Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
File:                     AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json)
Hash identifier:          qNTXguCrWQ2JeUENdxewiDIanUUZLreDHFVTmJvtQN0=
Subject key identifier:   C7:8C:D1:8D:64:85:B7:5A:16:21:11:D1:90:F3:41:5F:76:03:A2:78
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Certificate issuer:       /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial:       7CB4601767187BFDBF4AFBCB4AAC951EFF898EC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
Manifest number:          0288
Signing time:             Mon 03 Nov 2025 07:26:01 +0000
Manifest this update:     Mon 03 Nov 2025 07:21:01 +0000
Manifest next update:     Tue 04 Nov 2025 09:27:01 +0000
Files and hashes:         1: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: 77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=)
                          2: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: UvOi/ZT1aicBgWtPWrJpXA3ochSvMg4rQ0JcREvXNQU=)
                          3: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: d8gu9ptBCMqS7eW9x/zK+JYDxuuJS0KDEGnCGJEMVwg=)
                          4: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: L+wURX8qDiilFDOEbw7jdueN+IuJTCgt3ef+cdFsIBs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
                          rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b4:60:17:67:18:7b:fd:bf:4a:fb:cb:4a:ac:95:1e:ff:89:8e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
        Validity
            Not Before: Nov  3 07:21:01 2025 GMT
            Not After : Nov  4 09:27:01 2025 GMT
        Subject: CN=C78CD18D6485B75A162111D190F3415F7603A278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:73:ca:42:9e:fc:b0:52:83:84:12:e9:72:
                    6b:40:f5:17:20:88:2d:98:6c:95:29:21:ce:ed:92:
                    35:eb:fc:36:25:3a:4a:34:07:d0:5f:44:71:8e:55:
                    1e:d9:e1:09:52:75:78:c8:0f:d6:23:71:f7:6e:63:
                    d9:37:72:6a:29:97:58:4e:01:fe:65:d1:b5:08:12:
                    6d:b6:76:e2:ad:45:a0:8a:f3:01:3e:51:81:98:fa:
                    b5:80:9d:a1:30:1a:9a:7f:54:c6:7e:98:a5:f4:8f:
                    bf:e7:6b:58:df:20:e4:6c:da:a5:d4:4f:d9:80:30:
                    3c:5b:9f:d2:68:bd:d8:64:ae:db:e7:c6:2a:23:f0:
                    e7:b0:b4:e9:da:58:52:2d:7e:f9:bf:cc:85:3c:b4:
                    36:8d:a3:95:b0:41:1a:12:07:f2:97:ca:10:47:b6:
                    4f:63:73:6b:4d:de:9b:60:26:ab:84:fd:bb:68:53:
                    9a:64:ba:21:7a:c0:a8:de:b0:2b:36:46:e0:97:b5:
                    d8:5c:22:93:b0:a7:d6:8a:4b:a0:5b:7d:de:82:0c:
                    ef:1b:33:eb:55:23:eb:2b:9e:55:03:9f:2e:fb:59:
                    2d:4c:d5:95:b7:37:30:f1:b6:f2:77:fb:53:13:0f:
                    09:37:f8:aa:dd:36:d3:8e:df:78:45:61:f1:6f:50:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:D1:8D:64:85:B7:5A:16:21:11:D1:90:F3:41:5F:76:03:A2:78
            X509v3 Authority Key Identifier:
                keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:41:22:5c:0a:44:96:40:7b:27:41:48:91:55:ed:5d:26:cf:
         7d:06:83:59:52:be:91:9f:d9:83:40:df:d8:b7:f7:07:3e:ce:
         98:82:b8:3d:fc:50:a5:bb:1c:95:88:62:a4:c0:7e:ef:93:cd:
         9f:f4:e9:1f:58:44:70:e9:6a:3c:ea:00:3d:92:34:b3:5f:da:
         ab:eb:5a:90:2c:7a:ce:a8:72:69:d0:a3:33:61:c4:21:71:e3:
         51:1a:f2:e0:21:65:fd:ad:f2:cd:12:c5:67:e8:9a:7a:8d:be:
         70:27:af:97:ab:69:a0:c2:42:d9:ef:e6:e3:42:95:0f:7a:91:
         a0:31:46:cf:44:6b:88:57:12:ac:d4:04:bd:b3:ef:ed:a9:84:
         a6:a2:3d:c7:ab:6a:cd:fb:4b:d9:4a:33:e4:54:c0:61:b2:bf:
         1b:d0:52:fd:d3:52:89:e8:10:5f:01:00:6b:b0:61:b6:32:eb:
         89:99:4c:cc:73:2a:c5:0e:08:7f:b8:33:ae:1d:2e:3e:b5:03:
         4f:ce:1b:0b:69:69:a1:8e:6e:6d:e9:42:0a:06:bd:40:7f:c5:
         ee:25:02:fc:b2:ee:91:3c:5c:01:04:42:55:89:3e:e5:3d:23:
         79:bb:36:c4:e4:d5:de:57:56:e2:46:f5:bd:3a:a5:97:b2:fc:
         a3:78:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:37 2025 by rpki-client