Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
File:                     0F22F0E315749E4417293F3772830DCD92044CE8.mft (raw, json)
Hash identifier:          pTfM6Gm7oleNwfcLYBEWXW3EVi6vEBCGqf6T4n6Mugs=
Subject key identifier:   1A:EE:ED:BA:1A:FC:25:C7:E4:2F:B4:F2:7A:CF:D8:A4:9C:E3:FB:F0
Authority key identifier: 0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8
Certificate issuer:       /CN=0F22F0E315749E4417293F3772830DCD92044CE8
Certificate serial:       6567B268A1C33825258BFBBA75D2A8AF7B8DFB8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
Manifest number:          4B
Signing time:             Sun 02 Nov 2025 23:58:54 +0000
Manifest this update:     Sun 02 Nov 2025 23:53:54 +0000
Manifest next update:     Tue 04 Nov 2025 02:44:54 +0000
Files and hashes:         1: 3230302e3233392e3232302e302f32322d3234203d3e203130373034.roa (hash: /zAGbHJfLevaua5ahzY4pHwkJi4hsfm9CuAgoO/ZNV0=)
                          2: 3230302e3233392e3230342e302f32322d3234203d3e203130373034.roa (hash: VDkQZaNBrEBc1zjHvI23xDf30YTqZKNekY0OZrlM8WU=)
                          3: 3230302e3233392e3230302e302f32322d3234203d3e203130373034.roa (hash: 3LjD4juYx5Z3d1zC4XFmDPcPZIS6HMB5u4Hs1l/QGdI=)
                          4: 3230302e3233342e3132382e302f31382d3234203d3e203130373034.roa (hash: Z+K/GsOJlWJmR1vig1bnnemYDvmax+6ELQcTIsv+eH0=)
                          5: 3230302e3233392e3231362e302f32322d3234203d3e203130373034.roa (hash: zlGAe/jtCE1/w6KaXcqTYcX6dna1WUaLKw96gdQLvW0=)
                          6: 3230302e3233392e3139362e302f32322d3232203d3e203130373034.roa (hash: B2PGUQZxfNFf9vScxF7ClqcLQSKImMqR6HfXei7d9cQ=)
                          7: 3230302e3233392e3139322e302f31382d3234203d3e203130373034.roa (hash: DuH+AICZuQXJS1QECDe2TFuGSHrF09H5LJJ1KFhJynY=)
                          8: 0F22F0E315749E4417293F3772830DCD92044CE8.crl (hash: kb9w8AE27K4hRIR41JkIjOmAoCDHWYjxq+DacfvB1y0=)
                          9: 3230302e3233392e3139322e302f32322d3234203d3e203130373034.roa (hash: UaGgclbWzGhtwKSl/okj14ZUYlazn66JsVmHS8MDGhs=)
                          10: 3230302e3233392e3139322e302f32322d3232203d3e203130373034.roa (hash: GR+3LcHx8Ai8tZgfz6J63xMkb7u35h2JzusIwx0vSZY=)
                          11: 3230302e3233392e3230382e302f32322d3234203d3e203130373034.roa (hash: qDsqXWjaCT06b2qS7nV/GCgSU8p8djz9U1FAZd1D0no=)
                          12: 3230302e3233392e3232342e302f32322d3234203d3e203130373034.roa (hash: 3gjAvEmiPkcCWu2AsbcqEnFuifqGXGpEBeNshf1sYro=)
                          13: 3230302e3233392e3231322e302f32322d3234203d3e203130373034.roa (hash: lMGBHdis1xhj4DXm8w5r/hzDJEiyLc/T1lWVYThQGNc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl
