Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
File:                     BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json)
Hash identifier:          Q4YPcsfHVbNtlrWxDOr6Y7ppqJNZtdArEic2lN/oM3I=
Subject key identifier:   63:9C:86:3F:07:2C:7F:9B:51:FE:99:58:28:7E:75:56:57:9B:8D:F8
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Certificate issuer:       /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial:       235CC7555F9C176D85ABC6E23255C6B8FC9AE1BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
Manifest number:          89
Signing time:             Mon 03 Nov 2025 02:51:17 +0000
Manifest this update:     Mon 03 Nov 2025 02:46:17 +0000
Manifest next update:     Tue 04 Nov 2025 06:10:17 +0000
Files and hashes:         1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: rv3hqX9FkX41QpfsMeC8jQ9q4clTaUy+6Kj9ZkOKQl4=)
                          2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
                          rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5c:c7:55:5f:9c:17:6d:85:ab:c6:e2:32:55:c6:b8:fc:9a:e1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
        Validity
            Not Before: Nov  3 02:46:17 2025 GMT
            Not After : Nov  4 06:10:17 2025 GMT
        Subject: CN=639C863F072C7F9B51FE9958287E7556579B8DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:64:3f:7c:fa:50:9b:c0:72:a6:b2:f9:02:
                    fa:67:9b:22:cb:5d:bc:d8:81:b6:b1:91:c7:4c:20:
                    06:84:83:27:cd:3b:2c:4c:6f:74:92:5e:40:81:a1:
                    44:e9:64:f6:23:b5:74:bf:2c:21:c9:9f:ab:be:f5:
                    cd:7b:a0:cc:49:d2:80:52:92:21:ab:f0:58:57:6f:
                    80:32:43:15:dd:02:3d:10:15:41:01:89:1c:d1:c6:
                    46:1f:b7:4b:a8:89:4a:f9:e7:e1:41:b0:0f:05:89:
                    4a:8d:c1:bc:6b:24:43:b0:9c:1a:02:2a:3e:0b:07:
                    a1:a5:64:b0:69:d9:69:ae:39:57:74:4e:9d:a1:c8:
                    26:95:94:1d:91:47:35:36:ab:b3:b4:7c:99:20:77:
                    ae:a7:ab:40:00:6c:dd:c6:b3:83:01:c6:8e:1e:17:
                    d5:e7:00:ce:fd:38:15:28:46:9a:21:72:b3:e2:43:
                    0f:dd:3f:4e:2d:a0:70:11:52:3e:df:b0:42:bd:a5:
                    d9:c4:94:5b:aa:1e:68:c4:96:11:11:c8:82:0a:b3:
                    ed:de:f8:d5:0b:b9:70:35:37:36:ba:dc:00:0e:d7:
                    0c:a4:f9:6d:a3:32:5c:c7:0c:6a:6b:0f:31:be:24:
                    c1:a6:50:84:ad:a0:2b:04:22:99:55:92:5b:46:38:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9C:86:3F:07:2C:7F:9B:51:FE:99:58:28:7E:75:56:57:9B:8D:F8
            X509v3 Authority Key Identifier:
                keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:93:c4:a7:54:7b:21:ae:bd:13:fa:04:6e:eb:06:16:67:
         28:be:84:ce:e8:b3:8e:a8:be:32:f2:2a:75:a4:bc:c6:4b:ba:
         22:9f:ca:a1:4c:57:c5:e3:2b:eb:c2:50:fb:84:10:77:07:7c:
         ad:1c:cf:ec:36:59:00:fb:7e:b9:df:fc:dc:79:0e:64:d4:49:
         22:7b:59:b0:dd:7f:ab:35:3a:70:7a:69:5a:97:29:d1:cf:86:
         36:f9:7a:64:e0:4e:2e:71:18:65:2f:36:fd:a3:d9:49:a7:2a:
         eb:10:d0:d6:da:37:cd:b2:5a:84:62:bf:b9:67:f1:eb:cd:98:
         cc:ab:c1:ba:e7:13:c5:9b:60:0d:3a:04:24:31:d4:b7:3b:b3:
         7b:a3:79:58:97:cb:11:eb:33:1c:b5:98:33:d1:08:b1:93:fa:
         50:c6:7f:c7:1d:c4:2a:72:1f:1f:aa:70:2c:d2:42:3e:0f:ca:
         9a:79:eb:e4:45:5f:cb:33:ba:02:87:0a:0f:f4:c5:c4:ca:39:
         97:54:22:2f:93:03:37:c0:5d:6a:b4:ed:2c:68:d4:bf:2d:8b:
         9e:e0:e7:59:f2:af:c6:6e:df:21:c4:0b:42:f4:8c:17:aa:bb:
         1e:40:25:bf:23:a6:fa:46:38:5f:bb:c7:93:3b:f4:21:ad:d2:
         f1:5c:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:43:48 2025 by rpki-client