Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
File:                     2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft (raw, json)
Hash identifier:          c3G26buW5dlXrFCUZ464CAbRBglztFAhY6wjuBcN6ag=
Subject key identifier:   38:F7:E3:A6:5A:C5:14:F0:D7:66:16:D2:F9:56:D2:87:03:48:08:65
Authority key identifier: 2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8
Certificate issuer:       /CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
Certificate serial:       6307D2EA1349BFAA851C6120F8EA8F12ADA248B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
Manifest number:          7D
Signing time:             Mon 03 Nov 2025 08:28:58 +0000
Manifest this update:     Mon 03 Nov 2025 08:23:58 +0000
Manifest next update:     Tue 04 Nov 2025 09:45:58 +0000
Files and hashes:         1: 323830343a333462383a3a2f33322d3438203d3e20323635343735.roa (hash: 7IoalipyU9bCWrcvBhgDRcJlcy9X1NBtovpjl/NZOjk=)
                          2: 3137372e37332e34322e302f32332d3234203d3e20323635343735.roa (hash: 3POfxo24R8wIDYJx9wMK6V1VAltXPldj6Y6kfY9O6sI=)
                          3: 34352e3137322e3138302e302f32322d3234203d3e20323635343735.roa (hash: iUrPPNnxc5GaUiN1Dq3cxhV0gEpO+PhiJQP1qMpDyAE=)
                          4: 2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl (hash: rjDDMH8pWnstNZ8mptcIGivQI0irc6R1YgSyzJQqbmA=)
                          5: 3230302e3130362e3139322e302f32322d3234203d3e20323635343735.roa (hash: BdI8udBx2K3aAdKmpdNnH4EbR16ZpLBs2fHxLiSj25M=)
                          6: 3136382e3139372e32342e302f32322d3234203d3e20323635343735.roa (hash: DvmYlOm8OmuaRVXtvUloK3/qsa5opULT8IXI38cQ6dg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl
                          rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:07:d2:ea:13:49:bf:aa:85:1c:61:20:f8:ea:8f:12:ad:a2:48:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
        Validity
            Not Before: Nov  3 08:23:58 2025 GMT
            Not After : Nov  4 09:45:58 2025 GMT
        Subject: CN=38F7E3A65AC514F0D76616D2F956D28703480865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:34:d0:97:77:ae:5e:dc:e0:56:b5:a4:8b:
                    ad:c7:ed:c4:ae:50:62:a6:ab:d1:8b:4d:dc:ef:82:
                    0d:f8:5d:d7:6a:c5:f6:35:f0:cb:38:2d:2c:de:ea:
                    5d:b2:4a:e2:59:a2:d9:bb:b8:c4:bd:ef:ae:30:b0:
                    e8:8e:26:e2:7f:dc:5a:46:fe:c3:2c:04:c2:b0:00:
                    bc:25:22:db:4d:4c:39:7b:03:2b:88:97:d1:fe:3d:
                    b1:6e:ee:6e:7d:f9:58:60:0b:cb:f7:91:88:1f:78:
                    f5:e1:65:bf:b0:ab:7b:8a:b5:a5:60:d2:c2:38:cd:
                    87:c4:a5:8c:27:52:ef:b0:36:44:f7:ab:20:3c:0e:
                    e3:32:91:ef:7a:cc:69:21:d0:50:ea:58:f3:01:c1:
                    34:66:56:f9:4a:77:04:04:cc:a7:0c:a2:b8:57:c7:
                    76:fa:24:30:1d:14:5c:07:a8:58:bf:97:dd:fc:b9:
                    b2:88:88:d4:f4:54:77:e5:55:04:61:2f:fe:e1:e6:
                    12:af:84:20:93:b4:cf:46:b0:ff:8e:57:0c:dd:1f:
                    f4:d8:62:97:7c:b2:91:40:aa:55:3c:73:37:ca:8c:
                    61:c0:88:42:ed:eb:e4:99:ba:be:77:a2:d7:ba:f2:
                    32:6f:04:36:78:a7:f9:57:99:4a:eb:c9:4e:92:b4:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:E3:A6:5A:C5:14:F0:D7:66:16:D2:F9:56:D2:87:03:48:08:65
            X509v3 Authority Key Identifier:
                keyid:2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:ae:12:31:ec:8d:a7:cb:f8:18:65:7c:51:aa:83:73:70:
         9b:82:c4:65:c3:e3:da:9a:71:59:7e:2e:14:b0:bf:82:0f:2e:
         f0:e5:88:b0:50:0f:bb:34:bb:d9:20:fa:45:fb:38:95:77:4b:
         35:f1:ca:eb:16:86:8c:74:3f:9b:11:7d:29:41:a0:c3:06:11:
         87:0e:3f:b5:f6:ca:f5:d9:f5:2e:55:07:a0:e6:dc:f9:77:d3:
         31:3d:40:4a:54:fb:55:cf:af:34:75:60:fa:f9:fc:ca:e1:54:
         55:5e:a5:71:95:10:ac:8a:fc:7d:00:55:f1:3c:c0:1a:08:a0:
         53:ad:36:f0:a2:b0:35:2a:a3:a4:7a:39:a3:75:b3:6b:75:e0:
         f3:fd:76:c6:02:0c:ba:9a:c6:92:fe:ad:66:64:5a:ee:76:7d:
         85:ab:ca:ed:46:6d:39:dc:4b:d5:8c:e6:e3:e9:72:b6:86:f8:
         80:01:44:db:f6:18:70:f6:1a:dc:9d:d0:05:4f:14:5c:49:ea:
         3b:a0:e8:24:a7:bc:45:b6:ce:66:17:26:05:7f:ac:df:19:cd:
         97:80:7e:54:ba:8e:73:6b:13:a3:d3:88:fa:51:ad:13:7f:fd:
         91:72:55:9a:b2:ff:bb:5b:a5:08:97:da:1b:7c:fa:04:c7:01:
         97:c2:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:11 2025 by rpki-client