Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft
File:                     F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft (raw, json)
Hash identifier:          rbBGefbB6e0N403ZJsq9oP4d6dpEYEdGcqPeQPUJEzY=
Subject key identifier:   76:BE:18:AF:96:0E:E0:49:D6:B4:F7:75:9E:08:4D:8F:EF:05:CA:ED
Authority key identifier: F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1
Certificate issuer:       /CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
Certificate serial:       5135E968C793419FBB2B3D69229D409F06F9AE9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft
Manifest number:          3A
Signing time:             Mon 03 Nov 2025 10:17:36 +0000
Manifest this update:     Mon 03 Nov 2025 10:12:36 +0000
Manifest next update:     Tue 04 Nov 2025 12:32:36 +0000
Files and hashes:         1: 34352e3138302e3230342e302f32322d3232203d3e20323639313439.roa (hash: PKGX493/ZDIRWhroIFGJh8WP/77QXi9oBPn4TonWFIs=)
                          2: 323830343a363032383a6130303a3a2f34302d3430203d3e20323639313439.roa (hash: BWGzQxsyoKPim2oRycFAOFqhwTMvreK4+gEmlOwar7M=)
                          3: 323830343a363032383a6230303a3a2f34302d3430203d3e20323639313439.roa (hash: 4WId77nK6Mh78bnY7OuP392K+KlC+e+fZS+jmr2gUmg=)
                          4: 34352e3138302e3230372e302f32342d3234203d3e20323639313439.roa (hash: CErcDYhKaMHssx+Ak9xRwf31rOJ9giW+pURgXp6Dqi8=)
                          5: 34352e3138302e3230342e302f32342d3234203d3e20323639313439.roa (hash: PVzw/v1ONH7/vGJkjdP572v3YjDnqMnk+JmLh35v8OA=)
                          6: F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl (hash: LvI5MD9aGRqzavuxV343XCweg7gif0vLJEcQNr60miQ=)
                          7: 34352e3138302e3230352e302f32342d3234203d3e20323639313439.roa (hash: eJhz3wmetq0smBvuWz9r6vENZizYM/gSDJlAtaSgnwI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl
                          rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:35:e9:68:c7:93:41:9f:bb:2b:3d:69:22:9d:40:9f:06:f9:ae:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
        Validity
            Not Before: Nov  3 10:12:36 2025 GMT
            Not After : Nov  4 12:32:36 2025 GMT
        Subject: CN=76BE18AF960EE049D6B4F7759E084D8FEF05CAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:90:be:d7:05:b5:d1:2c:79:97:37:49:11:
                    70:7e:47:c5:87:88:0d:a4:42:c0:a1:99:ba:47:e3:
                    05:95:8d:1a:fc:ea:ce:a0:40:a6:27:6a:ad:9f:d8:
                    0a:9b:7e:d2:2e:cc:fa:a4:c6:13:9c:29:00:9a:8c:
                    20:b7:8f:00:40:9e:fe:b9:49:93:98:16:11:5d:c2:
                    7c:dc:12:40:a3:c4:ff:34:d8:a5:32:16:fd:cd:54:
                    c4:90:d6:47:e1:23:88:a5:2d:2c:39:60:d3:02:92:
                    00:e5:70:3b:0d:31:a9:bd:0c:4d:b0:4d:f8:28:8d:
                    1b:2e:37:fb:68:f9:60:fc:3b:f2:e6:e3:49:40:d1:
                    4a:a0:69:47:78:12:86:ad:1c:bc:e5:41:e6:f2:ef:
                    96:e1:41:ce:8b:9d:d8:b3:75:da:7c:9d:41:22:bf:
                    7e:b5:84:12:26:2e:e2:00:55:25:19:e1:ff:95:da:
                    31:8a:e5:77:17:17:7f:70:3a:9c:5b:4c:4e:ce:49:
                    6f:5a:e3:b1:31:d1:2d:65:af:d5:7d:53:10:88:3b:
                    46:4b:0e:94:99:47:01:6c:a2:74:f2:0e:cd:f6:6a:
                    c2:05:cb:e2:ee:44:b8:ec:43:46:c6:7b:05:02:fd:
                    b3:bc:0c:d2:e8:a5:a9:6a:dd:00:e6:33:f3:ce:05:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BE:18:AF:96:0E:E0:49:D6:B4:F7:75:9E:08:4D:8F:EF:05:CA:ED
            X509v3 Authority Key Identifier:
                keyid:F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:d8:38:a9:63:04:29:de:d6:c1:a9:c2:a0:75:1b:72:0d:
         04:b6:5f:11:77:56:a0:f5:93:f2:50:b7:e8:c9:9a:9f:fc:41:
         bf:d5:20:2c:77:be:48:6c:3b:cb:6c:ab:04:96:7b:37:9c:55:
         ff:73:d0:a3:a9:ff:bf:f8:e4:0c:13:70:a7:a4:4c:8b:dd:28:
         54:14:a4:1f:d8:5c:8f:bb:9e:61:b5:1f:d2:76:27:6f:2a:98:
         e8:3b:ad:90:0c:c5:bf:92:7a:e1:31:d8:f0:d0:36:b6:d2:bc:
         33:a9:b5:e2:32:2c:c3:ee:35:71:25:11:74:87:d3:25:a8:a1:
         80:ca:74:ae:7e:84:5b:15:58:ea:98:cf:58:99:36:46:53:20:
         10:47:05:22:bf:09:0e:2e:0b:f8:79:38:5b:a7:86:63:82:cf:
         c2:c3:33:85:92:e0:40:98:16:f8:6e:8d:c3:73:e3:98:9d:1a:
         ad:8d:2b:24:57:ab:b6:31:f5:19:c5:ce:ca:61:1e:ea:76:95:
         04:72:c1:da:9d:3f:b6:6d:43:62:7c:29:84:8f:0c:bf:d5:36:
         3a:aa:82:27:94:ae:f5:03:96:a0:8b:e0:e8:b6:35:e3:59:3a:
         f9:28:c3:f4:3d:12:c2:98:97:27:fa:12:ea:ba:ce:38:91:ef:
         ce:74:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:10:49 2025 by rpki-client