Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
File:                     4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft (raw, json)
Hash identifier:          dA/+myRn8s+z3nN1BFvhY1NgJ10xb//LnY3d4QG6hoE=
Subject key identifier:   1E:84:39:87:C1:30:F8:3F:3C:97:B7:F2:B8:5B:D0:CC:9B:4B:E3:CB
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       2312A889657D5F52E513CFD324F93EF31AEDC720
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
Manifest number:          58
Signing time:             Mon 03 Nov 2025 05:51:19 +0000
Manifest this update:     Mon 03 Nov 2025 05:46:19 +0000
Manifest next update:     Tue 04 Nov 2025 07:04:19 +0000
Files and hashes:         1: 3138372e3132302e3139322e302f32312d3231203d3e203533313430.roa (hash: 3Fo4Cc+9neMJPVaTbO5furisq7rlfkhS6cQU1A1d69E=)
                          2: 3138372e3132302e3230342e302f32322d3232203d3e203533313430.roa (hash: 4kuX4+YEgOsvB6g5yTLuxTAjPLFcIIG23lgPhQjTgok=)
                          3: 3138372e3132302e3139322e302f32322d3232203d3e203533313430.roa (hash: L623AnWNMg9Jzge4oEyRb4u4STnmrIMD5ymgDEezpP0=)
                          4: 3138372e3132302e3230302e302f32322d3232203d3e203533313430.roa (hash: 1UwahvzNsBKHFVuZ9Kd3YRGZV0HOrWlnfv4SKtMwz9E=)
                          5: 3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa (hash: T2QVpnYElRH1llTNZB/a11f2abGkME+m6CSuNc6v9kc=)
                          6: 3138372e3132302e3139362e302f32322d3232203d3e203533313430.roa (hash: 36PVlIC18oYXwNzxgSEnsA6pAHmQTQmdwJkH54cUCeE=)
                          7: 4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl (hash: MUvpwtutyaa+l4f0VPRwCDdBig/BcqIniOOwyPkDmHQ=)
                          8: 3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa (hash: iMWVEG6OBJjkOtNX0CLjmHCGkhhk8gvefdJFfVfa2Z0=)
                          9: 3138372e3132302e3230302e302f32342d3234203d3e203533313430.roa (hash: bOv0LlSwqTthSngADmIICL+9r5urQVu3JY6adBMY7lc=)
                          10: 3138372e3132302e3139382e302f32342d3234203d3e203533313430.roa (hash: /tcjnXqZ4E6Z7X4EkLDwPEwGdvSnh8t5FErVL2/mcZU=)
                          11: 3138372e3132302e3139322e302f32302d3234203d3e203533313430.roa (hash: ysDzP66pMbuuwDuPoTcCOANpGKRvIhVBCzF79uGAF0s=)
                          12: 3138372e3132302e3139392e302f32342d3234203d3e203533313430.roa (hash: 8IRTqyOUL+/DGTVWqYWw5LwY1tS2xuQSv1exEzH+H80=)
                          13: 3138372e3132302e3139322e302f32302d3230203d3e203533313430.roa (hash: RBIs15LH9OQ6WXt+8BFfvxPkNxUGt/wa6XQsQb2T6KU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 07:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:12:a8:89:65:7d:5f:52:e5:13:cf:d3:24:f9:3e:f3:1a:ed:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Nov  3 05:46:19 2025 GMT
            Not After : Nov  4 07:04:19 2025 GMT
        Subject: CN=1E843987C130F83F3C97B7F2B85BD0CC9B4BE3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:87:64:a8:b0:c6:42:df:16:84:38:d4:a2:27:
                    d8:cc:c3:86:10:ef:fb:b7:99:73:c9:76:a0:b8:c0:
                    81:ab:6d:6c:a6:b6:8b:30:bc:87:c0:28:19:d9:5a:
                    d3:b1:3b:de:c9:e8:45:4e:94:9c:f4:6e:87:91:e3:
                    bd:bb:59:bb:13:c4:e9:c8:74:ed:7e:e9:f9:91:a9:
                    02:c9:c8:55:27:2f:56:bb:49:5f:e0:9a:19:3f:d4:
                    35:49:c4:da:ab:3c:61:99:33:be:13:e0:b5:de:79:
                    86:44:c5:c4:6e:22:08:ff:39:25:7f:27:cc:b8:a1:
                    cf:70:01:b0:41:96:c2:a7:09:29:e6:6f:ed:0e:fa:
                    42:0f:08:db:f4:a3:96:54:f4:23:19:e2:58:07:9e:
                    4c:68:fb:2d:fe:42:52:8f:15:08:6c:da:a1:fc:b5:
                    8a:ec:32:45:00:53:e6:e0:f6:b3:b5:e0:43:b7:92:
                    cb:35:80:75:83:9f:32:5e:44:65:66:55:5d:43:5f:
                    14:57:06:2b:43:47:f3:d0:c9:3a:6f:75:e5:f2:44:
                    c6:23:1c:ec:1e:f1:a6:83:59:dc:8e:22:46:c8:cb:
                    54:a4:2a:2c:20:c5:ff:c7:c5:95:04:8f:d2:80:84:
                    ec:dd:e4:7f:aa:74:db:b4:58:48:b5:4d:9b:8b:03:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:39:87:C1:30:F8:3F:3C:97:B7:F2:B8:5B:D0:CC:9B:4B:E3:CB
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:5d:72:04:14:00:9e:c0:c1:69:5d:d6:ff:f9:fb:c9:2e:
         e8:6e:97:2b:da:eb:18:62:6d:26:f5:10:d1:bd:c7:81:6d:36:
         de:58:87:49:69:14:7d:66:e1:e0:46:85:5c:a5:a4:e5:e8:d8:
         36:8f:11:cc:ba:b1:06:a7:0e:6f:70:7e:30:2c:39:49:f5:a3:
         4b:65:5b:88:06:7c:61:70:44:41:bf:da:a0:b5:26:c2:e8:e6:
         aa:69:65:d2:b7:5c:54:8e:3a:78:aa:fa:31:52:47:13:bd:74:
         9f:5f:0e:85:18:bc:18:21:c5:68:9b:56:0b:06:ff:e4:58:a2:
         c9:3f:da:24:b8:99:3e:29:80:09:db:01:1e:2b:5a:1c:06:f0:
         e7:18:b1:6d:d3:af:6a:b0:20:31:de:53:c3:31:fe:ab:d0:89:
         b0:41:85:77:c5:97:3f:f0:a9:fb:7c:46:79:e3:81:6b:f0:3b:
         c3:9c:78:eb:bb:05:f5:41:08:75:3c:84:f0:69:f4:1b:de:b7:
         4b:7b:33:14:44:45:71:ae:65:14:f5:df:bd:f0:b6:18:90:9a:
         1e:35:07:38:83:2e:6e:ae:5a:04:3a:63:e4:16:69:e7:23:79:
         3b:bc:a0:bd:a2:6c:63:48:05:e8:d9:20:d5:5d:81:53:b4:46:
         32:81:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:47 2025 by rpki-client