:18:02:76:0a:48:
                    df:66:f1:f8:1b:27:23:d9:52:8d:87:ad:55:50:16:
                    e7:35:80:dc:51:a2:33:b9:b2:3e:11:5f:2c:38:d5:
                    62:e2:f8:2c:7d:3c:f6:f5:10:b4:ac:50:fb:ee:62:
                    86:a0:7c:bc:77:37:31:e1:9d:9e:53:56:46:41:b4:
                    f7:97:c8:20:7b:fe:5d:07:32:f7:74:65:eb:c1:26:
                    c2:ba:a4:1e:f3:a3:c0:44:3e:7d:4f:00:8a:07:27:
                    e2:49:00:b2:5a:5b:e2:9c:18:ee:ac:1f:35:57:c8:
                    df:f7:fa:7b:9f:5a:c8:70:39:e8:8a:c6:cf:c0:9f:
                    6a:fa:a7:3a:e3:ad:26:eb:af:d1:e1:29:0b:89:f7:
                    95:65:e7:5c:e2:7e:35:ee:82:35:c7:d4:8d:52:4d:
                    fd:ef:02:5f:1e:ba:b9:ef:5d:14:ae:9b:cc:7d:ab:
                    3b:6c:ca:ee:9b:c2:b1:1a:b0:ef:9c:a1:93:bf:d7:
                    4d:b0:2f:07:d5:e7:c9:25:64:07:44:0c:7c:f5:21:
                    97:7d:0c:92:e5:c9:54:78:d5:3b:f9:14:be:bf:59:
                    a3:df:a8:67:70:27:3d:02:c4:b2:6e:45:99:fc:37:
                    86:4e:7a:ee:d8:b0:0b:7b:4b:df:70:f3:5c:a5:51:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:4E:EA:64:28:62:09:00:F3:B8:77:99:F8:A1:42:F9:13:A4:BB
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:36:d3:4a:79:9f:04:db:cb:eb:ad:f1:93:ca:66:d3:5c:35:
         69:ac:97:9d:ec:ea:ec:3d:96:71:c5:d9:67:a6:51:ab:63:89:
         d2:55:3a:5d:0a:ef:e8:9e:61:4e:73:7e:24:c6:9c:80:bf:85:
         ed:ce:46:18:04:0e:96:3d:8b:ab:f5:08:20:97:c8:50:e3:2d:
         29:f9:66:68:1e:4f:32:73:b0:c1:b9:47:25:87:f7:57:ea:88:
         f7:06:da:c6:43:30:85:26:3e:66:51:10:04:18:fd:c3:9b:e0:
         ff:af:a9:8f:82:7f:ed:57:8c:4e:b3:df:d3:a3:f3:f4:fb:77:
         68:5b:72:3b:06:b8:f5:90:07:21:cb:20:d3:ba:c4:c5:58:03:
         a0:91:7e:79:00:bb:d8:ec:fb:7e:f9:e5:d3:1f:63:f0:f6:74:
         e7:38:52:3b:a8:26:4c:76:87:36:b2:98:e0:b7:10:5f:12:56:
         bb:41:df:8a:bf:9e:e0:89:a8:75:1f:84:a2:32:51:1f:c8:75:
         ea:1f:26:36:4b:d3:d4:12:14:86:5a:61:1d:bb:75:bf:86:9e:
         77:5f:95:c2:eb:4f:f1:fa:04:3c:32:c8:45:dd:bd:a3:2c:05:
         bd:4c:14:73:5a:cb:3e:8d:0c:d8:58:cf:0d:7d:76:41:fd:44:
         14:fe:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:26:49 2025 by rpki-client