Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
File:                     CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft (raw, json)
Hash identifier:          z2gUjKzoh+ddQj4n2sB4u+vzLoDNUPcSnt4eH9gnGb4=
Subject key identifier:   72:E4:0A:60:E2:BB:AA:F3:DD:24:8F:57:99:FF:34:4D:86:A7:65:1A
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       52678CA54E566E215CDFF8E6E711EA48BF43AA6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
Manifest number:          0303
Signing time:             Sun 02 Nov 2025 23:40:05 +0000
Manifest this update:     Sun 02 Nov 2025 23:35:05 +0000
Manifest next update:     Tue 04 Nov 2025 02:56:05 +0000
Files and hashes:         1: 3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (hash: VHq8ZEyoowCZWXDzrootpXLcNjZPy/BNrxBkB8brJ5I=)
                          2: CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl (hash: 2UuAbYuOWeu3NKdGdYOd9q60bhDocw2xlS/uZt4M85o=)
                          3: 323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (hash: 8VEpB0xd0VX/j49eruyLM4U0ob1UYw5ULKbATLfjNDk=)
                          4: 3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (hash: G21rYQorQc2vMjNSJNaeitlhvIhWXGxuqhbE6L3iV9I=)
                          5: 3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa (hash: 01D5qhjJLkkhNf3Sz3aZcGRoiRACCWeyCYEQrfnlp+c=)
                          6: 3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa (hash: 76In6FY6+iuAeEYRByeAicyXGMlVYFf2X3CYH3s/a1Y=)
                          7: 3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa (hash: fVRhOOtcOeieEVXaAUm+KUqKVK9Kq80KJlnipzsXd8Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:67:8c:a5:4e:56:6e:21:5c:df:f8:e6:e7:11:ea:48:bf:43:aa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Nov  2 23:35:05 2025 GMT
            Not After : Nov  4 02:56:05 2025 GMT
        Subject: CN=72E40A60E2BBAAF3DD248F5799FF344D86A7651A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:47:7d:c4:d9:43:9e:43:63:17:00:c1:be:
                    f7:b9:c8:f8:1b:72:65:ee:39:5b:86:59:d0:ef:82:
                    39:c9:f7:bd:1d:3d:38:78:72:6f:2f:14:e8:75:82:
                    6a:85:9c:58:24:f5:fd:be:8c:c6:8a:55:b4:94:54:
                    b3:89:95:9a:79:74:fa:3b:1b:23:45:b8:a2:bb:c1:
                    d5:fe:2b:65:ae:af:75:63:98:11:54:c4:2b:8d:2e:
                    a0:f2:5b:c6:14:9c:d2:dc:5b:81:f1:0d:03:ad:21:
                    53:18:ea:92:15:88:fa:4f:c7:90:88:ab:ef:a6:25:
                    ac:60:e7:0e:af:50:fb:f6:76:fb:9e:45:67:aa:39:
                    7b:b8:ae:e4:a9:57:24:40:06:75:2a:2a:5c:14:e7:
                    4b:9b:2e:f6:1a:54:1b:e9:9b:50:e1:f5:36:e3:08:
                    af:98:de:69:cf:78:bf:48:1b:9e:4f:81:0c:c3:d9:
                    a0:ed:27:87:00:92:54:e7:1d:d7:dc:c5:fe:b3:4e:
                    c6:c2:1e:27:73:14:6e:eb:9b:c2:cb:4e:73:7a:e6:
                    4a:43:54:13:f8:10:6a:84:24:d3:5e:98:f8:3f:ce:
                    58:e9:c8:21:f6:a6:d2:3c:6c:20:32:c3:51:4b:30:
                    e8:b1:8b:83:a1:7c:bc:47:44:ab:4f:38:1c:5d:61:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E4:0A:60:E2:BB:AA:F3:DD:24:8F:57:99:FF:34:4D:86:A7:65:1A
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:22:55:dd:c0:65:28:03:c4:4d:ab:f9:5e:e2:1f:ea:1e:de:
         ee:8f:a4:f5:17:27:0d:ff:aa:cb:5e:c3:9d:41:2c:e1:a1:18:
         84:67:00:5c:a7:a4:4a:8a:73:11:ec:cf:b9:b8:96:97:b3:40:
         20:a3:46:83:79:8a:fa:ae:cb:26:9a:23:dc:9d:a2:56:73:bf:
         73:82:d8:5b:75:de:ff:e8:8c:5d:c4:fd:9d:0b:e7:ae:9e:ae:
         97:56:39:7d:5c:88:fa:6f:89:d4:12:24:dc:c1:c9:f9:5c:27:
         e2:9b:fe:c8:ec:d8:56:cc:b2:63:45:c5:a4:09:d0:cc:83:05:
         77:12:55:9f:92:4b:6e:59:b9:7c:78:9b:7f:88:e9:51:ad:a1:
         d6:19:f9:45:ba:55:73:a9:c1:12:7c:02:d8:b7:83:aa:da:f1:
         dd:9a:a3:da:07:1d:af:18:04:58:a7:10:d5:9f:21:7e:c3:89:
         bb:97:72:12:fa:b8:00:05:43:88:87:ea:0f:fd:e4:18:46:6c:
         24:06:9f:f2:81:6a:ac:79:52:eb:40:e3:1e:27:af:7f:37:8f:
         93:70:e5:3f:d5:dd:ff:7a:7f:57:b1:1e:6e:56:89:1d:ca:17:
         4e:ee:00:00:a5:a4:90:9a:bf:95:31:44:9b:dc:74:5a:d5:2f:
         69:5f:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:37:00 2025 by rpki-client