Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
File:                     28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft (raw, json)
Hash identifier:          TVmUp7UftczqxLGdXOVs1neDZSQV1w9bkJ8ETP2oogo=
Subject key identifier:   08:85:27:96:5E:08:38:3A:4B:8D:F5:9D:60:EF:E2:DE:8D:68:AB:97
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       0AF6068D2E1BEC74E005DA0D92DED0D1951E3242
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
Manifest number:          0307
Signing time:             Sun 02 Nov 2025 19:06:43 +0000
Manifest this update:     Sun 02 Nov 2025 19:01:43 +0000
Manifest next update:     Mon 03 Nov 2025 21:31:43 +0000
Files and hashes:         1: 3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa (hash: 545HbYYN9NnHI0uHbB8qazrnE932EHK5MKEv+2F0wZE=)
                          2: 323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (hash: ujHCchh4HkVvX3qw8a/nPtLOfcPW0GsSKDirmNhvkk4=)
                          3: 323830343a376437343a3a2f33332d3333203d3e20323731353632.roa (hash: MxudmROzGdKah5Md9V9wV5jf3p8gXDHxjok3JD2Laik=)
                          4: 28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl (hash: pWm6U/OBx1TLWs9n46GhSak6Q/Ocg/f19IF56fDlu9A=)
                          5: 3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (hash: b6hyY042J0efcXpmB8FbhDcOH+Yyec/+LfGuo44Kr98=)
                          6: 3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (hash: MwakXQDp8VPS07RxEauyiv4qHuhatlLluKDPqt6YRhw=)
                          7: 3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (hash: P9yKXvhhlSkRsYakfdUQdMbTa083/HvMmg3R2Scgz/8=)
                          8: 323830343a376437343a383030303a3a2f33332d3333203d3e20323731353632.roa (hash: ZbPo6p/ScftCF/my+WWsLHegmB2sy1zC7mUueJ7++4Q=)
                          9: 3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (hash: 4Gk48kKTN9SsGmwdSfhYTt+Hcd5W1ygERzoSo+IqOwQ=)
                          10: 3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa (hash: lPi5xr0QE5vLiZ/FdvAP9K8viXX1Dd0AlCfXahGzr7E=)
                          11: 3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa (hash: VoAeRcDLop4iDqVWSFGZA36P/Mvk9Prgr43AZW8xkIM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 21:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f6:06:8d:2e:1b:ec:74:e0:05:da:0d:92:de:d0:d1:95:1e:32:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Nov  2 19:01:43 2025 GMT
            Not After : Nov  3 21:31:43 2025 GMT
        Subject: CN=088527965E08383A4B8DF59D60EFE2DE8D68AB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:53:d1:d4:9b:90:9a:81:53:59:5a:1f:79:
                    b9:53:b0:79:e2:a6:dd:d4:bd:0f:85:3d:0b:5b:e7:
                    bf:06:5e:f2:ee:be:a1:c3:75:da:a1:0d:6f:e8:84:
                    59:10:89:e2:e4:5d:28:5a:37:bd:b2:c6:4a:ea:e1:
                    68:ff:5c:00:a6:69:0e:de:65:85:f7:c5:ae:f2:85:
                    73:78:6b:a2:ad:77:8c:42:9e:2f:cd:2f:45:60:06:
                    60:d0:59:a7:ba:48:5c:a2:8e:24:67:9f:4f:b6:b6:
                    a1:b4:ce:d7:10:9d:58:4b:56:5f:fc:4a:c9:fe:93:
                    ba:d6:9e:ea:30:95:50:80:35:4b:20:9b:66:d5:13:
                    b8:9a:ad:e5:de:b7:34:d5:57:17:fb:1e:6b:9a:5c:
                    d1:ff:24:ae:ad:17:cc:d2:af:8f:e5:fd:7b:52:3d:
                    fd:78:99:c6:d9:3e:81:34:ff:86:c2:e3:5d:11:bf:
                    cc:c1:2b:8e:1b:20:92:da:2f:3c:6a:c6:cb:b2:d9:
                    11:3c:03:17:7f:39:6f:21:e4:7c:e0:98:bc:71:ce:
                    1b:74:f3:0c:cd:2c:c0:f2:92:c3:03:4c:59:e9:be:
                    4b:96:a4:c4:fb:99:69:2c:ee:a6:fd:4f:e5:01:2a:
                    50:a9:09:dd:ad:65:4a:be:a8:89:53:04:09:8e:0e:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:85:27:96:5E:08:38:3A:4B:8D:F5:9D:60:EF:E2:DE:8D:68:AB:97
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:0c:db:06:01:a1:83:d3:ed:5f:0a:b0:e3:a2:30:24:ff:
         c9:7e:2d:f0:20:31:d0:0e:78:e5:35:9b:c9:74:cb:4a:13:1a:
         4e:e3:55:07:76:6d:a1:83:8a:9f:ee:4f:52:8a:53:9b:cc:f5:
         de:75:e8:32:28:fd:62:fe:94:e6:70:37:56:dc:af:c8:4c:01:
         1f:a0:19:a3:a3:ed:1d:23:88:0d:9a:44:d8:ed:9f:1d:f3:73:
         41:0a:ec:18:a5:14:98:0d:d8:b7:b2:84:df:a1:ed:4c:c3:ce:
         aa:35:20:f5:25:db:c4:64:ba:f8:c7:61:d8:9a:df:23:bf:e9:
         eb:eb:a5:f9:89:fe:4d:ae:e1:90:c6:88:38:90:d7:5b:a2:50:
         8e:75:c3:5f:0f:04:82:65:01:64:29:5c:83:ab:99:9c:f8:84:
         63:13:05:3d:f9:02:1f:b5:fa:f3:c4:b9:29:fa:f2:4e:b0:57:
         f9:f4:bd:66:4b:25:d2:b8:df:87:28:e7:c9:f1:d2:51:99:c2:
         2c:4d:3d:ee:6c:0b:c4:65:3f:09:25:5e:14:c1:a5:9d:23:c1:
         3d:2a:b1:fb:62:9f:64:c1:4f:4e:4d:44:74:ed:dd:9e:90:64:
         cb:4b:23:18:19:de:5f:88:99:9c:a5:3d:9a:47:30:ac:4d:62:
         d3:70:c7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:12:23 2025 by rpki-client