Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.mft
File:                     C25265AD4C15AD12F33FD243385F457064C66247.mft (raw, json)
Hash identifier:          hliDSwezX1a4utK4rSAfU+usnOcQzgjOGTNG6TwdoeA=
Subject key identifier:   E2:88:0B:FD:49:70:61:3E:23:FB:F8:A7:1F:8C:EF:6D:40:87:5A:54
Authority key identifier: C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47
Certificate issuer:       /CN=C25265AD4C15AD12F33FD243385F457064C66247
Certificate serial:       22B955563A3562734F889A2D290573AF58794B03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.mft
Manifest number:          49
Signing time:             Mon 03 Nov 2025 08:57:32 +0000
Manifest this update:     Mon 03 Nov 2025 08:52:32 +0000
Manifest next update:     Tue 04 Nov 2025 09:42:32 +0000
Files and hashes:         1: 323830343a353939343a3a2f33322d3332203d3e20323638373131.roa (hash: qm5UnjeDE83D9VCrn5PGMWUAOuE+U3rRsAi2jz5j2AY=)
                          2: 323830343a353939343a3a2f33322d3332203d3e20323634353632.roa (hash: WLxXSpno0GTUuD5R7fELOICHeu5qvwQBYgCbhM04VYw=)
                          3: 34352e3137312e3132362e302f32342d3234203d3e20323638373131.roa (hash: UOblSQTHxF6OT2Ki4sIWijQw8IfaNiPaubIpwqmjCk4=)
                          4: 34352e3137312e3132352e302f32342d3234203d3e20323638373131.roa (hash: maj2GI33MyQchGtHjCHmkPV4goHhmszG8xYUZ+pq0o0=)
                          5: 323830343a353939343a383030303a3a2f33332d3333203d3e20323638373131.roa (hash: KM5aSx5PC29OUomjkhkMHUOKbBlHyGntr8N8CIzA06M=)
                          6: 323830343a353939343a3a2f33332d3333203d3e20323638373131.roa (hash: IedM+wxCvpa2AI8tulRN2kSAPJ+m6fpNhgG3f6CM4QQ=)
                          7: C25265AD4C15AD12F33FD243385F457064C66247.crl (hash: 9JJtSFi2929qPm7bJA/XMGJ349sAiQe35bMsMDDfaF4=)
                          8: 34352e3137312e3132342e302f32342d3234203d3e20323634353632.roa (hash: sTuGf9jcmc51SO9gAc8SqGO3wuGw+z2OoezAlHNuxvs=)
                          9: 34352e3137312e3132342e302f32342d3234203d3e20323638373131.roa (hash: eQv8XcGxuBPZBMGHQ2t7R58G8GQYobUEO4sAp0ZSqrk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:55:56:3a:35:62:73:4f:88:9a:2d:29:05:73:af:58:79:4b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25265AD4C15AD12F33FD243385F457064C66247
        Validity
            Not Before: Nov  3 08:52:32 2025 GMT
            Not After : Nov  4 09:42:32 2025 GMT
        Subject: CN=E2880BFD4970613E23FBF8A71F8CEF6D40875A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:29:a3:59:9a:0b:3a:97:b6:71:c9:62:eb:
                    3e:be:c1:35:e8:8f:39:56:7d:86:d2:55:6c:73:c9:
                    41:4c:91:c8:81:e1:8e:95:0a:8a:2b:10:0d:7b:2c:
                    c2:62:4c:a9:e4:21:e1:5a:eb:7e:77:7b:84:7d:11:
                    da:4d:04:d8:96:3e:c1:77:83:4d:de:ff:da:88:25:
                    94:2b:df:02:03:26:6e:7b:e5:79:75:76:4a:54:45:
                    b6:86:d3:7d:0e:97:fd:ac:af:25:af:60:07:76:5c:
                    92:10:11:27:2b:47:a2:b4:e8:22:4f:9b:d8:23:2e:
                    2f:e9:37:3d:f1:25:9c:b7:e5:b6:27:16:cb:b4:9b:
                    22:27:f5:ab:70:21:18:fe:c9:19:cc:f6:4e:67:cd:
                    a4:64:96:26:49:ff:48:7d:46:40:2b:f3:0e:11:c5:
                    e9:6c:96:d9:dc:05:2d:be:64:12:89:8f:9c:f3:08:
                    cf:31:10:c1:d1:e5:65:cb:77:47:1a:53:46:aa:d3:
                    b0:a0:d5:90:8c:43:d2:a9:4c:13:38:4a:f8:fc:fa:
                    6f:78:d3:34:93:41:cf:af:63:d7:f5:3b:ce:6b:ed:
                    1d:4a:d6:0f:44:1e:e3:d5:6c:02:67:0b:ec:07:fe:
                    49:bf:5c:a5:a4:97:a6:15:bc:d7:63:68:d8:5f:a9:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:88:0B:FD:49:70:61:3E:23:FB:F8:A7:1F:8C:EF:6D:40:87:5A:54
            X509v3 Authority Key Identifier:
                keyid:C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:93:93:48:74:51:63:78:3d:2a:a4:ac:2a:3c:56:4f:a4:
         a4:88:55:40:a4:8a:41:ff:a5:a9:8f:fa:8d:d9:6d:54:cc:6d:
         b7:1f:e8:13:d1:6e:01:45:25:1b:0e:2c:37:b2:87:26:6f:19:
         ba:48:f0:0b:07:54:3d:dd:8b:8c:21:54:71:f4:7b:f3:18:25:
         17:34:f2:dd:d7:cf:a8:18:ba:3f:52:f7:40:e5:2f:6b:23:43:
         ce:95:51:c8:ae:a5:14:97:1a:49:ca:9b:57:82:72:0d:c9:42:
         7c:18:56:f1:6c:28:9d:c9:c4:79:9c:6f:60:3c:a1:10:69:ce:
         aa:04:c6:f1:29:d3:dc:96:c7:0d:db:94:f9:dc:27:21:6c:a8:
         40:85:0d:d1:6a:42:32:95:ff:dc:b3:03:5c:29:a8:16:ba:44:
         27:4a:b0:87:cd:f4:67:b0:c5:2b:98:a5:f4:5a:06:d2:f3:ee:
         bb:ef:fb:16:60:bd:60:8b:f3:f9:d4:a6:cf:62:e3:83:91:43:
         a5:b4:fb:19:9a:ce:df:4a:c0:19:c9:56:26:44:99:1c:26:71:
         9e:73:02:8e:0a:ec:43:56:d1:60:ee:32:e3:34:22:dc:ac:26:
         da:78:7d:c5:b9:77:c7:d1:0e:fe:64:cc:fc:d0:dd:eb:99:ef:
         ed:0b:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:42 2025 by rpki-client