Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
File:                     10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft (raw, json)
Hash identifier:          fMvBAXqA9lDDPdNczHBVt0QpL96rn3F4AyIkmFRFXM0=
Subject key identifier:   5A:4A:49:66:4D:45:F5:AE:9E:1A:26:00:6D:DA:02:10:01:03:13:73
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       523FE0ECECD65C19D9CA5E42EA30DBFA4776A9D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
Manifest number:          024F
Signing time:             Mon 03 Nov 2025 15:49:29 +0000
Manifest this update:     Mon 03 Nov 2025 15:44:29 +0000
Manifest next update:     Tue 04 Nov 2025 16:26:29 +0000
Files and hashes:         1: 323830343a316430343a3430303a3a2f34382d3438203d3e203631363839.roa (hash: Nt3312Jyd+MOcuUk6bzcZwwh2CuaHoVJjXZDckw3rhs=)
                          2: 323830343a316430343a353a3a2f34382d3438203d3e203631363839.roa (hash: hAhHwKerYs43yMnQC386m41KR8yVB+IsokXwu1cQdzE=)
                          3: 3230302e33342e3231392e302f32342d3234203d3e203631363839.roa (hash: wrXpg6SvSen7mQHQmN5CTLtxO1EXWtb8C2AgPH9+0yA=)
                          4: 323830343a316430343a3a2f33322d3332203d3e203631363839.roa (hash: qgVQm5moA9pCnfplA1mg6pE27lAvpE1TZZxffs96R8k=)
                          5: 3230302e33342e3231362e302f32332d3233203d3e203631363839.roa (hash: 9iRfxjbOTFpmKKzcHe3XlASDLXeHKHNBwN27kVX0v4w=)
                          6: 323830343a316430343a3a2f34382d3438203d3e203631363839.roa (hash: G5Yh1E+Bzs2qbMSb5DbJuWGION6XenrHh/N1zmIg4w8=)
                          7: 323830343a316430343a3430313a3a2f34382d3438203d3e203631363839.roa (hash: YVF7zdhIXJcUp9rSmOQKpkaLT6VxvxEyIUMD0aWNrQQ=)
                          8: 323830343a316430343a663030303a3a2f33362d3336203d3e203631363839.roa (hash: eb7mfnVxiLNwPZQxs3SjtebMzmQg1hxxOb3fu4xHFbw=)
                          9: 323830343a316430343a353030303a3a2f33362d3336203d3e203631363839.roa (hash: 0kYV5GGBkIBUkN5EO8Hn90Gz+TNdOvKe8mz4WDcVZ1c=)
                          10: 323830343a316430343a633030303a3a2f33362d3336203d3e203631363839.roa (hash: 2iN7yEAsJo7Vw/WC06Lv5d8kXsyvaUw5EJv0LILk2fc=)
                          11: 3230302e33342e3231382e302f32342d3234203d3e203631363839.roa (hash: DZgpMh/XDSsY4KR5pk+DjFRI80eDO3uG+VeUcdfhaSc=)
                          12: 10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl (hash: zIm/S1z0HKZXtV3/WQEU6bfxF5QtsrHxGEq4rBjiiWI=)
                          13: 323830343a316430343a3a2f33362d3336203d3e203631363839.roa (hash: 2kXocEERlpwEQrZoFJek1/gvAOK5FYVyfQOwonzy6CA=)
                          14: 323830343a316430343a383030303a3a2f33362d3336203d3e203631363839.roa (hash: 82mAvuloh9qSPMBujifoGa2S0i3aymF171XrLA5dUEQ=)
                          15: 323830343a316430343a623030303a3a2f33362d3336203d3e203631363839.roa (hash: KMU+XvyTpYt1VI6D+SjiU9CQEc3EVneCtokK8N3tt2o=)
                          16: 3230302e33342e3231382e302f32332d3233203d3e203631363839.roa (hash: enAWJhcAvUyzYJDGBJyDU5CoUBpxGjYRhoKQ+o2/SB8=)
