Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
File:                     20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft (raw, json)
Hash identifier:          r8dvhCB4MriJ/8YMm0SjfRVod77oiKksmGhQZQN8os0=
Subject key identifier:   F9:86:A6:A1:8F:8C:75:4F:59:BC:4F:1D:E5:3F:38:83:BF:B6:2E:DF
Authority key identifier: 20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B
Certificate issuer:       /CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
Certificate serial:       69C5FE2F8D7946ADD90122CC17CDE0DDCE9F65D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
Manifest number:          0305
Signing time:             Sun 02 Nov 2025 18:00:22 +0000
Manifest this update:     Sun 02 Nov 2025 17:55:22 +0000
Manifest next update:     Mon 03 Nov 2025 21:22:22 +0000
Files and hashes:         1: 3138372e38352e34382e302f32312d3234203d3e20323632373237.roa (hash: 84MZhLQzIn2BWsnHfJXMg5Wfx8x6fNRb6spHNwvUo0U=)
                          2: 20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl (hash: VWIYwVeHBP53rKhkmle/OgFtEnT3sK/hUtk38rfM7B4=)
                          3: 3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa (hash: n7chMqoUOmhPka1TuUB5DkX3RDTNyCJIuyGAlWeViCY=)
                          4: 3138362e3139322e36342e302f32302d3234203d3e20323632373237.roa (hash: lI/YZy3V43NnAzsfqJunrGgRp/PEYktxD6ceXNuRQos=)
                          5: 323830343a6131633a3a2f33322d3438203d3e20323632373237.roa (hash: 9NJqoCplEFI6mtWVxC1p48urbNYyOZzNQYkH1nFU11s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl
                          rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 21:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c5:fe:2f:8d:79:46:ad:d9:01:22:cc:17:cd:e0:dd:ce:9f:65:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
        Validity
            Not Before: Nov  2 17:55:22 2025 GMT
            Not After : Nov  3 21:22:22 2025 GMT
        Subject: CN=F986A6A18F8C754F59BC4F1DE53F3883BFB62EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:fa:a4:3d:7f:17:e1:73:c3:03:79:6b:20:
                    23:fe:dc:c5:c6:84:f4:ae:d9:d6:87:fd:d1:ba:5e:
                    a0:9f:f1:13:5d:9d:d4:32:fe:f6:2c:e9:c8:85:04:
                    8e:8b:f2:59:04:ac:96:7d:f7:d4:6a:43:bc:8d:1c:
                    28:c5:57:61:c6:b8:26:57:2c:d2:69:c5:0a:94:93:
                    ba:fd:67:75:89:21:52:6f:5a:af:79:d7:8b:9a:bb:
                    6e:54:5a:5b:e0:73:1f:a8:72:0e:99:34:6b:08:4c:
                    71:77:13:f8:26:3f:1b:fd:ec:18:1d:c1:57:63:32:
                    7a:ce:a0:86:1e:7f:21:48:22:a9:c1:c3:7f:18:ba:
                    1f:94:d2:01:9c:28:22:f5:2d:96:88:24:41:e5:bd:
                    f6:3d:26:c3:00:d0:b4:ca:c8:bb:db:25:1d:33:9f:
                    ef:87:66:d6:f4:36:68:4c:8a:5c:1f:55:2d:6e:38:
                    5e:c8:bc:68:db:13:94:77:51:b5:b6:5e:bc:00:da:
                    e8:b5:d4:1f:8d:36:ca:d7:25:ef:03:ae:41:42:18:
                    a4:7b:39:f5:09:e8:ed:e3:82:a8:b6:8e:92:81:1b:
                    50:a0:0b:c9:39:df:ca:41:7c:28:bb:91:db:af:86:
                    9e:1b:da:9a:db:f1:69:8f:3c:12:2a:bb:e6:4c:89:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:86:A6:A1:8F:8C:75:4F:59:BC:4F:1D:E5:3F:38:83:BF:B6:2E:DF
            X509v3 Authority Key Identifier:
                keyid:20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:17:64:1e:53:03:10:1e:87:05:b4:78:b4:75:8b:d4:2e:
         04:df:2e:68:e9:2f:0f:a2:f8:17:1c:b1:4e:f5:ca:c7:c4:91:
         29:c7:51:79:45:93:92:f9:e2:aa:7f:ca:14:3d:c5:5c:a3:47:
         c3:a1:af:22:be:8b:c8:10:ee:56:95:61:23:7c:cd:e3:38:4e:
         c3:c4:69:91:01:56:fe:67:49:1e:56:91:25:36:4f:33:bc:03:
         5d:08:30:ea:32:fc:43:57:c2:2c:41:50:de:fe:4c:90:77:4e:
         4f:10:c5:4b:64:b6:e5:77:6c:3b:e7:22:c5:fc:8e:ad:99:fb:
         51:a1:39:3a:53:43:99:9d:eb:b2:eb:08:88:78:4f:d2:d5:60:
         72:bd:7f:52:cb:00:db:a1:d8:71:b0:1d:11:87:29:a0:c4:3b:
         ab:2e:83:c5:36:0f:bf:f0:eb:68:48:e1:6f:e1:a9:1b:fa:b3:
         7f:98:20:3e:9a:47:c9:2f:a3:2a:18:6a:58:d4:fa:6d:e9:6b:
         cd:55:5a:ac:d6:5f:f8:25:fb:c0:96:fb:7b:ba:59:30:c1:bf:
         22:82:3a:63:ca:ea:fe:f5:ed:d4:b8:c6:69:97:18:14:c8:65:
         c7:7f:7c:7d:49:d8:ef:58:07:9f:2e:44:c3:2d:8a:55:bc:c4:
         ab:22:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:13:27 2025 by rpki-client