Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
File:                     2A63119ED3171CA655D3DBACD89FA128C88760E9.mft (raw, json)
Hash identifier:          Ls/YUTVo8PYIGoL2TRqnEeN3vx7+2OVxS1EP+xs+VZU=
Subject key identifier:   0D:2A:F6:7B:C1:ED:72:1B:41:12:CB:A3:48:62:4E:D4:B6:E7:E1:57
Authority key identifier: 2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
Certificate issuer:       /CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Certificate serial:       6DE20BDF1A2906E5CF5A3990E6F230D4E1C7EB81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
Manifest number:          4B
Signing time:             Sun 02 Nov 2025 14:38:10 +0000
Manifest this update:     Sun 02 Nov 2025 14:33:10 +0000
Manifest next update:     Mon 03 Nov 2025 17:00:10 +0000
Files and hashes:         1: 3138372e31362e3234302e302f32302d3234203d3e203238323630.roa (hash: 1SVXbFVjN8JtF2jCTVge2zltTBA7xJwnoGSDhWyCuto=)
                          2: 323830343a323865343a3a2f33322d3438203d3e203238323630.roa (hash: 7Dbfu1zcWThV/UZGw3CvPOgqCYGWhm6GuOkAn9KgKb0=)
                          3: 3138372e39352e33322e302f32302d3234203d3e203238323630.roa (hash: aEeRPTU9MMsoNjZ4MHFDDVhGJjPL8/DLn6hTIH4DDsY=)
                          4: 3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa (hash: unhHaQYULGC0/VmFLz/6JkbKqhI98mIcdDfJX1AtUWk=)
                          5: 3137372e3133302e302e302f32302d3234203d3e203238323630.roa (hash: p0UevZOdii/KW2bPf0yYOW8ejVYVJ+FjzqZKGs3sPnQ=)
                          6: 2A63119ED3171CA655D3DBACD89FA128C88760E9.crl (hash: hp5NrV6G9zZA6KprBCYVSOoq28MA58CgqNWuWaGpcYY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e2:0b:df:1a:29:06:e5:cf:5a:39:90:e6:f2:30:d4:e1:c7:eb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
        Validity
            Not Before: Nov  2 14:33:10 2025 GMT
            Not After : Nov  3 17:00:10 2025 GMT
        Subject: CN=0D2AF67BC1ED721B4112CBA348624ED4B6E7E157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:92:31:b6:7a:bb:7d:e2:31:f8:6f:4d:f5:
                    be:f9:70:aa:d7:01:82:aa:f0:12:b9:06:bc:95:f0:
                    5d:b9:cc:95:4e:85:4b:a1:eb:3e:bc:fd:f0:4b:5c:
                    f1:52:c8:79:0b:fc:d3:d2:e5:86:74:8d:7c:82:54:
                    ff:8b:09:0b:6f:f9:d8:4e:0b:8c:98:39:a0:24:71:
                    b9:4b:90:4a:69:2b:91:d9:67:07:4a:76:50:51:0e:
                    91:be:db:cd:1a:ab:8e:3e:64:88:3c:8d:37:7a:ed:
                    ad:9c:f0:6a:2f:ae:5b:e5:a7:c6:fb:6c:f2:68:a0:
                    e7:e0:01:6c:d8:e7:e6:a3:ea:9f:78:60:3e:74:0d:
                    9a:14:f9:c4:20:b2:0f:ba:bf:16:ef:fa:b2:ef:fc:
                    41:c5:22:25:98:36:5e:0a:f7:77:32:cc:25:23:1c:
                    24:96:cb:67:22:36:32:52:d1:da:ec:ba:e6:c3:20:
                    b7:7f:2e:5d:02:36:59:d2:1a:2f:f2:61:45:ee:87:
                    81:a1:c7:11:47:dc:0e:bf:98:cb:06:f5:1e:a8:9c:
                    5b:20:72:a5:a5:63:4f:22:55:d8:8b:23:70:fe:3e:
                    55:c1:c5:bd:4e:62:f2:a9:67:80:eb:61:8d:dd:2b:
                    58:9f:67:b4:a6:35:da:28:da:a0:74:6c:17:65:56:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:F6:7B:C1:ED:72:1B:41:12:CB:A3:48:62:4E:D4:B6:E7:E1:57
            X509v3 Authority Key Identifier:
                keyid:2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:9e:54:7f:52:5a:42:65:e3:3d:4b:f2:1a:7c:3a:57:99:
         cd:b7:d9:8e:10:f1:fe:a4:4f:5e:75:e5:dd:1e:8a:e9:10:04:
         63:b6:ec:5c:08:ea:10:2b:a2:f9:89:2a:96:b7:b8:81:17:f4:
         fe:7e:88:22:7f:6b:4e:84:8c:82:13:a0:19:7d:75:b9:ff:77:
         ca:1e:61:5b:43:2f:7c:bd:07:9d:d8:6c:d9:87:9d:89:ec:23:
         e8:98:25:e6:83:7d:7c:5f:5b:a0:ce:d8:11:50:ba:76:20:d8:
         5a:f3:19:68:37:bf:0b:d4:85:d5:c6:f0:83:62:6d:3e:d1:1a:
         36:0e:ec:bf:77:3d:a5:da:a5:ea:a8:51:7d:92:12:59:e3:82:
         bd:8b:53:2d:f4:5e:c4:4c:59:14:d5:fa:9a:24:9b:d1:24:f9:
         b2:f4:0c:be:cf:dc:8f:fb:23:de:c1:d9:a2:90:78:19:69:10:
         17:33:d7:8b:51:60:c3:1b:5a:19:6c:7d:39:d0:2e:63:23:42:
         8e:b1:47:1c:a6:3b:3b:f0:cd:4c:3b:e7:7b:cb:f0:b0:69:57:
         b3:54:56:9b:4c:ef:6b:bd:81:ea:4a:eb:4a:f0:c7:b3:ca:78:
         67:29:9b:ee:1b:ab:a1:20:b1:80:56:48:36:2a:37:d4:2f:de:
         23:0d:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:43:49 2025 by rpki-client