Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
File:                     11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft (raw, json)
Hash identifier:          ItpdMOk2I2SXqa2rSPx40AkuWPzc9Dd48tTLLLLp6cc=
Subject key identifier:   5D:91:6D:FC:FC:06:44:D8:F3:10:BA:C8:CC:95:A9:59:30:C6:B7:4E
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       518DE7A92F2C0293B35F697136FCDC700E344F22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
Manifest number:          3F
Signing time:             Tue 04 Nov 2025 04:01:06 +0000
Manifest this update:     Tue 04 Nov 2025 03:56:06 +0000
Manifest next update:     Wed 05 Nov 2025 05:22:06 +0000
Files and hashes:         1: 34352e3136372e39382e302f32342d3234203d3e20323637393938.roa (hash: K6GBQqxqAfLpF97zU04kB7u5JAis425xps/SL+WZhCw=)
                          2: 34352e3136372e39382e302f32332d3233203d3e20323637393938.roa (hash: O7kjjCoo8NTTsbX0UuS95uZuDag0Q0a6IltqgBl9WOY=)
                          3: 34352e3136372e39372e302f32342d3234203d3e20323637393938.roa (hash: Ytrdo261nu68G5iYQF5kllJQrLZFTEmfyesz1UaQMsc=)
                          4: 11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl (hash: fL4cg+7F1xsMUoKQd82lIED7e/n7LwlEGIUIBs23vtU=)
                          5: 34352e3136372e39362e302f32332d3233203d3e20323637393938.roa (hash: nq7RhRiVGDMVVgM/MoyTYLTPrn1mJ9KD/K6WgZpjXDY=)
                          6: 323830343a353637303a3a2f33322d3332203d3e20323637393938.roa (hash: +cUVgKxn4mOXd+cHhmjCT1WiUS3lOZJTsD6ZtKdpHUU=)
                          7: 34352e3136372e39362e302f32322d3232203d3e20323637393938.roa (hash: /oOEnAypauONcNbXkKj4AELCL3ogJdLj9O5tkwd15xI=)
                          8: 34352e3136372e39362e302f32342d3234203d3e20323637393938.roa (hash: /LAOQeapE7t7p2/spLqG+U81j0Yy8oxAeK+W5yPj2Gw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8d:e7:a9:2f:2c:02:93:b3:5f:69:71:36:fc:dc:70:0e:34:4f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Nov  4 03:56:06 2025 GMT
            Not After : Nov  5 05:22:06 2025 GMT
        Subject: CN=5D916DFCFC0644D8F310BAC8CC95A95930C6B74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:37:9e:4b:72:64:b6:8c:53:a8:fb:06:94:
                    0e:a8:40:a5:dc:59:b3:19:46:85:19:88:a5:a8:a4:
                    b9:71:23:d3:4c:da:2d:9a:ea:8d:d3:b0:fb:42:f0:
                    b3:58:2d:a2:81:a7:f1:8b:89:27:82:cd:90:a7:de:
                    28:6e:c9:de:7f:13:a5:ba:94:1a:f8:f6:a1:5b:2f:
                    eb:87:c6:ff:ed:81:6d:37:61:1f:48:7b:7e:cb:88:
                    2b:76:c9:73:50:4d:6a:4a:a0:08:ae:29:a8:f5:03:
                    e8:84:7e:0a:7b:e6:d6:da:3d:f4:b5:c6:56:0c:d0:
                    ba:8a:b7:78:08:8e:3c:37:b0:e4:99:17:59:80:c5:
                    ca:7e:eb:aa:99:29:31:57:93:ec:da:b9:63:a0:a6:
                    2c:55:df:15:59:59:82:41:e0:12:4d:cf:49:91:6f:
                    c9:9d:ed:dc:a4:25:6d:8e:e4:67:83:bf:0c:08:2f:
                    97:d1:60:e3:6f:55:02:cb:aa:e7:3f:80:c6:de:13:
                    d6:c5:07:77:35:83:e4:10:36:91:19:92:35:df:8a:
                    0f:f2:6b:bf:89:2b:76:01:69:51:93:92:81:4a:07:
                    50:85:08:8c:1c:69:57:35:24:11:a4:3d:04:f2:e4:
                    d6:61:37:18:1c:89:ad:d9:42:32:dc:0a:c0:6d:a4:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:91:6D:FC:FC:06:44:D8:F3:10:BA:C8:CC:95:A9:59:30:C6:B7:4E
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a6:24:45:c9:6c:30:0e:e5:87:f5:12:f5:ed:28:d0:14:4b:
         4c:ad:95:54:a0:fd:e7:66:0d:96:1c:fa:a8:75:3d:c2:45:84:
         14:cd:27:a8:92:f5:09:5b:c9:40:54:43:a1:62:66:25:d8:eb:
         75:c5:68:52:d9:6f:22:fe:55:f7:3b:a9:94:ec:c6:cc:c3:ad:
         32:5c:95:ca:f3:6f:33:36:5f:78:f4:21:44:25:f6:b7:9e:bc:
         0f:73:51:7a:a2:99:35:96:ec:65:11:00:b3:91:18:cb:ce:8b:
         0b:83:9c:23:81:2c:8f:26:47:5c:0b:40:2a:d3:62:f6:0f:92:
         45:cf:7b:94:78:3f:e2:dc:f8:c7:3b:5f:7b:1c:aa:58:89:12:
         ba:74:01:63:07:1b:f1:70:98:f1:2a:7a:7d:91:8d:78:46:f4:
         b1:05:05:c5:b2:d6:1c:1c:ae:68:98:ba:a4:9a:c9:6e:cc:40:
         f2:64:ad:9a:8e:bf:81:0b:9c:fd:f3:0e:97:c1:1d:f6:48:e0:
         81:27:95:26:f9:20:c7:5e:db:45:2a:02:9f:31:61:16:5c:aa:
         f7:7d:a3:b5:33:f6:d1:df:52:8f:77:8f:3b:10:2d:99:57:96:
         25:05:3b:8e:ff:63:76:85:ef:e8:fe:36:2b:2c:e0:04:2b:3c:
         a2:ee:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:05:24 2025 by rpki-client