Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
File:                     E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft (raw, json)
Hash identifier:          3ZN7QadDhno2JCiojD0mREZ0O396sgy+vFi1t0ujUEo=
Subject key identifier:   6E:E6:97:2B:08:D8:3C:9C:84:A6:CD:17:DF:08:71:E0:EF:0C:CF:04
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       3CCD68A6C36310E70AC503AFC519D448F3D37711
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
Manifest number:          0287
Signing time:             Mon 03 Nov 2025 08:48:52 +0000
Manifest this update:     Mon 03 Nov 2025 08:43:52 +0000
Manifest next update:     Tue 04 Nov 2025 10:30:52 +0000
Files and hashes:         1: 3137302e38322e342e302f32322d3234203d3e20323636343333.roa (hash: b/Zm6CJPfwWN47+L36utGZhmWMOak2gazTH2hP371BA=)
                          2: 323830343a333762633a3a2f33322d3332203d3e20323636343333.roa (hash: GCJghJccnE7+LrxXikNqUo+7cp/majrAplA7/0bl/Sk=)
                          3: 34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (hash: FxKFICEQyRLWaja1zhuNJ5BlZPLEz3p9yAyXQ7ftl64=)
                          4: 3133382e3138352e342e302f32322d3234203d3e20323636343333.roa (hash: n8S2COXT7FsJis/4Ekfbx3z3cwFdOm+NqrDeR9NrRhU=)
                          5: 3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa (hash: UxFzZ8WfxRekPlsHdoXcpFmzdBByfdNKSoJ2Ksi0fUY=)
                          6: 3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa (hash: 0+nFMdCLym7Rsl6HvblfjhZQUqbxHP0qWYbL35iKgYc=)
                          7: E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl (hash: kxedf1YebS4xFmwa+vhYWZhb7yFLSlmLgWiU4BR40jg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:68:a6:c3:63:10:e7:0a:c5:03:af:c5:19:d4:48:f3:d3:77:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Nov  3 08:43:52 2025 GMT
            Not After : Nov  4 10:30:52 2025 GMT
        Subject: CN=6EE6972B08D83C9C84A6CD17DF0871E0EF0CCF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:e3:d0:1e:3c:cf:a8:4f:4a:c6:05:8d:0f:
                    75:f5:45:c7:c3:7e:d0:74:57:c3:31:13:8e:a5:22:
                    8d:2f:a3:52:36:f3:d7:31:14:04:f4:b4:df:76:79:
                    d7:81:c6:7d:e7:8a:a1:7f:fb:a0:7e:e4:d8:01:81:
                    7f:48:3d:42:b9:e4:16:90:b7:0e:a9:58:b4:76:d3:
                    14:4b:02:eb:17:74:48:23:0e:a8:8c:74:e7:be:85:
                    81:c5:d2:1e:fe:92:59:44:c3:7c:40:5b:6b:1e:bb:
                    50:bc:16:02:7d:3d:8e:63:65:cd:6d:d0:ed:2d:93:
                    07:af:f4:af:8c:d0:cc:c5:ec:e1:e4:95:76:72:68:
                    18:fe:a2:6f:f7:bf:fd:92:4b:45:7b:42:5f:d6:46:
                    e0:db:bc:13:26:4e:c4:88:7c:db:58:f0:91:da:19:
                    01:94:6a:d9:81:34:5f:f0:f4:bc:4a:79:97:20:7c:
                    5c:03:2f:96:63:56:f3:69:b6:f1:ab:54:26:6d:ba:
                    28:71:68:57:3d:2a:97:81:42:c8:9f:69:41:c8:2f:
                    b6:2e:fc:77:1b:db:31:ee:56:12:2a:19:6b:b3:5b:
                    fa:48:49:e0:52:aa:76:6a:bd:57:75:c6:e9:8e:21:
                    8e:dc:3a:12:f7:59:5e:ba:a1:52:87:1e:3e:a6:5a:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:97:2B:08:D8:3C:9C:84:A6:CD:17:DF:08:71:E0:EF:0C:CF:04
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:c3:7e:03:14:36:7b:6b:74:64:8c:8f:ab:b2:8c:d5:c6:
         3b:8e:0e:a8:27:d2:52:b3:d6:8b:84:fd:ac:23:f8:03:98:bc:
         bf:a6:1e:f7:c7:56:1f:7a:14:5c:ae:ac:fc:25:7c:ec:18:5a:
         5c:15:b2:6d:b6:4c:07:93:0b:c6:54:b1:29:4c:b6:ea:4f:4b:
         89:3f:4d:7b:12:0b:fb:a7:cf:10:bb:73:ab:02:70:bd:7e:70:
         7a:65:25:33:d8:cf:8a:66:13:b4:3b:bd:68:d9:7d:87:b9:c7:
         11:7c:b6:65:6f:93:97:e7:d0:b6:40:0b:47:62:6c:c4:91:de:
         5b:a2:b1:7f:96:43:7b:5e:45:ef:b4:17:f3:83:46:f8:a6:65:
         53:41:0a:6c:83:49:a7:e6:a6:af:35:39:a0:8e:9e:4a:32:84:
         d0:bc:51:ab:4d:ee:39:11:fc:80:fe:ac:1c:a2:14:d8:c2:6d:
         ff:52:55:97:7a:59:41:ff:98:50:7a:37:9a:e9:39:8b:e6:20:
         37:67:01:a7:41:1d:ed:97:43:7a:14:82:4e:2c:29:2f:4d:bd:
         21:2f:ff:ce:4d:85:78:16:b0:16:9c:6e:a9:82:eb:9a:5e:20:
         46:ff:78:30:24:36:87:e5:a0:3b:ba:0f:dc:88:a9:f8:c3:32:
         73:9c:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:40 2025 by rpki-client