Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
File:                     B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft (raw, json)
Hash identifier:          Wc+fm6uyvZn13BQpGCggbSMNtYZ2Qs1RK0MrEJfEoVQ=
Subject key identifier:   1E:50:50:80:C2:13:27:D1:18:0A:B7:F7:6A:22:FE:56:5B:39:28:8F
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Certificate issuer:       /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial:       7B4546B477335CF06AB68D8EA35319F6105E6CA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
Manifest number:          0302
Signing time:             Mon 03 Nov 2025 20:01:03 +0000
Manifest this update:     Mon 03 Nov 2025 19:56:03 +0000
Manifest next update:     Tue 04 Nov 2025 21:14:03 +0000
Files and hashes:         1: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: zqNX3MuIEatAVLDb0k49Nn2HHolj4rw/rTdQTMaWqfw=)
                          2: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: 89H6sqhwLq+OwyjFapd3XLt468pjg8feq8CkL0sljBs=)
                          3: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl (hash: EdVHvxunZmxH60FdmR2OLSb8mnkql4QDkkFH7WXBt8w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
                          rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:46:b4:77:33:5c:f0:6a:b6:8d:8e:a3:53:19:f6:10:5e:6c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
        Validity
            Not Before: Nov  3 19:56:03 2025 GMT
            Not After : Nov  4 21:14:03 2025 GMT
        Subject: CN=1E505080C21327D1180AB7F76A22FE565B39288F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:12:60:24:af:6b:bf:bb:92:b7:63:52:92:
                    e0:b2:e2:35:e9:1e:1e:1f:df:d0:f7:50:5f:5f:b8:
                    ea:e7:2e:71:95:33:9b:5d:91:27:f0:06:fe:dd:74:
                    71:17:49:70:2f:2e:97:aa:a7:2a:e6:ba:67:58:ad:
                    58:e2:fa:56:f6:20:ec:5e:5b:6e:67:31:26:d5:31:
                    86:c4:3a:9b:5d:0c:ba:f4:a1:ac:bd:3a:33:1f:f6:
                    9b:93:fe:54:20:23:21:2c:60:8c:5e:af:b7:14:11:
                    04:ba:06:7c:f6:e3:f4:d4:95:40:fe:12:5b:27:72:
                    05:b2:f6:ad:e4:24:bc:e5:0a:52:9d:0c:04:a7:4b:
                    40:bb:c1:87:36:91:b8:76:8d:8d:6d:f3:22:6b:d3:
                    8f:0a:ae:0e:fa:e2:41:41:1a:d7:7f:e4:9b:8a:cf:
                    89:4b:4c:b9:89:8e:eb:b8:6d:bc:8d:9b:b2:1b:e4:
                    6f:99:97:f2:84:83:28:36:f5:60:4a:de:7a:db:30:
                    e7:95:e9:b4:98:25:d7:ac:49:10:d5:1f:c7:f1:a8:
                    e3:a8:4f:5d:e7:c9:36:8d:3d:ad:1b:f7:d7:2b:39:
                    77:07:e9:ad:1b:3d:19:1e:20:12:49:c4:51:b1:13:
                    ae:1f:fd:64:d3:63:22:36:0e:59:bb:e2:53:93:6e:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:50:50:80:C2:13:27:D1:18:0A:B7:F7:6A:22:FE:56:5B:39:28:8F
            X509v3 Authority Key Identifier:
                keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:87:16:a0:a5:0a:bd:11:fa:9c:bd:88:05:dd:43:ed:87:
         65:0a:8b:de:9b:fe:ee:04:ae:a2:0b:61:27:ab:f6:26:31:b2:
         be:8a:17:c6:0d:14:43:71:11:54:3e:23:90:04:56:8d:6d:38:
         f3:cc:bd:bb:c1:b0:db:8a:ed:45:9b:71:4e:22:29:03:89:58:
         6b:9a:bc:d4:70:4c:59:f0:af:60:a3:51:f3:60:cb:47:a4:34:
         27:58:36:36:15:78:d4:02:74:a1:29:72:09:1c:1f:f5:1f:f7:
         c0:34:1f:61:2f:6b:5c:08:74:7c:5f:bf:ed:7b:77:48:ea:ce:
         d6:49:71:ba:98:0d:21:ad:01:fa:6e:a2:e4:19:95:bf:94:48:
         eb:0f:83:0e:f8:ce:9a:25:1a:82:5e:16:82:b3:d3:29:f3:ff:
         55:36:1a:9c:1b:f8:8b:dc:66:54:e7:0a:bd:de:46:71:c6:bf:
         5b:9d:d0:29:5d:77:7e:cc:45:19:7c:8d:3a:c1:f7:d4:99:c6:
         21:57:94:b7:30:99:75:99:1c:d8:11:4f:c4:25:3f:fd:5c:f1:
         14:be:10:ed:50:d9:c2:de:ee:0e:63:d4:58:9a:f0:b6:7b:80:
         e0:60:a6:8c:ee:97:56:25:e6:46:eb:dd:b3:13:99:4e:9e:2e:
         29:57:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:21:07 2025 by rpki-client