                          rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:67:b2:68:a1:c3:38:25:25:8b:fb:ba:75:d2:a8:af:7b:8d:fb:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F22F0E315749E4417293F3772830DCD92044CE8
        Validity
            Not Before: Nov  2 23:53:54 2025 GMT
            Not After : Nov  4 02:44:54 2025 GMT
        Subject: CN=1AEEEDBA1AFC25C7E42FB4F27ACFD8A49CE3FBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:1c:d9:a6:7f:2b:6d:05:64:4b:b9:80:f3:
                    23:4c:6f:2e:33:f5:33:b5:d7:50:a4:7b:c3:e0:8d:
                    cc:cc:29:01:54:94:54:61:b7:7a:bf:55:09:e2:05:
                    0c:79:6c:88:92:c1:fb:a8:02:ad:ba:f7:9c:66:36:
                    2d:c2:99:15:a8:6a:a0:1a:66:50:e8:04:f1:33:8b:
                    57:7e:f2:eb:3d:42:89:9c:be:f8:9a:8d:7a:97:c9:
                    2c:dd:63:c8:a4:47:23:d2:d6:f1:7b:2d:67:ad:84:
                    26:e7:c0:09:8b:9b:22:9f:06:e9:54:7a:dd:56:68:
                    04:fd:5f:a4:35:ab:88:d0:05:a3:7d:4d:8e:0d:cc:
                    81:b2:a8:39:ad:ae:b3:26:0c:4b:08:72:38:57:eb:
                    f4:e6:a8:a3:d5:f1:55:6d:0c:41:77:07:52:70:2c:
                    87:19:3a:a7:90:10:b6:10:8d:a2:85:fb:eb:66:e9:
                    a0:94:2a:34:3e:fa:04:dc:e2:59:4d:98:6f:c2:a6:
                    1e:c4:64:0b:52:be:41:fd:ad:78:9f:bb:ce:4e:c5:
                    6b:4d:8c:2a:f7:a6:f5:2a:67:c6:fa:95:8a:06:bb:
                    c9:a7:b6:3d:d9:34:6b:48:1f:9b:85:e3:04:49:99:
                    09:41:11:99:cf:d4:55:aa:30:fc:69:25:bb:9e:fe:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EE:ED:BA:1A:FC:25:C7:E4:2F:B4:F2:7A:CF:D8:A4:9C:E3:FB:F0
            X509v3 Authority Key Identifier:
                keyid:0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:05:2a:48:ad:91:72:fd:e8:39:c5:f7:b4:d4:09:18:f0:
         bf:8c:75:fe:24:17:fb:fb:56:5e:82:89:c6:ae:95:d7:a3:cf:
         34:ff:7b:27:4d:27:6b:dd:0d:cb:2f:29:45:b5:c2:d8:f5:bc:
         04:7b:ca:32:73:02:f4:34:1e:91:9b:ea:44:4f:77:0e:80:0e:
         b9:da:ab:a4:9d:9d:c2:fa:19:a8:f6:24:3f:77:68:4b:61:46:
         ac:1a:bb:90:c2:26:17:49:5e:b2:d5:0a:5d:d4:ff:03:ec:9f:
         3d:93:ce:5d:84:0d:44:e0:38:2e:21:4b:8c:65:05:d6:d7:58:
         d3:43:13:a1:1c:6d:38:50:74:67:42:ee:54:57:84:ab:f6:db:
         0b:50:13:cf:39:9c:f8:d7:bb:b9:80:43:12:a5:40:be:1b:fd:
         91:be:fc:f2:4d:38:cc:5d:fe:15:66:fb:a6:b9:6a:15:ec:6c:
         97:ea:2c:5e:cc:7e:b3:6c:24:d9:ae:c3:01:81:cc:80:6d:76:
         b7:47:fa:31:92:94:e9:42:6c:aa:bc:88:f7:2c:ab:b5:bc:df:
         c5:55:cd:cf:28:4e:c6:d8:ee:92:1e:5b:1b:d2:98:02:b1:31:
         b0:db:ca:3d:58:77:6e:0e:13:51:fd:b9:aa:6a:84:12:d6:5c:
         e6:ec:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:12:08 2025 by rpki-client