Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
File:                     2431B5DDF8166029A0033562C55895BEC665B28A.mft (raw, json)
Hash identifier:          rx7nb0UXUgViIgH+KE01W5QObPBdITC16k4qe+4pH/8=
Subject key identifier:   81:12:F9:39:FF:AA:B4:16:27:C8:9F:9F:CE:17:E6:9C:7A:66:B6:B2
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       2E3B66157B010A2B3463DA2908D2DBA38556013A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
Manifest number:          01BF
Signing time:             Mon 03 Nov 2025 12:49:50 +0000
Manifest this update:     Mon 03 Nov 2025 12:44:50 +0000
Manifest next update:     Tue 04 Nov 2025 16:12:50 +0000
Files and hashes:         1: 323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (hash: 2UBG7d+bHwFW2FQvesDKoYV9SA5Z+hJVwX3I2WUsCkE=)
                          2: 3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (hash: 799mqDcBHmOpNJcFzHH4u8XHP1EAJbMtaVWcjtNUFMk=)
                          3: 3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa (hash: 6z3Jvn11u7WpggXzPyX3eztV00Cy6MKkHbiddjUnBHg=)
                          4: 3138362e3232342e38302e302f32342d3234203d3e20323632393938.roa (hash: 2kz4LIFLN85yZUgis3ptm+jWa2pLEzTOV44AlKX2mWM=)
                          5: 2431B5DDF8166029A0033562C55895BEC665B28A.crl (hash: nrj+LjcJz9UKz2M2+YIZmAmI2l8hT+cNEhnn3qN3jsk=)
                          6: 3138362e3232342e38312e302f32342d3234203d3e20323632393938.roa (hash: nhvgT2W2XZeOE4hWrQx6ZuaEM7BevykoJaZ3mrzlafM=)
                          7: 3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (hash: mFUm1wFbrB7vKcngHZCRhhCN5g1DTPFQpJqftmtVKgM=)
                          8: 3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (hash: jp7m+hi+KoBsfG3clAu9CPNSCYaNR5ai9lgzM1Y89VY=)
                          9: 3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (hash: 3StsKczt/UfxOpNfPOOnS9kOYhYaRu0pzgmOVeKkvAk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3b:66:15:7b:01:0a:2b:34:63:da:29:08:d2:db:a3:85:56:01:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Nov  3 12:44:50 2025 GMT
            Not After : Nov  4 16:12:50 2025 GMT
        Subject: CN=8112F939FFAAB41627C89F9FCE17E69C7A66B6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:c1:1d:63:2f:4a:0d:d0:55:9f:53:94:5c:
                    b0:0c:ad:cc:f3:64:df:2b:47:31:96:31:f5:01:d7:
                    73:5b:04:5a:1d:58:7b:7a:69:dc:65:7f:5b:ac:c5:
                    27:81:b0:76:a9:8e:7e:b1:1c:be:59:a8:30:56:3c:
                    e2:f8:ee:5b:a8:4c:b7:27:b2:33:f3:ab:55:3b:40:
                    31:51:2c:80:87:92:10:01:83:47:47:b5:58:80:6e:
                    1e:63:70:c8:20:40:07:87:34:48:2b:25:61:85:68:
                    ce:1f:df:54:03:3e:58:96:3b:25:47:80:e5:21:34:
                    ad:fc:32:e4:85:35:ee:24:96:dd:5f:68:6f:78:c7:
                    f7:66:c6:7d:b2:79:32:4a:f3:05:91:6e:be:17:22:
                    04:e8:80:57:52:54:4b:29:32:8d:39:5e:29:1b:e5:
                    34:9f:ec:59:0c:d8:36:77:5c:0c:ff:c2:60:b8:82:
                    f0:a3:da:77:49:91:fc:6c:d8:11:b8:23:98:22:1c:
                    5a:5e:c8:9e:6a:de:7a:71:60:e2:8a:d3:a6:26:bd:
                    78:30:f9:b1:1a:1f:22:50:53:99:dd:17:17:67:e4:
                    55:97:74:14:9f:38:ff:2f:e6:53:af:e2:21:fc:01:
                    71:a3:64:26:cf:a1:70:35:d7:33:74:92:c7:6e:c7:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:12:F9:39:FF:AA:B4:16:27:C8:9F:9F:CE:17:E6:9C:7A:66:B6:B2
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:48:80:a5:ef:e3:9f:bd:53:00:15:a3:b1:c9:79:73:1c:cf:
         92:7e:65:0a:e0:26:60:04:ad:11:74:12:21:2b:45:af:b1:38:
         3f:58:22:a7:b7:45:de:f5:c8:a3:83:78:58:5a:fd:ef:a7:46:
         36:87:16:f4:5f:9f:a6:87:fa:fd:da:5d:81:4b:04:6d:51:5f:
         54:3a:1a:6c:cf:40:68:94:c8:34:d2:b3:8d:48:1c:51:a1:1f:
         96:af:3b:95:77:72:c1:c6:88:6b:d2:ea:e8:61:50:ec:a1:b8:
         9a:06:d0:7c:b9:8e:da:d4:ae:b9:2e:6b:92:53:0f:de:c1:82:
         9b:94:18:5f:52:b8:ca:5e:cd:37:88:6e:a1:d5:37:e3:ca:7b:
         0c:ed:71:9d:13:fe:da:c1:fe:32:73:d9:f6:66:43:a0:df:3e:
         ed:88:3f:22:c1:e3:aa:1b:20:85:7b:c2:4c:65:f7:4a:43:37:
         2d:aa:c8:c1:08:6b:dc:df:e0:ce:14:fc:66:b9:1a:0e:05:34:
         2a:18:05:0c:96:ab:ea:2f:77:52:5d:0f:b3:f4:f4:d7:72:bc:
         df:c8:33:c3:b8:2b:3c:a1:28:b8:6a:43:29:a4:39:b6:41:3d:
         07:df:79:41:b2:c9:d1:05:86:2e:a5:71:7b:50:b9:4d:55:da:
         bc:55:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:56 2025 by rpki-client