Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
File:                     70BE7503F48CCC14271EE75026EB08184789273F.mft (raw, json)
Hash identifier:          bjNVXUu93lWqhUeezLMx1zZ2+4duO2aaXCr0gKYT0zU=
Subject key identifier:   A5:16:EE:09:1B:3A:A9:31:19:C1:09:08:DF:6F:F7:3F:D8:62:F9:17
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       34575768EC3872CFCB1B6B29355286F670AEDE92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
Manifest number:          0125
Signing time:             Tue 04 Nov 2025 02:13:23 +0000
Manifest this update:     Tue 04 Nov 2025 02:08:23 +0000
Manifest next update:     Wed 05 Nov 2025 05:15:23 +0000
Files and hashes:         1: 3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (hash: GnaFMFJMItjMD48L6aTqrOzJUKteHuSGOsSUDz/lric=)
                          2: 34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (hash: k/hN6TA+OFbKdFdz77MEM9ytllTB/QKnmxnXWeZa6qY=)
                          3: 323830343a313133633a3a2f33322d313238203d3e203533313831.roa (hash: ozqJWRXyGQb9byfX9zSPxp1Hhcod/DSMtaO1jZwvMiw=)
                          4: 3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (hash: wyl4HwDk9SAF88SAhsmqolpBK40MpFDUT27xQj1gA1Q=)
                          5: 70BE7503F48CCC14271EE75026EB08184789273F.crl (hash: nu8v2o4HQTnqX3SFJ38OV9KsK1FfFWR551FKR9j1V3E=)
                          6: 323830343a353365343a3a2f33322d313238203d3e203533313831.roa (hash: QJ4HiBHxsCQQPRAtx+xxKlZCua3P1Dk8tHsptc5rspI=)
                          7: 3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (hash: RSdKeQglPgtopD8BJEGkCpkbirujqQSQj4MlN2LDu/o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:57:68:ec:38:72:cf:cb:1b:6b:29:35:52:86:f6:70:ae:de:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Nov  4 02:08:23 2025 GMT
            Not After : Nov  5 05:15:23 2025 GMT
        Subject: CN=A516EE091B3AA93119C10908DF6FF73FD862F917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:2e:8a:ed:24:0b:28:92:ed:8c:38:88:e0:
                    35:e7:02:88:e2:46:c6:5c:cd:36:4f:e9:3a:20:2f:
                    08:70:5e:f7:24:86:41:a3:d4:03:e2:b9:6d:ab:02:
                    e4:29:48:e4:cb:b6:af:d8:5d:21:f6:b7:cc:89:1a:
                    86:e8:6e:c8:62:aa:aa:45:9c:61:3c:b9:c5:d2:77:
                    3f:15:0b:92:d1:34:82:27:34:6f:82:30:28:4c:76:
                    8c:42:cd:b9:9e:e5:22:33:3b:ea:00:bd:e9:6b:d4:
                    da:01:4b:4b:e1:90:11:e1:0b:5a:1d:e8:02:95:3b:
                    9b:d6:8a:4d:e0:78:66:18:11:03:c4:6a:85:ac:c4:
                    9a:a5:24:c4:0f:c0:91:0d:f5:6b:d4:37:ff:1f:ac:
                    2b:70:ef:16:c1:79:87:e5:cd:13:95:33:da:10:c1:
                    d6:23:5d:2b:6b:e2:10:bc:05:f6:ca:6d:eb:9d:50:
                    1f:bf:d3:a6:67:0c:01:30:1f:fc:9c:30:3d:8c:ac:
                    e7:fa:dc:33:54:c3:b8:42:b9:f3:87:23:88:a5:80:
                    56:0c:64:86:23:b4:94:ba:0e:1d:ac:98:21:39:1b:
                    e2:b4:1f:ed:44:b9:88:ae:2e:e9:cd:9a:eb:c6:00:
                    c3:0e:64:31:91:e3:93:ae:0c:21:4e:c4:d6:61:8b:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:16:EE:09:1B:3A:A9:31:19:C1:09:08:DF:6F:F7:3F:D8:62:F9:17
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:c8:ec:b4:ce:6f:19:0a:06:ea:1d:36:ad:c6:04:42:2d:
         87:b1:8a:d8:88:5d:3a:aa:89:0e:ef:8e:b7:99:d6:cf:e8:60:
         56:67:43:7d:21:69:87:47:f8:ba:09:84:d9:4c:76:da:3e:64:
         84:99:4b:1f:ae:b4:06:84:b5:94:1d:2b:d7:60:0c:a3:29:84:
         fa:7e:65:85:8e:8d:7c:b5:3e:d3:ca:6d:21:bc:3d:1b:70:be:
         e1:ae:f8:9b:32:77:91:9b:d1:70:54:0e:07:b7:3c:2f:b1:f1:
         ea:a2:3d:62:9d:b6:19:08:f8:96:6c:01:e5:d5:12:ff:5e:bc:
         f5:a4:58:b8:95:b7:34:e4:cb:9f:45:fc:12:22:94:a7:e5:26:
         f2:f8:18:9f:ef:8c:10:bb:a1:d0:fc:e1:23:f8:04:df:10:b8:
         dc:79:de:8a:bd:26:c2:18:8d:bd:11:86:03:cd:41:f5:d1:7a:
         85:7f:27:d6:b3:a7:29:04:76:91:61:ef:e3:e5:a0:35:1e:62:
         80:99:85:8f:b7:b7:b3:dd:6b:90:0e:31:7e:a6:09:f7:eb:b5:
         a7:37:d8:4a:90:3d:df:dd:a5:e5:a8:df:45:e0:b4:fc:8f:d5:
         ff:85:ea:17:65:dc:1a:f9:a5:d7:9f:f2:0c:b6:40:6f:4e:9f:
         24:00:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:05:54 2025 by rpki-client