Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.mft
File:                     B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.mft (raw, json)
Hash identifier:          XFzPLBs4BJyVyR8wcJabL+DLh56X9J50JQvIFuTu6OQ=
Subject key identifier:   75:26:75:D1:B7:2D:70:25:40:5C:B5:E4:D6:E7:F8:3C:AA:9B:E6:26
Authority key identifier: B3:E4:2A:DE:F1:FC:5A:82:DA:19:33:D4:CA:C4:6B:23:B6:F9:AF:AE
Certificate issuer:       /CN=B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE
Certificate serial:       1C874993641124650AB77C8175E63163F240ACA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.mft
Manifest number:          07
Signing time:             Mon 03 Nov 2025 16:36:19 +0000
Manifest this update:     Mon 03 Nov 2025 16:31:19 +0000
Manifest next update:     Tue 04 Nov 2025 17:53:19 +0000
Files and hashes:         1: 3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa (hash: I90zbyBG2whs0dTRQGJLRzcosI7RATOACQ2suyEescs=)
                          2: 323830343a326164383a3a2f33322d313238203d3e20323635313232.roa (hash: rcYUhR+aap8B6ydtSQ9gnqXNKab3L87YAf0YQAPh+cY=)
                          3: B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.crl (hash: RRWdaDFfpUpAlAnbBFgAQM9IootXFJec/uSXP0qI0Dk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.crl
                          rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:87:49:93:64:11:24:65:0a:b7:7c:81:75:e6:31:63:f2:40:ac:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE
        Validity
            Not Before: Nov  3 16:31:19 2025 GMT
            Not After : Nov  4 17:53:19 2025 GMT
        Subject: CN=752675D1B72D7025405CB5E4D6E7F83CAA9BE626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:3c:46:21:0e:d7:7b:1b:4e:df:e3:6a:be:
                    5a:90:0e:86:0e:af:12:7c:ca:6c:6f:84:6e:be:fa:
                    66:0f:d5:b8:b8:f2:5b:62:d1:63:06:17:11:cf:c3:
                    ce:07:cf:46:01:16:6f:50:b7:82:f7:66:7d:ca:4b:
                    47:bd:01:cb:8d:b7:5c:6f:70:f0:7f:ff:22:2f:1d:
                    52:01:02:4f:7b:61:83:eb:4a:44:43:65:ea:56:eb:
                    53:2b:8e:8c:97:6d:4d:a2:bc:d1:55:d9:d9:42:20:
                    bb:22:f2:6a:7f:80:49:35:d2:f7:81:cb:26:71:d4:
                    87:9c:05:20:ad:3e:51:62:cd:b4:c2:b6:27:7b:ef:
                    24:db:72:39:87:c1:6c:18:d7:2d:fc:dd:de:af:a8:
                    59:66:ea:a5:5e:16:69:f6:af:64:53:93:2a:be:0e:
                    e2:06:62:b2:71:5f:5a:69:54:d2:f0:4f:0e:e0:cc:
                    ee:f5:c9:5a:a5:76:63:be:93:35:76:56:b7:99:4f:
                    24:e9:08:3f:ab:e7:1a:c1:87:fd:b2:91:b0:ba:c6:
                    88:c6:38:58:66:08:95:d1:11:fa:3b:73:e5:29:25:
                    45:e7:1a:e5:30:d5:1b:dd:80:14:c0:30:4a:27:0d:
                    55:0f:2b:ab:d7:44:de:f1:d3:1e:9c:0f:38:4e:5f:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:75:D1:B7:2D:70:25:40:5C:B5:E4:D6:E7:F8:3C:AA:9B:E6:26
            X509v3 Authority Key Identifier:
                keyid:B3:E4:2A:DE:F1:FC:5A:82:DA:19:33:D4:CA:C4:6B:23:B6:F9:AF:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:f3:1c:1e:88:e8:20:1c:28:75:8a:98:f6:75:1e:b6:5a:
         0b:fa:90:f2:c2:b7:21:7d:b4:e7:9e:7d:01:c3:bc:30:a9:2b:
         2c:4b:ac:3c:25:1a:f0:0f:bc:bf:c2:ed:20:0d:09:70:1c:a3:
         99:3c:ba:17:68:f8:14:89:e8:c9:fe:6d:7c:8b:cd:c1:51:ea:
         85:00:01:8c:bf:b6:45:83:c7:b7:3b:25:eb:00:33:f0:cb:55:
         68:3d:dc:eb:b2:bf:d9:99:c9:8b:d3:c5:9a:a6:1d:f4:2a:1b:
         49:1c:9b:1f:ad:13:38:86:5e:eb:f6:41:20:12:2b:0c:5c:1e:
         c7:0d:de:cf:a8:96:f8:4d:3e:dd:7e:d8:55:d3:f6:03:a6:b5:
         22:48:6d:9d:af:e8:2c:59:be:45:f6:dd:42:ef:b7:63:46:b9:
         7a:4e:e3:09:08:ef:b4:89:a0:ae:6c:a0:46:5a:66:96:9c:f2:
         56:42:52:58:c1:82:d9:29:f8:ca:10:2f:c8:a3:ca:dc:3e:d9:
         2d:c8:a1:4d:d7:0c:65:c7:cd:3f:c3:45:20:cb:79:5f:a2:a9:
         0e:1d:e5:02:8e:02:53:3d:55:d1:39:22:77:52:61:f6:10:39:
         22:76:c9:44:8f:19:72:e6:de:e8:1a:a1:e2:dc:92:e0:0f:40:
         0b:8b:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:54:07 2025 by rpki-client