Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
File:                     09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft (raw, json)
Hash identifier:          Tm8Lqv9XDW+a5s3mTgqIpb87mRBSip6PKN0O4ETDW1o=
Subject key identifier:   B7:3A:88:E0:82:B8:FE:7B:77:7A:F3:8E:2D:83:1F:54:76:19:26:DE
Authority key identifier: 09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F
Certificate issuer:       /CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F
Certificate serial:       5D1EFD3B5824FA127A2D8B41E1604623688E9963
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
Manifest number:          50
Signing time:             Sun 02 Nov 2025 20:05:56 +0000
Manifest this update:     Sun 02 Nov 2025 20:00:56 +0000
Manifest next update:     Mon 03 Nov 2025 22:02:56 +0000
Files and hashes:         1: 3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa (hash: RTeDdlDDGbKb6QV/Wn8L4QCyiHo/okFCJ8OTUYfFUTQ=)
                          2: 323830343a333364343a313a3a2f34382d3438203d3e20323635343139.roa (hash: v/vv5SOG4MKFrzM74dQfb1JZqKLPwC712Acu9aYRrr4=)
                          3: 3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa (hash: Rfyf5AhZFVaf1/E0WAQ5EcZ3PkoYCoAmfu3kG+SODiM=)
                          4: 09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl (hash: 7lR7xwXL3UXui2keBvlXKZt7tZSJEK9OJ8X7b8QynLA=)
                          5: 323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa (hash: 3a9UnHQ1lma2jvTdR8Z5LxhGO+PtIrUpSv5VAj72N98=)
                          6: 323830343a333364343a3a2f33322d3332203d3e20323635343139.roa (hash: 0C3CSJA2bPqgBDnGdtTS5nTJ1hNiRlPF/70HJIA8fWs=)
                          7: 3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa (hash: JXxchmVqj5DrHUHsH/U4N2bOeS566Apt/6ZWGm9k7CI=)
                          8: 323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa (hash: 6WlEaBiiDDTKahWwuMueydx/DT4KcsJcZz1761sUGNc=)
                          9: 3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa (hash: SyGNxWw5kwGSe6t2z/llmdcbUlBmYvXHU6T3WuGm6CA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 22:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1e:fd:3b:58:24:fa:12:7a:2d:8b:41:e1:60:46:23:68:8e:99:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F
        Validity
            Not Before: Nov  2 20:00:56 2025 GMT
            Not After : Nov  3 22:02:56 2025 GMT
        Subject: CN=B73A88E082B8FE7B777AF38E2D831F54761926DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:10:d2:34:ca:f0:85:f5:f8:6e:b6:dd:3f:
                    8b:bc:5f:f7:73:24:17:b5:5d:88:c4:d8:44:77:7f:
                    97:e9:48:3b:38:50:78:48:37:02:0e:45:cb:e1:17:
                    19:ea:27:6f:c9:5e:95:90:67:4a:91:bc:78:81:f4:
                    c4:42:dc:a8:b7:cb:39:fc:5e:2b:23:cb:b0:f4:e5:
                    0c:71:90:f8:51:6f:98:72:7e:82:e1:7e:0b:95:aa:
                    d9:bc:a5:e1:b4:7d:de:5f:10:a0:20:85:31:cf:df:
                    4a:a5:8e:30:7c:23:ed:de:e1:fc:b8:0b:df:97:8f:
                    30:c6:6d:af:96:23:f5:eb:05:99:67:32:8a:02:30:
                    9e:3d:0d:2e:d2:a5:73:f4:09:2f:06:0a:c1:8a:2e:
                    eb:dd:c9:f5:99:e7:4d:8f:54:c8:13:ff:81:f3:cb:
                    2c:e5:2d:f1:04:8d:7e:3a:73:a1:84:8e:6e:9a:a9:
                    66:b8:26:96:60:14:9f:4e:c9:db:60:86:57:76:37:
                    92:b6:ae:31:84:0d:ca:5b:51:c9:b2:03:10:ed:6e:
                    89:8a:c5:0f:d0:fd:89:63:c9:80:c9:ed:03:39:e9:
                    cf:c5:1c:24:4e:fc:49:b5:ea:5e:b1:a6:46:78:f8:
                    cf:da:f0:83:02:70:11:91:0c:60:33:e1:39:6e:b7:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:88:E0:82:B8:FE:7B:77:7A:F3:8E:2D:83:1F:54:76:19:26:DE
            X509v3 Authority Key Identifier:
                keyid:09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:cc:cf:7d:38:22:80:6a:8f:2f:77:b2:eb:07:97:ba:51:
         50:46:ba:1c:8c:d0:0c:e8:50:72:3f:30:fd:6f:1d:e2:05:2e:
         2e:42:a3:00:bc:ef:18:af:88:06:ca:ec:66:e2:27:0e:e6:36:
         8e:39:84:20:6c:c1:4a:0d:5d:4e:90:f6:9f:18:ab:b0:fe:d8:
         9e:89:1e:b1:23:f8:5e:22:c1:d7:8f:05:26:3a:d2:45:a0:d5:
         a0:be:f6:12:fd:1d:98:d4:0b:0e:5c:1d:66:82:64:43:8a:ac:
         c6:1d:ca:12:9f:0f:92:75:19:30:f1:9e:59:18:50:ab:94:62:
         9c:ff:ac:03:78:f4:15:48:cb:ee:6f:e4:32:9c:44:d2:21:6b:
         d7:31:71:a8:11:76:d0:94:f1:3c:ef:6b:32:b2:3d:f0:55:a0:
         29:38:39:ff:ea:e3:d3:df:f8:e0:45:c2:20:95:cf:3e:0f:60:
         3d:27:ea:fb:be:30:61:92:0d:df:81:e4:53:8c:7c:e7:1c:7d:
         12:f7:b7:b2:cc:cd:be:2a:38:8a:f3:92:b4:bb:87:8a:90:d2:
         c2:e4:ae:4e:59:c3:47:dd:0b:37:72:cb:88:34:d1:15:eb:1f:
         81:1c:6b:ca:e6:6e:6f:25:e7:d2:66:b2:28:51:8d:c6:f0:20:
         0a:26:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:39 2025 by rpki-client