Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
File:                     3332A8C3B68FE79476953E58B1857203FA676F0F.mft (raw, json)
Hash identifier:          flDJoDp3lXJdsn5pDWeKsCen7DB0R71qwHx9UsMQILI=
Subject key identifier:   13:20:BB:F1:41:D2:E7:4E:3C:B7:A8:3A:0D:54:B8:B8:7A:3C:10:2B
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       169FD64AB9DC6DF6B40CC501F552FF861CF1FB60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
Manifest number:          027D
Signing time:             Mon 03 Nov 2025 10:55:35 +0000
Manifest this update:     Mon 03 Nov 2025 10:50:35 +0000
Manifest next update:     Tue 04 Nov 2025 13:55:35 +0000
Files and hashes:         1: 3138362e3235312e38302e302f32312d3332203d3e203533323233.roa (hash: 492Ebg7iQemc/TE4N/iR58FeCmeAA91V38unRlDznt8=)
                          2: 323830343a323038383a3a2f33322d313238203d3e203533323233.roa (hash: 5fQ3uPb5SVDlUX3RSxQAq0TlweJO1u7jbGHmsCaKc/w=)
                          3: 3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (hash: e3lF6O0/izSqcl2PK/nGJ0F7KicvIwfhh8Bq3/aSRyE=)
                          4: 3133322e3235352e3134302e302f32322d3332203d3e203533323233.roa (hash: xfBj7EHGkXfpaVkg+i26+Pm0zpmELHrz6cERLXLO/bA=)
                          5: 3332A8C3B68FE79476953E58B1857203FA676F0F.crl (hash: nds6XMvVYlY8F+CX+7RnQZjF0+3G8tmzbCdLjbBK+z8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9f:d6:4a:b9:dc:6d:f6:b4:0c:c5:01:f5:52:ff:86:1c:f1:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Nov  3 10:50:35 2025 GMT
            Not After : Nov  4 13:55:35 2025 GMT
        Subject: CN=1320BBF141D2E74E3CB7A83A0D54B8B87A3C102B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:5a:9a:c2:97:a5:ba:a1:c0:52:6b:09:dd:
                    ea:42:01:6f:3b:a1:a6:bf:28:0d:e5:08:1a:4a:73:
                    ec:6c:72:0d:ca:59:c5:de:12:be:7a:4d:7a:7e:c2:
                    3c:cf:d1:c6:80:4c:a5:36:4e:70:82:ec:c8:88:f3:
                    5f:e0:68:a4:9d:eb:7d:7f:08:ad:b5:e9:d5:d9:9e:
                    06:d0:dd:52:50:36:4f:22:cc:30:e4:6a:8a:38:e9:
                    f3:71:c0:a9:3e:fb:03:38:02:62:26:76:e2:b1:4e:
                    df:e8:aa:d7:12:ca:4a:3c:28:28:77:08:41:e0:ab:
                    d2:8d:1a:c2:84:58:ed:6e:40:d3:e3:5d:6d:6c:42:
                    2e:64:23:de:2c:13:8f:3f:2b:6e:d1:26:dc:bf:1f:
                    e6:b4:a3:98:3e:5a:74:9c:11:38:d3:7a:16:95:cc:
                    65:80:2f:b0:08:52:d7:d8:4e:18:e1:bb:a5:24:d7:
                    ee:0d:de:5a:73:c1:16:21:9e:35:ba:59:bf:da:63:
                    e6:81:25:1d:df:4c:11:ba:2c:95:25:ce:bd:f6:eb:
                    82:f9:c6:9c:10:48:67:09:a9:9d:f7:f3:a2:20:c1:
                    bb:69:e5:41:a8:53:df:66:60:cb:57:f7:59:d9:12:
                    ec:ec:75:aa:dd:b6:6c:c9:bf:6d:ca:c0:1d:62:3b:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:BB:F1:41:D2:E7:4E:3C:B7:A8:3A:0D:54:B8:B8:7A:3C:10:2B
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:ca:79:b7:cd:87:07:a5:12:db:8e:8c:34:44:88:8b:f6:
         a2:c5:26:b8:37:e3:85:04:af:64:05:86:e1:43:72:cf:f9:ab:
         73:18:2c:71:61:25:d5:b5:90:40:bc:ba:d4:74:06:66:dc:c3:
         8d:36:98:4c:65:3f:90:12:fd:f6:41:9c:34:54:6d:7d:0b:1f:
         85:90:f1:9a:ce:ef:ab:30:cc:18:75:4f:b7:97:af:fb:00:a5:
         86:f0:0b:25:67:ab:28:ad:6c:2d:f2:67:35:c6:2f:37:21:e9:
         89:eb:f8:b9:d8:35:be:a3:c9:e1:7b:12:e2:b3:f1:d9:bd:9e:
         4e:ce:1d:15:d4:ef:85:a3:79:11:d6:88:df:79:97:12:eb:d1:
         a0:ad:c3:9b:ba:a5:0d:f8:87:b4:ec:1e:ac:f2:d8:ed:b8:97:
         83:27:70:0e:63:27:bf:2d:a1:fa:1f:5a:3f:da:1d:5d:fd:c6:
         c9:55:6a:d9:21:46:3c:e0:79:4c:06:99:af:ef:35:e7:f1:e8:
         ce:75:10:74:3e:62:48:07:83:1f:36:30:31:7e:cb:6c:81:f0:
         0b:ac:0f:23:af:f4:32:8f:68:1c:6a:28:b2:85:5d:f0:6c:91:
         40:d0:81:95:40:30:5f:33:85:75:9a:f1:af:67:5c:27:53:91:
         55:20:00:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:31 2025 by rpki-client