Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.mft (raw, json)
Hash identifier:          5bWjZ27ie0jpHVqHlAKeLqTcVqC40vpEPSvAtWcy7Sw=
Subject key identifier:   BE:CD:25:4D:4E:69:50:97:44:33:8F:1C:5C:4D:D9:E7:1E:AD:4A:C3
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       0814157E391788CBFEFD34E015767581727EA2AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
Manifest number:          030D
Signing time:             Wed 05 Nov 2025 22:32:30 +0000
Manifest this update:     Wed 05 Nov 2025 22:27:30 +0000
Manifest next update:     Fri 07 Nov 2025 01:04:30 +0000
Files and hashes:         1: 3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (hash: I8gegaDlfSoPVJB4JicAvO6ZERf+vifvuI3FclW4DgI=)
                          2: 3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (hash: Dw5AssA1HgxByRJyZF+pm59eguv/pTJItHP30N+8988=)
                          3: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (hash: aSA8jLBDOKXb/wGF0KTIXFeM70Ti1je/b4isJG4ZqbQ=)
                          4: 296B5A42104756A14E2651E7EAC81D02EA0F7531.crl (hash: sbB2BWe3IceD82gaI6LzXY5BHRDmA1XcugpVdfx8lus=)
                          5: 3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (hash: FIwFwpyUCKNwCUQ0QTzPbTgQumrMufTSN6FixF1CLtI=)
                          6: 3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (hash: zAMTmLC4WZfoe2M0Wu6wK3iaa8mmiwf2SqxgNYCF040=)
                          7: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (hash: Q8fT0X0GWM0hUQiYXkk2teK4Zmhm+tiJhQOBJv4JZPA=)
                          8: 3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (hash: F0vIBnXm7QmhkLGIRL9MuzSSEvBi3tkeEcypHIDebRw=)
                          9: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (hash: uZqp4Wgh9r1u3S27RMEiTIHkcnYebpfguoeafqx6tVw=)
                          10: 3138312e3232352e3135392e302f32342d3234203d3e20323730363930.roa (hash: Ul7gq9CrRCwHaFK/u17aTOhNwaf2ziJyjPRRtidqANw=)
                          11: 3138312e3232352e3135372e302f32342d3234203d3e20323730363930.roa (hash: LZs8UJxd25+oAoU0PN8Wb4clhACrCQakXa1FWzEA8gQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 01:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:14:15:7e:39:17:88:cb:fe:fd:34:e0:15:76:75:81:72:7e:a2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Nov  5 22:27:30 2025 GMT
            Not After : Nov  7 01:04:30 2025 GMT
        Subject: CN=BECD254D4E69509744338F1C5C4DD9E71EAD4AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:1c:1f:28:9f:6a:7f:c5:fe:5c:76:82:7c:
                    29:fe:a4:19:ed:83:d0:98:87:4f:25:65:70:d6:10:
                    0d:b6:83:a2:d4:f2:03:a3:30:24:50:ef:79:d5:10:
                    f0:e7:2b:38:3b:59:f4:74:f8:47:68:f4:6d:f3:a0:
                    f6:ba:09:34:be:45:8e:58:f7:00:cb:00:4b:30:ed:
                    99:5a:d8:f9:2b:c3:91:08:89:fd:bf:fc:aa:15:56:
                    af:42:fe:81:b2:88:d5:b0:1c:6d:28:d4:e1:44:24:
                    6c:0f:3c:cc:cc:29:35:8c:eb:a8:3a:4a:e9:2b:b6:
                    b4:4a:4f:f2:bb:f0:0d:70:cb:ee:4d:41:5f:4f:26:
                    bf:9a:db:6f:b3:3f:ee:01:e5:f9:ab:54:3a:57:bd:
                    08:ae:69:c0:61:7f:d4:80:ac:fb:93:88:7f:84:e5:
                    04:ef:74:32:75:5c:24:d3:b5:52:54:5e:26:86:5f:
                    6d:89:b7:93:80:ca:6b:b4:5d:87:31:4b:58:3f:6e:
                    79:d5:f2:2f:0c:3a:63:e1:8d:48:a8:65:e3:e3:16:
                    97:0e:97:1a:96:f2:f7:55:e7:d0:f8:7b:c5:54:ed:
                    f2:a8:9d:20:29:2e:c4:f8:e5:14:d4:36:ea:c8:ca:
                    31:50:7d:06:e8:43:24:76:54:ee:e6:43:5c:0e:34:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CD:25:4D:4E:69:50:97:44:33:8F:1C:5C:4D:D9:E7:1E:AD:4A:C3
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4a:a0:7b:b7:da:66:15:af:84:fd:a0:17:ae:b6:b3:4b:4b:
         2a:3a:92:da:d5:2a:24:f5:1b:a5:2d:ce:e8:13:38:96:cd:51:
         02:ac:c8:c4:e9:08:e9:b8:dd:b6:80:6e:4b:5b:29:9f:c6:09:
         41:82:7a:56:27:d8:15:8b:d9:2e:48:74:44:ab:f7:fd:fc:36:
         bf:03:ff:e2:9a:ba:43:95:6f:8b:6b:f2:7e:ce:7c:e8:fa:92:
         41:e1:c2:0c:22:42:40:cc:8a:a8:90:db:21:b6:6d:df:19:9e:
         a1:3f:0a:d9:0e:a8:17:6a:ee:d5:54:09:ec:f9:b7:e9:eb:52:
         2e:23:7c:3a:0d:31:6b:85:eb:fd:9c:3d:f2:42:1a:d5:9e:e7:
         82:f5:7a:f8:c4:c3:7a:d6:5c:61:e8:33:95:33:1a:d8:26:24:
         70:0d:dc:f8:07:4d:57:c0:63:92:6b:86:4f:16:30:32:37:5b:
         76:bf:f7:4e:16:36:c1:6c:15:8e:ab:12:bf:13:a4:b2:d2:0f:
         bd:fa:7c:3c:87:ee:9a:cd:b2:f6:6c:fa:25:80:92:cd:f2:b1:
         15:2a:90:1f:be:5a:72:d5:e3:27:8f:6d:d1:f6:3f:48:32:ad:
         41:f8:8d:09:0c:d4:b7:5a:55:53:c8:56:a8:fc:53:b0:67:0b:
         4d:db:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:45:18 2025 by rpki-client