Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier:          u1k0Sepdf5oe59ZyaYPvmN8diT/2s0LSE87hAAFcsvY=
Subject key identifier:   B0:1D:25:C6:DF:4A:5A:4E:C1:54:F6:8E:2F:F2:BC:34:66:CD:6C:BC
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       5B85715C393DF107CBA46914A321E93C448EB84A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number:          016E
Signing time:             Wed 17 Sep 2025 16:38:35 +0000
Manifest this update:     Wed 17 Sep 2025 16:33:35 +0000
Manifest next update:     Thu 18 Sep 2025 20:21:35 +0000
Files and hashes:         1: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=)
                          2: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: yB/ruYV8s9wsBczjL6yTfv4/JqjO4Do53zuHYfSjIcI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 20:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:85:71:5c:39:3d:f1:07:cb:a4:69:14:a3:21:e9:3c:44:8e:b8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Sep 17 16:33:35 2025 GMT
            Not After : Sep 18 20:21:35 2025 GMT
        Subject: CN=B01D25C6DF4A5A4EC154F68E2FF2BC3466CD6CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:4c:41:98:42:e8:9f:e2:c9:96:4d:24:5d:
                    c2:1b:1a:57:64:cb:0f:e1:c9:32:fb:fd:62:4a:34:
                    46:4a:1e:d3:a5:47:19:80:0f:45:3c:42:b5:f3:99:
                    3e:7b:35:52:b3:2b:21:3d:86:b0:03:cf:ee:8a:be:
                    8d:e2:53:16:8f:3a:ff:59:06:f1:6a:6b:ef:ff:9d:
                    47:6b:15:c2:f5:52:d8:d4:b5:d8:f3:79:9f:bb:b9:
                    59:7e:57:54:42:6f:ec:d7:5a:8f:c9:05:3f:29:3c:
                    4e:96:c7:01:e7:35:10:14:16:83:ab:71:93:de:59:
                    0d:45:f1:b6:12:3c:4a:0f:67:ee:ec:44:66:a6:5a:
                    7e:06:97:51:ac:43:b7:1d:af:09:21:1d:fc:48:79:
                    58:de:dd:fc:23:52:61:97:9d:05:97:2c:05:9f:b8:
                    d3:ce:30:7a:17:79:43:9a:dd:cc:1e:11:97:b9:76:
                    59:5b:32:b2:d6:03:69:de:09:8e:a3:85:16:32:ef:
                    26:3f:10:b8:75:2d:0e:01:40:02:20:ff:e1:59:bf:
                    fa:d4:16:f0:df:f3:5c:04:74:92:8b:de:23:d6:f8:
                    a9:a5:d0:a2:ca:f9:8c:15:fc:27:23:c0:e0:eb:b4:
                    d9:9f:00:ad:7f:2a:15:7e:65:c1:ce:e0:17:b2:66:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1D:25:C6:DF:4A:5A:4E:C1:54:F6:8E:2F:F2:BC:34:66:CD:6C:BC
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:91:ab:52:94:e2:34:66:82:53:cd:7c:bf:7c:c3:54:f6:
         65:8b:81:8e:84:d1:f9:80:58:09:4e:42:e7:23:50:e3:77:34:
         a9:09:cb:05:d4:37:af:61:84:be:9f:73:e2:47:b0:63:07:9d:
         e6:f9:47:70:5f:f6:91:e7:f6:b3:7c:7d:38:a0:ed:b4:86:35:
         24:6c:87:2f:1f:b6:04:72:2a:1e:83:6e:28:19:8a:24:15:b4:
         03:00:7f:77:4a:6f:22:a6:5d:c8:d6:3e:de:99:ec:4b:ca:89:
         75:a3:25:10:9f:79:2b:c1:33:e6:3d:6a:be:c8:de:7b:56:a4:
         d5:7e:f1:e9:0d:65:d4:18:14:db:bb:b3:52:b5:01:d6:9f:fd:
         63:3f:94:22:6d:d5:ff:08:47:c8:21:47:19:9b:87:54:9d:d6:
         00:1d:d5:57:7e:33:22:74:11:70:dc:5d:7f:2e:85:95:ed:17:
         86:4f:fc:20:53:b9:af:df:7b:40:de:77:6e:f1:2e:17:e2:27:
         f0:5f:ef:86:6b:3c:60:8e:d9:11:36:d6:f5:fd:c8:2b:a4:ce:
         fe:e8:6f:77:c8:6b:9b:b2:43:b6:8e:c6:c6:19:0a:2a:08:10:
         66:3a:f5:ac:b0:9c:56:36:1a:1d:1f:b0:72:ce:10:f6:e1:6a:
         58:33:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:45:19 2025 by rpki-client