Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
File:                     D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft (raw, json)
Hash identifier:          SFUnCD35tu+CffFUA+WGFlMAq1afiZYLbyvxtTMhGwM=
Subject key identifier:   00:F3:50:33:88:95:D5:50:3D:B1:31:D2:C8:DC:4E:BB:90:63:D1:3C
Authority key identifier: D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33
Certificate issuer:       /CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
Certificate serial:       3F2AD31E233FDCBA6E9835D0EC426D2980985756
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
Manifest number:          41
Signing time:             Mon 03 Nov 2025 03:53:58 +0000
Manifest this update:     Mon 03 Nov 2025 03:48:58 +0000
Manifest next update:     Tue 04 Nov 2025 06:50:58 +0000
Files and hashes:         1: 3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa (hash: aYt7HyWdft1w//h0iz65bSyedw/zVIH+MiQLjWAhPDs=)
                          2: 323830343a343064303a3a2f33322d313238203d3e20323635393833.roa (hash: xEEZkfy9FtOMO6g1LgZsdvTtb3lVY0eBe38XC9ihhIc=)
                          3: D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl (hash: GildnT3/yHrcns9AbgU6Csjeyvo7lDwRJdGvzaCgqfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl
                          rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2a:d3:1e:23:3f:dc:ba:6e:98:35:d0:ec:42:6d:29:80:98:57:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
        Validity
            Not Before: Nov  3 03:48:58 2025 GMT
            Not After : Nov  4 06:50:58 2025 GMT
        Subject: CN=00F350338895D5503DB131D2C8DC4EBB9063D13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:60:fe:bf:84:6a:05:a8:40:d9:bc:95:1a:
                    a1:24:6d:a4:a2:38:a4:fc:7d:48:a7:8c:e2:73:0e:
                    59:8a:18:cc:8c:69:1b:23:78:4b:d9:ad:cf:c4:73:
                    a5:4f:3c:f0:8d:6a:22:30:7c:89:f6:b1:b9:14:25:
                    5a:2f:fc:09:2f:d7:a0:a5:43:a1:ab:88:ca:24:ad:
                    6f:8c:0c:d8:46:e9:5d:5d:0d:e6:b3:62:1e:ea:21:
                    77:22:41:69:9e:80:e5:ba:9b:ac:af:a6:31:db:fb:
                    56:4d:71:38:68:dd:a8:ca:b5:14:54:8e:48:b9:27:
                    06:00:d9:a9:29:fc:da:fd:8c:fc:b5:14:7f:14:d8:
                    ba:5d:f1:41:5e:97:ea:0c:05:c9:da:2d:1c:15:74:
                    ab:1c:49:21:c8:0b:91:7b:a9:de:3d:3c:a9:a4:5c:
                    f2:63:57:b7:53:97:cb:53:fe:5d:19:d1:87:eb:72:
                    f3:e6:b1:d2:e2:f2:30:23:72:4d:f6:5e:3f:eb:f3:
                    75:83:cc:ee:4f:ac:55:4b:34:5e:8f:e0:95:f4:61:
                    e3:e2:c8:d3:2c:02:c7:d9:4a:f5:6e:4b:54:f4:de:
                    b1:ba:7e:ad:ba:6c:66:e9:ed:c9:bf:f6:78:87:7b:
                    97:e0:cf:ef:39:16:f8:8f:2f:f7:7b:f5:7c:c3:95:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F3:50:33:88:95:D5:50:3D:B1:31:D2:C8:DC:4E:BB:90:63:D1:3C
            X509v3 Authority Key Identifier:
                keyid:D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:97:98:1c:0d:6b:55:13:70:21:f3:a9:9d:37:97:0b:03:ad:
         53:aa:f9:9f:3c:b8:ba:68:8b:93:67:7a:14:3f:9f:c4:ac:f5:
         8b:51:6c:e4:20:54:ae:a3:d8:26:95:12:fe:51:19:ca:dd:83:
         40:58:03:c4:59:3c:99:22:09:6a:df:cf:49:8d:84:ed:7e:3c:
         1d:e0:3e:97:90:8a:4c:d8:1e:71:85:2c:b8:47:3f:7f:3c:b2:
         bf:fb:28:4a:ab:97:cf:66:33:70:8c:40:8c:b8:d3:76:bd:5f:
         28:08:1a:39:ea:c7:ea:59:31:92:d3:23:62:4a:0e:32:5e:bc:
         20:8c:bc:52:45:c1:a8:d2:26:1d:f2:ab:b6:8e:b6:3e:e8:7e:
         2d:53:e6:92:80:b6:87:23:1b:38:b5:5b:f7:bd:fd:f3:c3:ff:
         bb:8d:af:fd:4b:84:c6:fd:b5:57:c1:f1:9e:cd:84:7a:be:45:
         f3:df:2b:7b:d3:d3:83:bc:78:75:d7:e5:92:0c:5e:25:cd:be:
         d8:fa:2b:37:cd:2e:9e:78:cc:d7:12:b9:66:4c:d4:f8:56:5d:
         82:04:62:a9:23:3d:a4:16:a1:0a:ae:c7:17:16:82:13:80:8e:
         3f:d4:33:a0:d9:66:8a:dc:74:80:7c:6c:8a:f6:b7:ba:7b:ef:
         0b:ce:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:58 2025 by rpki-client