Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
File:                     7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft (raw, json)
Hash identifier:          5wSQ+5QCLKsjoofztsW6C1Yguot4Sq/sleVAWa98cR4=
Subject key identifier:   B2:E0:83:A9:35:E2:1B:24:62:51:A0:EF:83:54:34:CE:F3:DE:7D:F1
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       3E7803CC1CADF7054B359F99752EB51B0CCEF60C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
Manifest number:          025A
Signing time:             Mon 03 Nov 2025 07:32:47 +0000
Manifest this update:     Mon 03 Nov 2025 07:27:47 +0000
Manifest next update:     Tue 04 Nov 2025 10:16:47 +0000
Files and hashes:         1: 3137302e38332e32302e302f32322d3234203d3e20323632353233.roa (hash: QAmlgUCDSPgAJEAIQJ+f/LOKcTzFbNILzCd0fOiiFyg=)
                          2: 3137372e36372e3137362e302f32312d3234203d3e20323632353233.roa (hash: A+K2SOqUqSSa8DXz8l6SudubL6ufkSKuN318IyGW+cE=)
                          3: 3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa (hash: zVBroeCJA2nYjdOPPJkMg5gv2wVlLTMnTjsCADq/4Ok=)
                          4: 323830343a3539303a3a2f33322d3438203d3e20323632353233.roa (hash: UIZVw5CVrMJVVAYGVNA/F8mJ8zczqqcpB7QFBw6FUCw=)
                          5: 7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl (hash: 1VwUJMPRmTpYfbcleaYNFEEJbr5mt/jQP1yROr2+b3k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:78:03:cc:1c:ad:f7:05:4b:35:9f:99:75:2e:b5:1b:0c:ce:f6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Nov  3 07:27:47 2025 GMT
            Not After : Nov  4 10:16:47 2025 GMT
        Subject: CN=B2E083A935E21B246251A0EF835434CEF3DE7DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:cd:30:f3:f6:35:d1:48:92:73:61:81:07:
                    2a:1b:31:0e:c5:69:14:c4:51:d6:12:bb:56:b7:25:
                    b2:a0:29:2c:41:65:f9:46:69:b8:7c:92:62:90:1a:
                    7b:b2:f4:91:ab:e8:da:85:34:ca:35:13:73:45:8d:
                    8e:61:87:34:c9:c7:fe:eb:b5:0a:b9:5d:d1:d1:06:
                    de:7f:45:78:2b:ca:a6:af:ed:e1:18:23:ed:c8:47:
                    bf:fc:c5:94:24:e7:61:83:8e:fe:b9:17:cc:38:4e:
                    97:63:8f:1c:40:d8:29:ed:a9:ca:f0:38:56:b7:d5:
                    b6:0d:dc:ff:f6:36:d8:a0:f5:2b:7d:4c:3c:63:93:
                    16:11:9b:1f:df:8a:26:38:d3:db:f5:86:0b:a3:0e:
                    ac:09:7b:24:1e:b3:a4:7c:cc:97:89:02:4e:0b:c3:
                    b3:f2:13:55:25:19:85:bb:7f:b7:30:eb:4e:55:5d:
                    66:ca:80:7a:dc:ae:3b:5f:2e:9a:0a:02:b8:6c:25:
                    69:b9:f3:cc:39:28:2d:0b:4b:05:aa:d8:13:34:41:
                    2f:dd:69:da:58:58:fb:08:74:93:e0:4b:da:fc:2b:
                    36:5d:9c:a2:29:83:9b:a3:3f:a1:ed:01:50:f4:5a:
                    6b:6f:4c:bf:ec:f7:97:40:35:6e:f8:8b:9d:9d:40:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:83:A9:35:E2:1B:24:62:51:A0:EF:83:54:34:CE:F3:DE:7D:F1
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:a9:16:0e:e7:3c:41:9d:7e:76:63:c0:89:16:50:9b:7b:
         f6:8b:47:cb:c6:19:0b:9c:8a:63:c6:ef:6c:5d:cf:50:fb:5e:
         b8:8b:06:43:95:aa:af:39:6f:e8:08:78:06:8e:e8:80:b4:87:
         85:bc:2e:ff:d9:d2:6b:b5:0b:68:6f:89:b9:6f:94:81:cf:59:
         08:94:ad:a8:11:1c:6c:c4:63:3b:a7:64:49:af:84:2d:3c:7d:
         c8:02:fa:09:c4:52:b1:f6:91:70:bd:c6:54:de:30:fc:ec:85:
         b4:74:e7:21:d4:0f:08:d9:c2:30:1e:36:8f:74:b6:88:35:e0:
         96:44:15:31:73:71:67:c3:96:7c:bd:12:e6:75:a3:36:85:0c:
         2a:e2:40:b3:d6:68:12:aa:21:dc:52:b9:f9:31:fb:af:f7:82:
         02:5f:1c:4d:70:88:13:61:da:69:75:d2:9a:db:6c:86:03:8d:
         9b:65:98:e3:5b:6d:06:0c:0c:01:0c:30:16:e7:3d:dd:72:d0:
         76:ee:81:f1:2a:3f:6c:b1:cb:6a:21:dc:56:e1:af:5b:2d:82:
         8c:91:26:b8:cc:bd:c1:bb:07:ad:a7:e1:12:b3:53:9f:00:00:
         38:61:84:0d:e3:45:83:1c:1e:ab:53:e8:7a:70:c9:0b:15:eb:
         0c:0a:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:18:13 2025 by rpki-client