Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft
File:                     4937C541E7F86C7930B257F315044E29E4FF02B0.mft (raw, json)
Hash identifier:          eIAPxvIEyynpq0mTOvl+qbIa6n9Z+e4ho9qG5hNGqM4=
Subject key identifier:   82:9B:CA:E8:FA:CE:56:5D:2B:CC:42:70:26:6C:8F:6C:13:CE:A6:FC
Authority key identifier: 49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0
Certificate issuer:       /CN=4937C541E7F86C7930B257F315044E29E4FF02B0
Certificate serial:       299E234D9ADA034E397F02454BE218D2FC9B2D7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft
Manifest number:          02F9
Signing time:             Mon 03 Nov 2025 17:07:40 +0000
Manifest this update:     Mon 03 Nov 2025 17:02:40 +0000
Manifest next update:     Tue 04 Nov 2025 20:28:40 +0000
Files and hashes:         1: 323830343a376235343a353a3a2f34382d3438203d3e20323731343235.roa (hash: bj7ErCQFHHqIJwtkYIaaOCFgwn/DYlM4geoKrYCtLJI=)
                          2: 4937C541E7F86C7930B257F315044E29E4FF02B0.crl (hash: OD2TDlbPP8BJ24um78+Ft/OxUgm8g6pzf2cw+pKmDgI=)
                          3: 323830343a376235343a3a2f33322d3334203d3e20323731343235.roa (hash: J1hm8G37zBray4NlTjJMTTpNjURrY2FIG8Or9rOmSDk=)
                          4: 323830343a376235343a376666663a3a2f34382d3438203d3e20323731343235.roa (hash: MUVXNarmcMcO30QmH4cfQsDxm/Y9lPasVtrpOxFZmiQ=)
                          5: 3230302e33392e34342e302f32322d3234203d3e20323731343235.roa (hash: 7R2hF0kVVu4KD5KvZ3+D1DVGCGxwlkQZBWEgRy3pgpU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.crl
                          rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9e:23:4d:9a:da:03:4e:39:7f:02:45:4b:e2:18:d2:fc:9b:2d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937C541E7F86C7930B257F315044E29E4FF02B0
        Validity
            Not Before: Nov  3 17:02:40 2025 GMT
            Not After : Nov  4 20:28:40 2025 GMT
        Subject: CN=829BCAE8FACE565D2BCC4270266C8F6C13CEA6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:c4:37:e8:f5:45:91:98:f2:3e:6e:bd:74:
                    79:9b:f9:46:01:0e:ae:52:91:02:7b:85:36:da:4e:
                    e3:b2:9e:4f:c3:c3:d0:55:30:e5:20:dc:ad:76:dc:
                    e5:d9:fe:1e:9c:64:45:29:fb:2b:21:dd:2c:4f:32:
                    a2:c7:1e:db:c8:08:d4:41:71:7b:35:84:75:a4:22:
                    44:54:74:5b:a6:d1:3c:ec:29:67:6e:db:dc:b0:e1:
                    fa:6c:c0:e5:73:c4:dd:ef:ec:e1:b1:24:33:8c:8b:
                    9c:68:2a:a7:ee:c2:f4:e6:f6:cc:7c:48:08:e7:4b:
                    73:7b:88:38:3b:cf:41:6a:67:bf:90:a2:e9:f7:6b:
                    67:ad:eb:9a:48:78:36:3f:bb:46:3d:5c:8e:bd:ae:
                    d4:af:e7:65:d6:a2:2b:54:ed:56:9a:3e:b9:b3:31:
                    d9:f3:05:2f:52:ab:41:c8:b8:04:49:4e:b5:1b:c8:
                    62:51:e8:69:0e:40:04:a8:d5:0d:70:c3:3e:5f:06:
                    65:6d:c5:47:ed:82:b9:ca:4d:17:be:8e:ac:ec:5e:
                    ca:7a:67:eb:00:53:a6:53:77:ad:17:80:4e:a2:8c:
                    ee:79:5a:fc:e4:37:9d:6e:96:53:44:be:e5:51:c0:
                    48:b5:87:37:68:ee:3d:76:a3:5f:fd:f5:d1:97:8e:
                    a9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:CA:E8:FA:CE:56:5D:2B:CC:42:70:26:6C:8F:6C:13:CE:A6:FC
            X509v3 Authority Key Identifier:
                keyid:49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:28:58:61:22:f6:3f:e1:54:f9:82:1e:e1:c0:bc:f5:1a:
         81:d4:45:5b:52:05:e7:65:4f:c2:28:59:65:ac:8d:18:29:b6:
         c9:50:31:56:bf:d1:f8:31:00:7b:ee:30:69:b5:a8:dc:4e:4c:
         75:7e:65:da:7b:7c:05:99:b9:84:b7:3c:7c:9f:f8:79:92:53:
         1e:c4:d8:05:f1:08:6d:33:0b:af:4a:8e:5c:ce:a2:da:9f:c9:
         61:8a:bc:72:7b:35:c9:e8:12:2f:5f:26:f3:c8:b5:51:62:14:
         70:77:f2:1f:1d:4c:56:a7:cf:c9:e8:32:85:2c:da:96:d0:47:
         f1:34:84:f3:4d:77:a6:5a:6c:48:74:22:8c:b9:a0:16:91:c6:
         be:25:e7:34:92:15:e8:2c:85:f1:d5:2b:ea:7a:f2:e6:44:91:
         2c:71:1d:4f:e0:0d:84:99:d2:72:48:ae:38:e2:91:ce:14:28:
         95:df:f5:32:c1:ba:f2:14:7a:9a:8b:ad:05:0f:24:88:2c:6a:
         9a:cd:a5:be:82:26:69:d6:77:1a:89:26:fe:2b:da:ae:dc:a4:
         bd:54:19:58:60:33:2a:a7:3c:5e:ca:e6:9e:68:29:bd:38:23:
         76:b5:3d:67:b1:0e:75:b5:d1:08:02:27:b4:1f:92:01:81:9d:
         04:4c:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:12:43 2025 by rpki-client