Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.mft
File:                     7F46E725B7708034062721804237B31B8C88616E.mft (raw, json)
Hash identifier:          O3ciLxo4cmmLqGOx2WQgturNa2JhiHYbotPC3fCXH2s=
Subject key identifier:   57:B8:72:07:44:F2:B6:79:E8:77:36:4D:0B:84:42:B5:94:01:B3:60
Authority key identifier: 7F:46:E7:25:B7:70:80:34:06:27:21:80:42:37:B3:1B:8C:88:61:6E
Certificate issuer:       /CN=7F46E725B7708034062721804237B31B8C88616E
Certificate serial:       4E4209B14751FA519910042F0B8662CB0A812CE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.mft
Manifest number:          85
Signing time:             Mon 03 Nov 2025 03:54:01 +0000
Manifest this update:     Mon 03 Nov 2025 03:49:01 +0000
Manifest next update:     Tue 04 Nov 2025 05:55:01 +0000
Files and hashes:         1: 323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa (hash: HbjQpnv7QcfAlkrzeVDmUvWsDAuW/3z/NGn1q0T7Pd0=)
                          2: 323830343a366536633a633030303a3a2f33342d3334203d3e20323730353936.roa (hash: 1RIPj3mVookhK1mCPqcpd3nHWYVUBLoedqRRBK7r6ko=)
                          3: 323830343a366536633a3a2f33322d3332203d3e20323730353936.roa (hash: YOwTDOBce4pSmxbGlc4lRj3nbT2zzkBVLXicVkpiNdY=)
                          4: 3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa (hash: 81QbIdPb4GCXsMw1GsYHIJ3+61fHca0xKGdkwzxLbP4=)
                          5: 323830343a366536633a343030303a3a2f33342d3334203d3e20323730353936.roa (hash: GJuci7vNG7341e4fuNqP61o/jRL7uNFIaGvfROFHDFI=)
                          6: 323830343a366536633a3a2f33342d3334203d3e20323730353936.roa (hash: QBQo1zt9el4GHb5I83cZAV4wP/hOeod//UEgnP48WrQ=)
                          7: 7F46E725B7708034062721804237B31B8C88616E.crl (hash: vRkDLzbzvxBN1/dR77D4sHKSxAeaUc1RPEbIviNE9uA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:42:09:b1:47:51:fa:51:99:10:04:2f:0b:86:62:cb:0a:81:2c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F46E725B7708034062721804237B31B8C88616E
        Validity
            Not Before: Nov  3 03:49:01 2025 GMT
            Not After : Nov  4 05:55:01 2025 GMT
        Subject: CN=57B8720744F2B679E877364D0B8442B59401B360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:18:3f:9c:1e:44:4e:1f:56:f1:2a:9a:82:
                    29:7f:be:ed:75:88:a1:5c:ae:f3:e9:14:d8:0c:a6:
                    d9:c4:00:16:66:b5:33:01:55:50:63:fa:61:41:11:
                    2f:be:47:71:47:6e:6b:c0:9e:93:84:70:6e:90:fa:
                    b1:9d:3f:2d:e3:22:c1:8c:86:e9:a3:cf:ae:02:d0:
                    f6:6e:25:7e:bd:1c:f8:d1:9f:e8:10:b7:d5:49:8f:
                    9f:11:5a:6f:dd:fc:a9:27:2e:6c:84:81:14:2b:4d:
                    e9:1e:21:a8:79:a9:12:4f:ff:b7:31:f7:2e:72:0e:
                    23:6d:ef:83:4e:4d:31:ad:b3:b4:15:28:af:45:56:
                    c6:75:0d:1c:3f:08:2f:b2:d4:37:c7:b1:d6:a6:14:
                    29:b1:50:ba:cd:3b:df:a3:ca:d1:1b:e1:69:8b:e6:
                    fd:21:7b:cb:73:09:9d:16:76:69:ec:f7:7f:24:f7:
                    e0:f2:d2:52:99:02:3f:7c:59:55:c0:44:fc:0f:7b:
                    8b:df:b9:fe:3e:7e:13:5c:be:04:44:7e:e5:40:f4:
                    c0:12:64:9c:98:53:da:56:90:49:bc:5c:45:2d:30:
                    77:65:a3:12:7d:be:10:eb:17:30:0a:e0:23:9a:c9:
                    f5:37:1f:bc:0e:68:83:5d:f9:a1:5c:5a:71:11:c2:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:72:07:44:F2:B6:79:E8:77:36:4D:0B:84:42:B5:94:01:B3:60
            X509v3 Authority Key Identifier:
                keyid:7F:46:E7:25:B7:70:80:34:06:27:21:80:42:37:B3:1B:8C:88:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b1:1d:08:51:20:a9:9b:3e:7c:e8:f9:d3:36:02:14:49:26:
         2d:ca:2d:1c:d0:f0:44:75:5a:29:80:37:6c:ae:da:70:a6:4e:
         5a:5b:f6:f6:3a:ee:1f:7c:6b:b9:58:2f:e2:e2:45:9d:68:f8:
         59:3b:15:97:ba:13:d8:51:c9:bb:15:35:b0:40:e4:e7:61:b7:
         3d:f9:f7:10:d0:53:89:d2:c0:48:b7:8f:80:f5:10:30:1d:34:
         2d:ce:cd:d7:ea:f2:8a:29:45:4b:28:4f:81:ce:a4:ba:60:ce:
         44:d4:da:6d:83:68:c0:0f:cd:f1:03:60:0e:0c:a8:17:2c:a1:
         29:4d:5a:9a:d5:58:8c:78:51:20:bb:02:f9:70:e0:65:1b:dd:
         d3:6f:4d:69:20:f7:2a:19:51:d2:8b:18:4c:de:bc:b9:56:25:
         a2:54:bc:94:43:5c:cd:ba:a4:17:f9:c2:d5:99:5d:e7:9d:09:
         f5:70:67:69:4d:ad:ec:bb:96:98:04:71:3c:76:64:05:f0:88:
         e3:be:91:67:63:5f:fe:a8:3a:7b:4b:11:6c:49:f1:f3:ec:66:
         22:92:1c:a6:97:b2:5e:75:7c:5e:d7:dc:e0:4f:5c:f1:b2:73:
         26:3f:82:b7:85:48:a6:af:1e:58:98:a5:e4:5d:cb:cc:f2:cb:
         40:6c:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:44:07 2025 by rpki-client