Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft
File:                     46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft (raw, json)
Hash identifier:          pYjmKvQu7wT9lKgKslSvDsSsEoQaQWDzPRMvjQTlWKc=
Subject key identifier:   DF:2E:84:63:3B:DF:7B:35:39:FC:18:2F:B8:B3:EC:87:CE:08:5C:3E
Authority key identifier: 46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED
Certificate issuer:       /CN=46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED
Certificate serial:       62696E6EFA048B12550C3025FFAB881C50077E9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft
Manifest number:          033D
Signing time:             Mon 03 Nov 2025 02:00:00 +0000
Manifest this update:     Mon 03 Nov 2025 01:55:00 +0000
Manifest next update:     Tue 04 Nov 2025 02:00:00 +0000
Files and hashes:         1: 3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa (hash: aPCDUc5FvEyLDq/6sDm9SpPKefImqtn4D17vx+MRpmk=)
                          2: 323830343a376431383a3a2f33322d3334203d3e20323731353338.roa (hash: YP5X7z4lDSR1jGju4paGx/x/R0dZxbHqZ6j6WUxcbQY=)
                          3: 46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.crl (hash: vm/Cbo84d+hhSo8DAm5dRLjUKeyB7odKQ2eofsKjvUg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.crl
                          rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:69:6e:6e:fa:04:8b:12:55:0c:30:25:ff:ab:88:1c:50:07:7e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED
        Validity
            Not Before: Nov  3 01:55:00 2025 GMT
            Not After : Nov 10 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:92:0e:1f:5f:25:0b:56:fb:5a:36:e6:5b:
                    e4:ce:a5:7d:01:44:35:27:29:88:36:7e:34:23:79:
                    e8:98:27:c1:d5:a6:a7:33:c9:b9:53:32:b2:a4:83:
                    15:67:15:37:65:2d:44:47:62:e9:21:bd:4e:93:1e:
                    c3:e5:d2:ea:f8:01:a8:8b:5f:53:23:7c:5c:08:8e:
                    00:9f:ab:9a:57:e5:29:80:03:e4:64:11:70:2b:4a:
                    5d:b4:30:cb:36:cc:d8:4d:ba:ff:e5:86:9f:fa:d9:
                    11:db:70:af:ae:f0:e9:d1:3c:0d:2a:0d:2c:a7:71:
                    ff:56:30:f4:af:0a:e7:cd:ac:1e:bf:28:7e:5d:34:
                    af:b0:a7:3d:dd:0b:48:29:b8:96:6e:9f:7f:c8:8a:
                    28:60:59:b4:63:54:2f:32:93:f9:e4:34:d1:2a:02:
                    d0:c9:f0:7d:ee:9e:f8:13:85:66:d1:b3:29:85:af:
                    18:26:92:8f:b6:23:e2:70:0d:3c:28:51:a1:04:55:
                    0c:16:32:68:e1:12:62:a2:7c:7e:f8:65:18:18:10:
                    31:55:af:a7:df:58:62:2d:cc:13:c9:ba:99:8d:cd:
                    aa:06:bc:87:85:d2:40:2a:19:eb:11:c6:58:21:f8:
                    e4:59:22:08:c4:ee:40:19:5b:81:81:c5:48:01:10:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2E:84:63:3B:DF:7B:35:39:FC:18:2F:B8:B3:EC:87:CE:08:5C:3E
            X509v3 Authority Key Identifier:
                keyid:46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:ee:73:89:d0:8e:95:31:e5:44:d6:2f:dd:14:2d:fc:56:
         aa:3b:5b:4f:43:bb:64:71:60:11:70:d2:85:90:44:22:32:dd:
         04:89:8d:e0:1d:b3:31:b1:e1:65:08:ef:af:73:94:97:07:9e:
         1c:ef:e0:f8:a7:8d:23:b6:90:a1:ed:44:e8:f9:aa:11:76:a4:
         d1:2a:fa:00:d9:b7:b1:c3:85:29:63:61:4f:de:f9:fe:e6:ec:
         e3:b8:11:19:0a:5c:4c:b7:23:b1:31:47:51:a8:78:8b:2f:56:
         69:d3:61:5f:bc:0f:6f:87:ad:a3:1a:15:82:ef:89:96:9a:eb:
         cd:09:fc:10:0a:70:4a:e4:b3:c1:c0:04:d8:ce:2a:b7:60:d2:
         67:54:f9:c5:ad:95:a7:fc:5d:be:14:ec:3c:cb:80:15:12:de:
         cf:2a:29:66:0a:03:77:38:ea:68:01:54:66:3a:bf:f9:5a:c4:
         d7:61:af:45:3a:d7:1c:5b:6d:aa:d2:38:70:2a:21:bb:b7:54:
         d1:7f:84:1e:d7:1a:e2:74:9d:d6:90:e8:54:67:be:70:94:1c:
         01:c3:54:32:5e:27:db:1a:34:b8:30:bd:de:af:66:bf:16:66:
         5c:35:1c:9a:6d:c5:cc:bc:79:a1:d9:d9:af:72:09:c5:b2:c2:
         7a:bb:e1:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:14 2025 by rpki-client