Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.mft
File:                     5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.mft (raw, json)
Hash identifier:          DgBlmWDW1ZdvoZjK8ntFkCEE7vCaOwb/BCaDiFWPCZo=
Subject key identifier:   43:C5:86:7E:E9:B4:5B:31:5A:95:F9:71:FF:B6:2C:FE:90:C8:7D:70
Authority key identifier: 5B:97:EF:7D:C5:90:1D:C0:DA:1E:C6:96:4B:07:E5:C2:A4:5A:EE:92
Certificate issuer:       /CN=5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92
Certificate serial:       75927F4BEDBB5D3DB68A3A3D438A8EF933288DB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.mft
Manifest number:          0258
Signing time:             Mon 03 Nov 2025 07:58:23 +0000
Manifest this update:     Mon 03 Nov 2025 07:53:23 +0000
Manifest next update:     Tue 04 Nov 2025 10:21:23 +0000
Files and hashes:         1: 323830343a316161383a3a2f33322d3438203d3e203631383734.roa (hash: eWlvwPj1mV061UNlnS5DnUIu+SOuB70gs5ThCKBycYg=)
                          2: 3133312e302e35362e302f32322d3332203d3e203631383734.roa (hash: M8h84hKM9B02DTVKtzkkI1zrdlYgmRe8Fq4Pt89cvtI=)
                          3: 5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.crl (hash: +eR48w55GPQGquU3Xn0z4oZVMM/PWqH0bdjiMaoZgvM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.crl
                          rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:92:7f:4b:ed:bb:5d:3d:b6:8a:3a:3d:43:8a:8e:f9:33:28:8d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92
        Validity
            Not Before: Nov  3 07:53:23 2025 GMT
            Not After : Nov  4 10:21:23 2025 GMT
        Subject: CN=43C5867EE9B45B315A95F971FFB62CFE90C87D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:82:0e:e1:f4:f5:df:24:a0:74:2c:cf:e5:
                    1f:6a:e5:6d:82:d7:01:84:0e:da:c3:41:4b:22:dc:
                    be:14:4d:2e:90:4b:b5:2c:51:75:4e:af:8f:01:d6:
                    03:43:43:28:e8:a3:f5:c3:09:c2:b2:1b:c5:bf:c1:
                    88:f8:9b:a8:e3:bd:c7:f9:f6:c6:92:55:86:df:4a:
                    2c:3d:15:55:22:1f:77:5d:d4:e9:c1:47:07:df:1b:
                    5f:01:69:d7:36:bb:57:98:55:b0:e7:f4:7a:e3:8d:
                    5d:10:aa:23:4d:e6:3c:fc:90:8e:f1:a7:0e:66:f9:
                    1d:a8:98:a4:98:c6:35:a5:6d:68:c7:ea:3e:01:2f:
                    b0:e5:08:9b:83:de:fe:1c:9b:0e:7f:87:7b:f8:96:
                    30:15:59:85:83:a5:ef:df:52:03:53:1c:ea:b8:14:
                    4a:6c:eb:73:21:47:0e:87:d8:02:30:2b:b8:14:87:
                    dc:02:fd:8f:45:73:23:46:f8:23:c9:16:c6:7a:81:
                    c5:74:43:8f:e6:97:e2:29:2c:b3:af:aa:fd:03:e2:
                    bd:22:05:1c:12:c3:ca:54:3a:c5:52:2d:e6:7e:3d:
                    27:2f:c5:06:2e:be:e0:ed:5c:8e:2e:b8:7f:22:35:
                    cb:dd:cb:2d:3b:76:d9:ba:be:39:41:da:98:1a:10:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C5:86:7E:E9:B4:5B:31:5A:95:F9:71:FF:B6:2C:FE:90:C8:7D:70
            X509v3 Authority Key Identifier:
                keyid:5B:97:EF:7D:C5:90:1D:C0:DA:1E:C6:96:4B:07:E5:C2:A4:5A:EE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dc:3c:dc:bc:5e:25:77:90:8c:39:25:6e:f1:8e:a2:d6:1d:
         fc:a3:9b:fb:78:24:74:4c:1f:1a:f3:c2:8c:44:3c:81:fa:31:
         be:c6:58:6c:6f:7c:c7:20:e7:44:b2:c9:6b:89:f8:82:8a:cd:
         85:60:3c:bb:84:29:10:cf:5b:b7:41:7e:13:2b:95:8d:e4:b9:
         18:d5:19:5f:1d:8a:22:c6:54:f7:a8:84:11:6c:72:03:0b:ba:
         82:9b:21:31:22:12:dd:b5:62:38:f7:f1:61:50:02:ab:d2:f8:
         69:93:3d:39:d0:e4:b0:12:fe:16:b2:bf:6e:18:c0:25:65:3a:
         8b:e8:0f:6d:83:77:44:19:5e:2e:71:8c:b0:fe:6e:bb:93:9a:
         04:9c:99:fa:5d:0e:c4:3d:3b:43:a4:e8:88:33:9d:e9:ae:80:
         33:bc:80:ae:df:8e:87:3a:98:86:35:11:97:16:d3:3b:5a:14:
         9a:4a:56:9a:de:b3:ab:55:60:d6:33:1f:f6:94:fc:01:33:23:
         45:91:7a:c6:6f:67:ef:78:f4:0a:80:47:a6:7f:44:65:74:2c:
         6d:fa:a6:63:a0:8c:62:46:c3:ec:1b:75:83:23:14:a3:2d:ed:
         42:24:70:e1:7a:09:9b:a5:88:c7:dc:91:c2:56:34:d5:6d:79:
         9b:af:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:36 2025 by rpki-client