Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
File:                     C8232E7ADA2149C400868144F5DA83930BC26309.mft (raw, json)
Hash identifier:          gwAHePuKavSBUQvEG1WOd5T/afJ/CYuxWKf7a1cCIyI=
Subject key identifier:   2E:1A:C4:22:34:60:87:81:57:33:78:30:5C:46:3F:11:51:69:30:B7
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       31015B2210CB240BA601BB95A332EC321258A808
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
Manifest number:          0316
Signing time:             Wed 05 Nov 2025 09:13:05 +0000
Manifest this update:     Wed 05 Nov 2025 09:08:05 +0000
Manifest next update:     Thu 06 Nov 2025 12:24:05 +0000
Files and hashes:         1: 3137372e37332e37342e302f32342d3234203d3e20323632353636.roa (hash: ESQh5mc6WYp8uXBHHudBIWppr31lzcWMbbdm9yeqOdk=)
                          2: 3137372e3132392e3139312e302f32342d3234203d3e20323632353636.roa (hash: SjfLnlM63+3+L8HzDVvXAfz41h8u2iEQVAo4ELvs5Ao=)
                          3: 3137372e3132392e3138392e302f32342d3234203d3e20323632353636.roa (hash: /H/piIBz7IRJHrwMimvmUQEWcRvrPXm6yvpdHuA5G1k=)
                          4: 323830343a336631303a353030303a3a2f34382d3438203d3e20323632353636.roa (hash: S1hs4Eu12Ux1Ki4yJ9eOgtciSa8raSkzETEO7MPhX2Q=)
                          5: 3137372e37332e37352e302f32342d3234203d3e20323632353636.roa (hash: 5E7yqqpBWEtI2ZWXwmaIt5KC1SuUjAqV4zmGHCtPjWA=)
                          6: 323830343a336631303a363230343a3a2f34382d3438203d3e20323632353636.roa (hash: x8/pv66tXMvGp2ZqoYMbWPOLydtNAtPCdplVrQXwVMI=)
                          7: 3137372e3132392e3138342e302f32342d3234203d3e20323632353636.roa (hash: QPQV7aaTlXpp54rSQBIkIXoESWpzBj4ruLCl3IXUaPo=)
                          8: 323830343a336631303a3a2f33322d3332203d3e20323632353636.roa (hash: o2+8Dj/dvDDhom21J3ibBEmCxx2vHjtdaDuSUCk47Q0=)
                          9: 323830343a336631303a363030303a3a2f33352d3335203d3e20323632353636.roa (hash: 3tQBkJUb6z2DLUL1y2MSGFGW5mEn8pLSfLIBuGFbwrY=)
                          10: C8232E7ADA2149C400868144F5DA83930BC26309.crl (hash: 8K6Kw4oWvBIEOEk7NbrCrOWNcNLUd1jlUa/PlNJB2T0=)
                          11: 3137372e3132392e3139302e302f32342d3234203d3e20323632353636.roa (hash: KTJMqGpsbBLj1blMeGysQ4Z5a8LuGKp5SvIO4WZJ7CE=)
                          12: 3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa (hash: GbDffagYs00MWWMDpBe+Y55qROzfvqImbS8RGzdLSFU=)
                          13: 3137372e37332e37322e302f32322d3232203d3e20323632353636.roa (hash: oUZTfm9JTnYG9XGm3pVzGIF1rEQHWx8vFyUsxtHX+Lo=)
                          14: 3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa (hash: 4aX2Ev3aA8xG1TQFF7ZNa8sn8qOYGfrY5eN/RUMjwnc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 12:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:01:5b:22:10:cb:24:0b:a6:01:bb:95:a3:32:ec:32:12:58:a8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Nov  5 09:08:05 2025 GMT
            Not After : Nov  6 12:24:05 2025 GMT
        Subject: CN=2E1AC42234608781573378305C463F11516930B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:07:9a:72:fd:9d:8f:53:36:3e:cb:a5:ba:
                    3a:3b:e1:1c:ad:80:20:f4:48:d1:5e:9c:35:55:57:
                    99:70:23:ff:35:95:af:0e:83:ea:a8:6f:c5:d9:e7:
                    00:d4:02:4d:10:4e:50:6c:ee:5b:a3:7d:db:8e:55:
                    f1:e2:97:f4:e2:a4:af:1b:8c:07:64:3b:df:9a:61:
                    47:ba:0c:8c:85:bc:9e:ff:4a:db:02:fe:3e:96:d5:
                    74:18:cc:2e:ec:63:4e:a8:d2:d5:d3:2d:21:fc:66:
                    d0:cf:91:b6:6e:d0:a4:1e:75:dd:0d:09:c9:25:13:
                    76:06:22:a4:f1:cb:62:5a:f3:8c:8a:c0:7e:a9:53:
                    05:c9:06:8d:03:b1:b2:52:1b:94:a5:b9:ec:b4:26:
                    c4:e7:c1:1a:9f:fd:50:81:88:6f:57:75:95:39:f6:
                    31:75:29:d7:b9:49:a6:33:0a:a9:29:19:55:00:8e:
                    44:bc:ce:8c:e9:cc:dd:45:15:56:b7:f3:dd:d3:e2:
                    e9:3b:34:d9:8a:8d:9a:5f:2e:2d:62:9e:2f:db:9f:
                    2c:d6:fd:dd:76:79:ce:e9:63:51:f1:2d:44:ee:a7:
                    76:55:6e:4b:04:f6:8b:fd:81:af:83:fd:15:bb:0c:
                    33:22:48:f0:c5:20:5b:e3:65:48:d4:c2:6e:91:27:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1A:C4:22:34:60:87:81:57:33:78:30:5C:46:3F:11:51:69:30:B7
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:27:19:90:9c:01:3a:21:a0:d9:e0:6d:a0:35:8e:b5:c2:26:
         d6:e8:2b:44:4f:18:08:52:3f:ba:21:99:df:65:2a:1a:73:22:
         7b:0c:d1:fd:81:8c:cf:10:8d:f7:89:13:b2:ab:42:33:f9:08:
         c2:0d:a2:ce:ee:71:4f:1f:7e:70:d9:f0:f5:d5:1b:08:65:a8:
         65:d4:6a:5d:c4:0b:ed:ee:ec:00:be:37:ee:a8:a6:7a:c5:08:
         61:24:0a:98:bf:f2:47:32:52:16:13:a0:03:98:4a:9a:3d:65:
         10:19:f5:e8:12:45:8b:27:94:dd:f8:15:9a:40:02:be:3c:70:
         36:e4:19:84:33:10:16:78:8e:7e:31:5e:e5:88:f7:c3:21:54:
         21:29:0f:86:b7:fb:81:bf:eb:90:0f:f1:ad:7b:e1:a6:8b:0f:
         c7:d9:ef:00:38:13:8b:03:d0:58:85:dd:22:19:1d:ba:bc:95:
         8f:f8:ba:eb:e7:6a:09:49:69:3d:62:4e:db:30:fa:0f:89:49:
         12:e5:97:3b:86:f3:97:88:93:3a:2b:43:85:11:7e:80:32:1f:
         2f:57:1b:55:7d:34:07:e9:40:c7:10:88:65:49:10:c1:65:4e:
         a2:b3:6f:0f:1c:38:aa:04:66:ae:c8:ee:e6:b9:89:3e:36:3b:
         d3:89:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:42:46 2025 by rpki-client