Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
File:                     B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft (raw, json)
Hash identifier:          CMR342TQ0FRyGD0ZrEkKAR8uhCRg4Ra74E/1rqN7yfg=
Subject key identifier:   54:F7:69:F4:E1:B5:5A:F1:B7:39:17:6F:71:E8:B3:4F:6B:94:FA:5F
Authority key identifier: B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91
Certificate issuer:       /CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
Certificate serial:       61ECD0D785CC53D9D4D357371C49A9829680F714
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
Manifest number:          01CC
Signing time:             Mon 03 Nov 2025 00:30:21 +0000
Manifest this update:     Mon 03 Nov 2025 00:25:21 +0000
Manifest next update:     Tue 04 Nov 2025 01:22:21 +0000
Files and hashes:         1: 3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa (hash: D9QppqLT7H6n7AuxOU5w0IV2pGii6IfXWxzdnP2nz5E=)
                          2: B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl (hash: sGCUTXn7nccI8kGCPOYti1QPAgqT/IRob1B8ytGXGUs=)
                          3: 323830343a376133343a3a2f33322d313238203d3e20323731333535.roa (hash: awRXTG5/JiTvuAiBImObhWf3ci5YbXEW5AqPL0+mqo8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl
                          rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 01:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ec:d0:d7:85:cc:53:d9:d4:d3:57:37:1c:49:a9:82:96:80:f7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
        Validity
            Not Before: Nov  3 00:25:21 2025 GMT
            Not After : Nov  4 01:22:21 2025 GMT
        Subject: CN=54F769F4E1B55AF1B739176F71E8B34F6B94FA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:38:57:b1:49:7a:84:1d:b2:6e:66:50:ac:
                    fd:4a:82:7c:f9:75:7d:4b:e6:ce:11:bb:18:22:9d:
                    e5:19:2e:fc:61:5c:69:ef:c9:7c:30:60:3c:5f:e0:
                    ab:be:d3:57:9d:21:ec:21:e8:b6:1a:f9:13:4d:85:
                    2d:84:24:1d:4e:07:ea:19:c9:28:1e:d1:cc:b0:45:
                    a2:8a:5c:44:0f:86:07:24:4a:95:ab:98:f4:d5:0f:
                    65:01:c8:2c:9f:99:f9:3c:92:9d:13:41:5c:2f:94:
                    74:d5:74:ba:60:4b:62:6e:06:56:50:22:d9:61:f8:
                    28:a4:68:32:de:72:ff:bd:44:83:61:2f:30:17:f8:
                    49:48:3e:f2:9f:08:14:05:8b:62:e3:72:6f:da:ce:
                    40:f9:ad:d5:bf:8c:41:b8:b3:dc:3d:ff:d3:24:97:
                    a5:29:ce:11:d3:0b:79:d7:7e:3b:10:fc:7c:e9:98:
                    bd:49:5a:8e:3a:13:43:3e:24:5e:e1:fc:02:3c:96:
                    78:fa:b9:00:94:95:f7:d8:28:26:7d:00:4c:ec:6e:
                    9c:32:32:c7:65:d9:5c:d2:65:b5:a4:bf:22:b6:2e:
                    29:78:6e:d2:2f:49:75:e0:0c:2a:70:73:63:5c:ff:
                    d4:84:39:41:ab:72:f4:8c:92:3c:be:cc:bf:0b:4b:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F7:69:F4:E1:B5:5A:F1:B7:39:17:6F:71:E8:B3:4F:6B:94:FA:5F
            X509v3 Authority Key Identifier:
                keyid:B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:7c:cc:2d:16:04:92:22:26:22:30:8f:55:ab:10:2c:4e:
         a1:aa:9d:cf:34:7a:64:0d:9f:4e:c2:1f:94:e0:6a:60:d4:59:
         1f:42:c6:4a:31:ed:23:2b:b6:c5:88:74:e2:d1:ac:0b:e1:71:
         5a:a1:49:39:e6:76:00:7e:0e:b9:17:e3:24:be:e4:73:e0:22:
         a3:d6:ee:97:d9:06:72:39:9d:43:6b:17:95:ec:7b:a2:4f:69:
         a7:51:74:42:87:22:be:d5:58:e3:fd:c4:b4:22:5b:91:66:8b:
         4d:2a:13:1b:5b:5f:ba:44:09:3a:3d:39:68:69:8f:32:7a:9b:
         7b:e0:53:7e:9b:32:78:45:e5:df:4f:c8:64:83:49:36:ba:ab:
         3d:67:ad:a4:31:c9:7d:ef:10:55:5e:ce:c8:62:66:02:af:a0:
         e7:1e:27:6a:49:0a:93:d5:25:f6:19:1b:03:3f:cb:10:be:d2:
         7e:b8:54:7f:b8:26:f6:85:93:bd:e0:01:4e:fe:5f:0b:47:8d:
         94:59:03:29:ec:4d:bb:9b:4a:d8:b5:bb:0a:0a:da:75:ec:8f:
         ab:4d:0e:89:9e:98:7a:8e:6d:10:73:d8:3d:2e:13:5a:ee:c1:
         3f:f4:ec:07:e3:88:2b:32:b7:00:65:74:5a:5b:cb:b0:e9:91:
         6a:5b:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:59 2025 by rpki-client