Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft
File:                     4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft (raw, json)
Hash identifier:          N5KJZO9JXELVNiFI98vYGGszK2yq/Plh93Ob7Mi8rLo=
Subject key identifier:   13:D5:55:AA:FF:A4:FF:0C:CE:F2:7E:17:43:EB:77:EF:2C:A2:B8:D4
Authority key identifier: 4B:FB:FA:A0:5D:90:56:4C:CE:A2:CF:D8:A6:05:09:E5:D6:EA:33:18
Certificate issuer:       /CN=4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318
Certificate serial:       7CC799E1C08D1C6B2D6ADCCFB82B091AC1703A5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft
Manifest number:          23
Signing time:             Sun 02 Nov 2025 20:33:26 +0000
Manifest this update:     Sun 02 Nov 2025 20:28:26 +0000
Manifest next update:     Mon 03 Nov 2025 23:40:26 +0000
Files and hashes:         1: 323830343a326332303a3a2f33322d3438203d3e20323635313937.roa (hash: mN/OEDsy7qIKISmNbS9vV/+xj04IBV0dHTjTLchzly8=)
                          2: 3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa (hash: phEiF9j2oLxxe9S+43T1k9S5SsCaUbB4wxsw5myW6RE=)
                          3: 4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.crl (hash: h9rIz0M5Lxg/k+gymoaU/btS48R2M7NZ3y/YP1N1Flc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.crl
                          rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 23:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c7:99:e1:c0:8d:1c:6b:2d:6a:dc:cf:b8:2b:09:1a:c1:70:3a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318
        Validity
            Not Before: Nov  2 20:28:26 2025 GMT
            Not After : Nov  3 23:40:26 2025 GMT
        Subject: CN=13D555AAFFA4FF0CCEF27E1743EB77EF2CA2B8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:60:55:cd:5f:74:c6:59:c2:e7:a5:87:6f:
                    36:c3:e9:90:e6:cb:89:7c:56:b6:d1:0c:2c:1e:f9:
                    01:8a:92:fa:e0:13:73:de:07:50:7a:03:cb:27:69:
                    b4:47:f0:fa:6b:bd:1d:84:57:1f:a8:a8:ba:a2:8a:
                    37:f3:bb:73:08:e3:c2:7f:51:28:89:3e:7f:65:04:
                    b1:6a:cd:85:c5:59:b9:0a:6b:59:50:d7:7c:73:6c:
                    44:02:1d:61:2a:ea:ad:a7:fb:96:44:0f:ac:ae:09:
                    42:6d:06:1d:cd:7b:31:dc:37:8c:42:0e:85:2a:40:
                    17:b8:36:88:ee:05:44:b9:c9:25:d1:c9:9f:f9:4a:
                    8c:de:58:56:da:1c:f2:c5:27:52:d2:c2:83:7c:9a:
                    b0:93:26:f5:bf:49:24:65:7d:94:0f:bb:51:0e:ef:
                    a4:7a:9f:cd:3a:19:9d:cb:df:7c:4f:a4:eb:30:83:
                    2f:3c:82:6a:eb:d6:0c:c5:af:b4:ad:fb:26:d4:fe:
                    09:c4:37:f6:e5:c9:11:86:40:81:61:8b:72:e6:69:
                    33:d0:45:e3:7b:ce:6d:e8:98:47:3e:f5:69:85:2e:
                    81:39:9d:fa:cb:97:d4:a6:c1:1c:4f:82:bb:11:e3:
                    d0:d3:df:3e:f9:e9:b8:5d:3e:a8:ed:fb:4c:d3:99:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D5:55:AA:FF:A4:FF:0C:CE:F2:7E:17:43:EB:77:EF:2C:A2:B8:D4
            X509v3 Authority Key Identifier:
                keyid:4B:FB:FA:A0:5D:90:56:4C:CE:A2:CF:D8:A6:05:09:E5:D6:EA:33:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:ea:d3:a8:c1:84:e2:d6:c0:98:69:d4:9a:b8:0e:f6:9b:
         b9:c2:28:ee:99:04:7c:86:38:f1:6b:86:dd:1f:29:7f:e9:01:
         d1:91:0c:a7:76:33:17:8e:ac:dc:ac:0d:49:57:60:cb:98:25:
         9d:90:ef:f9:59:d3:78:95:16:ab:1d:32:2e:9c:50:7d:9d:30:
         0c:cb:e3:e8:ce:71:84:35:7e:4a:4b:7c:de:40:7c:77:46:e1:
         32:00:d2:00:be:e5:b4:93:cf:69:65:39:88:fe:c2:d9:8e:31:
         2c:5b:92:a1:18:15:9d:af:ae:63:a4:f0:84:07:2b:c8:7c:67:
         20:26:32:b4:df:d5:b2:86:0b:4b:13:ba:98:e2:e6:fe:ca:37:
         cf:ae:bb:4e:9a:2d:92:3d:89:9c:20:df:b6:7c:1f:b0:81:51:
         4e:6b:e3:99:c6:b7:9e:0e:0b:5e:79:49:6a:16:ec:6e:a3:b4:
         53:c7:1f:14:30:66:b5:9d:71:42:46:4c:1f:77:da:e9:30:4a:
         e5:ad:f5:2e:d9:c0:47:74:47:5e:2e:87:17:c1:12:fc:8f:68:
         9c:a5:63:a0:61:e6:19:d1:f6:42:87:7d:f0:bb:34:6f:a0:d1:
         42:90:6b:bb:79:a9:b0:27:14:4a:d8:a0:2f:fb:9e:3b:9d:ed:
         be:60:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:05:50 2025 by rpki-client