Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
File:                     A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft (raw, json)
Hash identifier:          Bsl89d5r72kHP+RwKW/5xZF3uU/eZv6mcwYE4HnYS9o=
Subject key identifier:   57:99:0F:3D:2E:A2:6A:8C:37:00:8C:27:8A:21:28:E6:9A:FB:6A:E3
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       1E248EE26E60ADE15190026B48323255F330FC53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
Manifest number:          02A4
Signing time:             Sun 02 Nov 2025 20:44:01 +0000
Manifest this update:     Sun 02 Nov 2025 20:39:01 +0000
Manifest next update:     Mon 03 Nov 2025 22:55:01 +0000
Files and hashes:         1: 323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (hash: DkfHQogdGXNjUjZ63waB5D391I/cftZbVcH3UHHgFSc=)
                          2: 323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa (hash: uJAH6jRkldzjavl3BlQd294900kR7c5mVBFZQMLoFqo=)
                          3: 3137372e38342e33382e302f32332d3233203d3e20323632353738.roa (hash: WQpHptjd4tEPNxwZ9App0sa/zoJNAGRry113QvQ1z7g=)
                          4: 323830343a3635383a3a2f33352d3335203d3e20323632353738.roa (hash: HOM+vggoZRZnSELrjnIsiuO8+fswV7/hT/y/Oy3hKw0=)
                          5: 3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (hash: tJSLNOPUATL/ZYsPP0u3iwKhJABW7N/SFZ5IwYiO4NE=)
                          6: 323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (hash: iYpaNUeA8J89nt77wG3ZXWX9zpxiaqGElNauL7cNi3E=)
                          7: A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl (hash: t9vVA5W0e7SJmPaHBC+/3AooAwVaFbjc6WIn9UY5o8k=)
                          8: 3137372e38342e33342e302f32342d3234203d3e20323632353738.roa (hash: qXloB9e8NXgABss8+yUjKHId7pJc1a4r8AzfexCTkpQ=)
                          9: 3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (hash: aIMX50++MRvywxLQ3t6jesPjkyDCIsNHIt+MPRF4TTI=)
                          10: 3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (hash: VEnB/oVoNxtuhPOMCxDhxUutNWkYQBmYlvSAp4b97uE=)
                          11: 3137372e38342e33352e302f32342d3234203d3e20323632353738.roa (hash: mqO9e2zGU39a5LLjmEexdBC674EQ9YArU5jggklOzOo=)
                          12: 3137372e38342e33322e302f32322d3232203d3e20323632353738.roa (hash: 2hv7hOcuHTKCojMGOziPk14njKLCj3OPF31Osmz5Dd8=)
                          13: 3137372e38342e33362e302f32342d3234203d3e20323632353738.roa (hash: iTXBL2E4btXMNvCiALTjEj4aWV2UY+cMw6vdv+7JkfU=)
                          14: 3137372e38342e33322e302f32342d3234203d3e20323632353738.roa (hash: X0iD1atVsTwMBLm6pc65Td8wKbMN7QvopeldfZjePxA=)
                          15: 3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (hash: hT/VtbO6bsbMhxy9M8bb/kqOGbx+Q3T9OxevEt6OSGQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 22:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:24:8e:e2:6e:60:ad:e1:51:90:02:6b:48:32:32:55:f3:30:fc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: Nov  2 20:39:01 2025 GMT
            Not After : Nov  3 22:55:01 2025 GMT
        Subject: CN=57990F3D2EA26A8C37008C278A2128E69AFB6AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:af:3a:2e:3c:af:a9:eb:9f:5d:e4:30:82:
                    29:36:ba:4c:46:6c:49:31:3c:ca:ec:f3:59:f0:a8:
                    29:3a:28:f3:a6:be:b6:72:00:99:db:f8:90:da:8a:
                    c7:e1:f4:a3:f0:2e:b7:ce:0b:45:8c:ec:71:1e:27:
                    45:2b:9a:7a:87:a8:1d:74:28:e7:38:9d:ad:0c:b1:
                    5d:de:62:03:66:53:ae:15:35:17:64:9c:9a:68:13:
                    75:77:e5:3a:1b:b1:01:bc:14:34:f8:48:62:93:75:
                    83:c5:98:e6:62:ab:85:31:30:be:47:df:56:94:4d:
                    a2:e1:7e:2f:e3:37:48:05:8a:8f:d4:b3:51:1b:67:
                    be:39:12:1c:c3:28:38:0d:25:cd:4f:b5:7d:a8:be:
                    4d:3e:e3:95:35:9a:0b:75:98:62:af:1b:ae:a9:16:
                    a0:65:4a:5f:7a:60:28:cd:0f:b1:e8:4c:0d:34:22:
                    4c:61:5f:dc:be:23:f8:9a:b5:89:f9:a4:64:64:37:
                    46:36:3f:21:fe:f6:a5:0a:bd:f9:8f:9a:91:8e:41:
                    50:c4:73:ac:6b:a1:85:fa:b0:09:77:c4:39:63:64:
                    50:ba:8c:1e:f1:8f:6b:81:0a:fb:90:28:03:4a:90:
                    2a:ff:a9:fa:4b:b2:25:78:b5:c6:be:a6:17:d2:c1:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:99:0F:3D:2E:A2:6A:8C:37:00:8C:27:8A:21:28:E6:9A:FB:6A:E3
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8b:6c:ff:4f:71:d0:0d:d1:f7:2b:fd:77:30:f2:c2:fb:e8:
         ec:e7:17:b6:09:f6:c5:88:8b:78:eb:76:46:d4:d8:f0:15:1b:
         71:6a:17:63:7d:7a:e0:a5:29:81:b7:4b:71:34:80:f5:5a:3a:
         74:e7:33:57:d6:d3:18:d0:ca:f7:70:7e:6d:17:9e:07:22:3d:
         60:f1:32:34:0c:82:3c:0e:e9:19:4f:08:59:24:f8:74:26:96:
         61:1c:2c:5e:1c:43:31:78:48:78:56:59:b7:02:87:a2:17:be:
         fa:f3:d9:70:99:79:57:bd:d5:5b:24:f6:17:73:1c:5d:d7:05:
         70:3f:3e:cc:dc:cc:ed:f0:1a:10:f2:5a:c7:bd:44:ff:4f:e3:
         bc:26:43:73:4a:b6:5d:63:41:50:70:2b:33:f8:42:12:71:75:
         25:39:25:91:e8:98:58:2d:b3:e2:2e:97:a4:9d:a1:66:a4:94:
         d4:bc:f7:4d:52:7f:0b:8c:8f:c4:76:3e:ca:15:10:82:2f:90:
         12:80:19:14:68:79:19:fb:d2:48:a2:77:bc:e2:69:c3:bf:28:
         11:7a:27:cd:c6:ec:6e:7a:7f:ed:e3:2b:c6:72:19:66:f4:d1:
         83:7f:14:f7:f0:c9:5b:fe:f2:60:d3:57:bf:6c:59:40:bb:a3:
         62:2f:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:24:22 2025 by rpki-client