Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier:          YRZwIa69hjtHZUKEV/ru1rHbX3Y0prDCCMq12sRBD1Y=
Subject key identifier:   59:22:4A:3E:95:AD:E7:24:6C:CF:02:EF:95:72:58:5E:2B:A5:EB:51
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       56A2C721F2D57CF9949A047B59BC468D52503DFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number:          0304
Signing time:             Sun 02 Nov 2025 22:21:16 +0000
Manifest this update:     Sun 02 Nov 2025 22:16:16 +0000
Manifest next update:     Tue 04 Nov 2025 00:29:16 +0000
Files and hashes:         1: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: a1C+hpzUTZtHk2FHBwHGm01zz+wU4bo5iettVF0Z6Ls=)
                          2: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: Sp3SopNcKakB7jI3Q/O4d4reeHmpO06eDlmoon4YLWM=)
                          3: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: Y+fE8BkqszrbIP4g4wpzOkGPcdjysr1CqPeEWpUGIuA=)
                          4: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: 2lcSwgY6plo6lzCSLskE1qyNDmDYzzc+dJyZYNREMVs=)
                          5: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: Hjdl2bOmP65XmU5QsjYT1k5MwE1O2FcmgRaRS1KXXyk=)
                          6: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: fq1tAY/Hvr8TiBRRAGWAcmB1gFi2EhTX6NTMAkPcoCA=)
                          7: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: 5odB5yWTm4uAB6rsgPg3I+OPxNXaHhdycLs/wC5tT3I=)
                          8: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: UsoK1E4xojwEmL5lGIIC2QJyIGhJDLI7BwOxgoRjb88=)
                          9: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: V3vQoWj/pcT74SkEXQYJqSIiwsCNzpVOZJ9AUjyQ4sQ=)
                          10: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: qS5l42jMTMud52+Q5WuCosVZYWIuJec8+7s4K9zvd2M=)
                          11: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: cyVUhf1TZuNChMUYn5qaQqNw6BdaLkM3NTVtQTPrLe8=)
                          12: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: 9CSAPHN+viGAg80cmPbSF9EDb77vYGOvsBdu/ZyZuPY=)
                          13: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: SfIJW5WPLYXsHY31oI4k3snKmNhXfICkKaFJev5pT9Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 00:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a2:c7:21:f2:d5:7c:f9:94:9a:04:7b:59:bc:46:8d:52:50:3d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Nov  2 22:16:16 2025 GMT
            Not After : Nov  4 00:29:16 2025 GMT
        Subject: CN=59224A3E95ADE7246CCF02EF9572585E2BA5EB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:af:0f:f1:03:41:86:90:e2:51:f0:4f:6a:95:
                    1d:fe:dc:d5:1a:c5:14:f7:8e:c6:c1:5a:fb:3b:b0:
                    1a:60:2e:97:09:d5:e6:db:f7:bf:d7:a5:6e:df:3d:
                    b9:f4:49:04:e6:60:10:49:27:7f:d4:70:75:5f:fe:
                    da:a7:ba:fe:8a:18:42:f7:04:57:c9:9a:11:b0:02:
                    b4:52:ac:1e:83:dd:cc:a4:fe:69:78:f9:1c:68:a1:
                    a5:c6:5f:07:90:8b:fa:bf:af:3d:31:70:62:71:67:
                    3d:aa:d4:64:cd:3b:e8:23:fc:b5:90:37:c0:5f:04:
                    3b:58:73:2b:a6:b8:ef:80:eb:15:50:e4:3b:bc:7a:
                    54:cc:77:76:a0:6a:dd:e8:4f:da:e3:e1:77:1e:fe:
                    3f:99:65:81:32:df:40:2a:71:a5:45:5e:0a:52:f9:
                    b6:b9:df:23:34:d4:7a:ef:85:97:cb:7a:c6:e5:04:
                    f7:78:6c:b5:9c:99:3a:5c:ca:3f:80:57:86:68:96:
                    81:44:f7:16:cd:a3:a6:71:80:86:c4:6a:f6:2e:2c:
                    a5:ff:8a:7c:88:87:39:f2:98:af:1c:fb:e7:e2:29:
                    3f:29:38:bc:03:d4:29:96:2b:33:e0:8d:81:95:df:
                    43:c4:99:cd:a3:7c:40:ab:61:99:ca:8b:15:13:fd:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:22:4A:3E:95:AD:E7:24:6C:CF:02:EF:95:72:58:5E:2B:A5:EB:51
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a2:9c:96:c8:ae:db:ea:eb:4a:64:8b:c2:63:33:c9:45:2b:
         08:26:0a:c2:a6:84:f0:18:1e:23:5d:d1:ea:d9:ab:aa:a6:43:
         eb:31:95:74:1a:9c:eb:ae:e1:af:05:c1:4b:9e:80:02:19:b9:
         e7:b1:0b:99:e8:d6:b0:fb:4d:30:ae:c7:22:4e:cc:67:79:27:
         5b:c7:04:2b:da:b3:68:92:36:0c:f3:fc:0f:de:3b:55:a0:e2:
         48:29:b7:15:64:b8:3e:8e:0f:12:bc:b9:9c:1b:8b:51:9f:90:
         11:c3:a6:c5:72:8a:56:36:f0:d2:11:84:f0:90:d3:6b:b0:b8:
         d4:27:7e:15:c5:41:cf:0a:45:5b:7a:2b:b0:00:b6:01:1b:44:
         f8:84:9e:61:be:6b:51:a2:b5:7b:e7:29:cf:67:d3:90:13:36:
         17:e5:59:5e:74:81:91:a4:bc:20:48:58:05:d3:8f:6a:df:c2:
         36:07:16:91:97:a2:08:57:1d:1f:3e:09:4a:f3:bf:71:01:c3:
         67:5d:8a:24:b6:78:66:08:73:47:aa:25:ad:8f:66:a8:92:ad:
         fa:ef:26:27:13:1f:e0:42:64:04:f5:68:f1:f1:4a:8f:e8:67:
         2c:fc:b2:9a:e2:c2:db:35:8d:de:ff:2f:ac:44:f8:91:a5:0b:
         7a:83:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:30 2025 by rpki-client