                          17: 3230302e33342e3231372e302f32342d3234203d3e203631363839.roa (hash: uivicO+WxNeHSbZi3VDHCKox0HsKFmIQDYpR2bZucDM=)
                          18: 323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa (hash: 6a8yy0r6CK4l1TXNUQzM3zb9CahYHSvBK2E5lFfmAcA=)
                          19: 3230302e33342e3231362e302f32342d3234203d3e203631363839.roa (hash: qF5e/j43vFVU0Rakjs77MNMnu63OVmULX8ahRcW9xQ0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:e0:ec:ec:d6:5c:19:d9:ca:5e:42:ea:30:db:fa:47:76:a9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Nov  3 15:44:29 2025 GMT
            Not After : Nov  4 16:26:29 2025 GMT
        Subject: CN=5A4A49664D45F5AE9E1A26006DDA021001031373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:63:69:42:6c:02:78:e4:58:bf:be:e2:76:
                    cf:4e:85:7b:6b:e5:11:8e:77:88:d3:66:5f:16:47:
                    35:dc:60:f9:92:4d:cb:95:25:a9:0d:be:9c:c9:9a:
                    cb:4d:2f:8b:e6:6f:23:67:10:cf:88:9a:3f:12:6d:
                    7d:ee:76:a9:4c:a4:01:ae:0f:b8:f1:46:71:56:02:
                    48:45:5b:51:40:fd:b2:cb:03:7e:67:3d:54:e7:09:
                    c8:24:a9:0d:c1:c6:60:6f:fb:48:4c:f5:55:34:72:
                    00:e6:d8:9b:7a:1c:2c:73:e5:87:58:45:ae:29:a6:
                    d0:72:4d:41:9c:1a:31:48:5d:fd:40:02:66:fe:8d:
                    d9:fa:d9:8e:b8:a2:40:b8:5f:c3:84:21:3a:14:87:
                    79:a7:7a:a3:db:90:1f:e9:4b:98:4c:d0:0e:2d:ee:
                    f6:02:6a:7d:cd:ba:fa:48:39:ad:96:5d:04:16:7b:
                    12:71:06:2c:cb:2a:66:00:da:50:58:0a:c5:60:7e:
                    6f:ad:02:60:6d:11:aa:0e:29:54:a0:bb:22:24:90:
                    4e:92:16:f2:01:3a:0f:6f:e3:e2:20:07:84:9c:46:
                    80:f5:69:87:e3:25:7c:28:c5:4b:a4:32:24:4d:d5:
                    6b:21:7b:44:d7:80:0a:38:af:7c:e9:1a:c4:8a:79:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4A:49:66:4D:45:F5:AE:9E:1A:26:00:6D:DA:02:10:01:03:13:73
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:e1:95:ca:33:eb:98:a1:4b:ac:64:4d:32:b4:8b:0c:8b:
         8a:7a:ae:96:48:40:49:39:5b:f9:92:bb:4b:21:e7:7e:29:ca:
         79:1d:9d:4c:9e:32:d5:ef:54:1f:a0:69:1e:29:b8:bb:35:90:
         49:65:23:fb:4b:e3:42:40:62:03:17:72:4b:39:b4:30:6b:43:
         97:3e:d5:b8:56:4f:51:e5:ed:fa:0d:b4:52:3f:f9:ce:29:48:
         cb:97:36:af:eb:f7:b1:24:2b:83:ad:4c:1a:86:5f:96:e3:01:
         ec:25:fa:7a:a3:a7:3d:51:e2:ae:07:fd:72:2c:42:5f:38:16:
         7a:ed:43:e2:55:c2:f5:2c:a1:ce:a6:41:7f:58:2e:9e:a8:3e:
         8c:75:4f:30:00:8d:04:e1:db:01:2e:71:9e:b8:4d:4e:04:9e:
         fa:05:5e:dc:b3:0e:69:24:63:50:38:9e:99:12:74:0c:38:2b:
         c6:3e:67:69:76:45:6c:7b:86:9c:74:ec:b1:2e:b6:26:bb:0d:
         ec:2e:4b:a7:c8:80:98:e8:57:a2:6c:63:d1:29:4e:a0:45:5a:
         78:61:10:86:2f:c4:fe:7b:9e:18:01:5f:0f:e4:3b:28:af:24:
         1c:33:21:db:d1:09:eb:74:86:64:2b:34:06:60:d0:04:c6:00:
         66:af:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:53 2025 by rpki-client