Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
File:                     B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft (raw, json)
Hash identifier:          1XNAa8lk6593baeAl2PPSOu3UkdajbXPY/MClOi0pmI=
Subject key identifier:   5E:3D:59:4F:29:66:19:45:AC:CB:E0:67:4B:3B:CA:00:4A:D0:52:31
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       669447CC4A264FFB8827CA1CDDB38D2DF7A7D5AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
Manifest number:          0176
Signing time:             Mon 03 Nov 2025 23:36:00 +0000
Manifest this update:     Mon 03 Nov 2025 23:31:00 +0000
Manifest next update:     Wed 05 Nov 2025 02:14:00 +0000
Files and hashes:         1: B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl (hash: vKSwMWVmxg7XU0GXw8W1HtsV4iaB/eKvWDp3JsHWUTs=)
                          2: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: HJFC7iXGTFPZDU8AX26DfYJHqA8ZIk/nP70vX6+jQo4=)
                          3: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: CveRwIcrqNwQKM9zizyilPdp+fXc4SVnOCQsPgpHD6o=)
                          4: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: CYet3kKlZMq0bVz27G5Q21l43aX4pgm4MbAST0VmGkg=)
                          5: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: MAXqeMftrDx2qfIrNZeHi1Fg5BRXYViJaP7l5pPBgyg=)
                          6: 323830343a3363383a3a2f33322d3336203d3e20323632393038.roa (hash: 0NGsiRjwRCwvztO0HQSwZ5G2u2NyRn8qasG89BQU4fw=)
                          7: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: dGUuPMBAaOXlYlzrmpRc8TAZ4SZ3d8aZsmWcWxA6jcY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:47:cc:4a:26:4f:fb:88:27:ca:1c:dd:b3:8d:2d:f7:a7:d5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Nov  3 23:31:00 2025 GMT
            Not After : Nov  5 02:14:00 2025 GMT
        Subject: CN=5E3D594F29661945ACCBE0674B3BCA004AD05231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:6a:b1:05:65:e4:4e:0e:0d:7d:60:0b:db:
                    98:90:50:6a:7a:85:b2:cc:61:c3:87:2c:20:1d:00:
                    96:88:08:08:8a:13:81:45:9f:57:9e:5c:a6:d8:68:
                    ad:6f:e8:4b:23:42:74:b5:29:a2:f6:d3:db:78:7c:
                    09:dc:06:95:ee:28:a6:53:02:6e:71:3c:fc:90:b8:
                    8f:24:74:05:ea:36:a7:4e:bc:b0:fa:20:d3:b1:13:
                    34:75:f5:0c:5d:12:dd:03:7a:67:80:72:27:ec:1f:
                    ce:9b:19:3a:db:c4:82:e6:bb:e0:7c:0f:5a:18:b3:
                    18:09:11:bd:ba:6a:41:0d:ed:9d:2f:cc:b1:51:e6:
                    b5:62:3a:83:8e:29:92:ec:59:18:6f:34:ac:45:7e:
                    c7:0c:3d:b2:56:d4:37:af:fa:ca:29:16:48:2c:a0:
                    da:68:58:3f:8d:e4:dc:2f:95:01:6c:84:99:8e:a2:
                    67:5b:73:f0:51:66:89:71:4f:ea:fd:f8:cd:84:74:
                    5f:8e:70:9b:3b:98:f0:41:9f:16:43:0c:71:23:78:
                    c2:18:2c:0e:dd:97:69:5c:11:27:29:6a:d7:94:a6:
                    80:7b:6f:29:1f:37:b7:55:da:c4:93:d2:a3:3e:fe:
                    cc:90:c6:5f:e9:28:04:e4:e8:f6:64:8c:c8:f3:8b:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:59:4F:29:66:19:45:AC:CB:E0:67:4B:3B:CA:00:4A:D0:52:31
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:65:f1:a5:84:45:16:92:61:c7:a3:16:a2:02:3c:05:09:54:
         a5:fb:1b:22:88:71:9a:52:04:87:01:9d:63:fa:2f:4f:f3:78:
         b0:34:fd:fd:cd:bc:2b:52:7f:de:a0:3c:9d:68:5c:9b:54:6b:
         fe:9f:02:93:c6:be:14:71:7e:68:25:c9:04:24:5d:87:b8:8f:
         6e:99:90:c9:b6:28:bc:c4:f8:39:2d:7a:98:24:98:bc:c0:48:
         4f:78:70:8f:60:dd:38:6b:3a:37:53:01:2c:3e:aa:ce:93:be:
         2c:5a:4d:dc:40:eb:fc:2f:e3:f9:29:b0:67:a8:01:8c:2d:64:
         c3:df:9c:f2:0f:7a:00:27:93:79:3b:cd:d6:74:38:b4:fc:c2:
         e3:46:58:09:f4:7a:2a:8b:cf:8a:eb:00:13:f0:0c:94:2d:70:
         38:fb:eb:4f:ec:ef:7f:c3:a6:19:60:06:8c:b3:0f:2f:84:f5:
         dc:da:b4:90:ba:db:4e:53:a9:90:cd:39:ca:02:ab:0d:f6:27:
         dc:e0:b8:34:b9:40:88:ac:08:a7:16:63:9d:1e:bf:9f:6c:0d:
         4c:97:76:98:bf:d4:85:3f:fb:a5:f1:f5:35:58:37:f3:8c:b7:
         24:2d:71:f5:50:0a:ff:25:a8:47:13:09:c0:aa:b9:d5:c8:e6:
         7b:0f:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:25:59 2025 by rpki-client