Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft (raw, json)
Hash identifier:          AjjAvSOUnh2aLeG+Lv6dEMEitdCPaq9Cmhc+vOo+5AY=
Subject key identifier:   5C:55:6D:7E:D6:2C:B3:6B:5C:64:5F:48:C3:4B:FD:49:EB:5D:CF:CD
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       33AA989F285AB1E4D3459B93269DDF41A6761EF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
Manifest number:          93
Signing time:             Thu 18 Sep 2025 05:12:25 +0000
Manifest this update:     Thu 18 Sep 2025 05:07:25 +0000
Manifest next update:     Fri 19 Sep 2025 05:34:25 +0000
Files and hashes:         1: 323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (hash: CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=)
                          2: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: LFEgWICXHnee4/bGPrqW2v3LYv3dbDv2jg2lbR5xrCI=)
                          3: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=)
                          4: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: R7MIKUFJ61JnpNcf/kEfY1SDTgaGtaQruSRJo+oewXw=)
                          5: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: AByqAu5aFAKkVdIxOZPc9IFOefmyvDsFDw/jy1fUyFk=)
                          6: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl (hash: J6K+vksSqvXtBFfyfOOhFuTyGYuuRkv8AHtDd1rMMP4=)
                          7: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:aa:98:9f:28:5a:b1:e4:d3:45:9b:93:26:9d:df:41:a6:76:1e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Sep 18 05:07:25 2025 GMT
            Not After : Sep 19 05:34:25 2025 GMT
        Subject: CN=5C556D7ED62CB36B5C645F48C34BFD49EB5DCFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:48:51:62:59:ca:1d:f9:4f:cf:a0:f7:9f:
                    90:c1:73:2e:59:fb:21:de:b2:c2:81:7b:8c:1e:43:
                    e7:80:14:15:45:04:8f:e7:74:95:1a:c5:c6:a9:2c:
                    bd:47:9f:67:50:2d:05:39:1d:02:42:59:22:b0:36:
                    10:bb:64:71:11:ba:3d:f0:18:5a:17:35:41:bb:9e:
                    54:42:36:ba:e1:6b:0c:ed:35:c7:e5:d7:65:97:df:
                    86:91:c4:03:99:42:b7:c5:0c:3c:63:e3:ed:f9:62:
                    2a:b5:88:ff:84:8c:05:a2:47:89:67:e1:87:99:26:
                    ec:23:52:a0:aa:11:58:1f:75:45:4c:4e:56:db:63:
                    dc:7a:b4:ac:f0:0f:d9:21:b5:f8:6f:29:67:08:7a:
                    94:76:b4:d2:dc:91:4e:d7:53:c4:59:29:f5:22:50:
                    23:cb:42:d1:41:0f:a1:ad:d9:fb:37:02:98:1e:d1:
                    7d:c4:29:5a:99:41:4d:bb:34:8f:b4:bf:f6:e9:35:
                    48:48:e6:9b:f5:d1:14:7c:c5:bf:c5:45:e3:26:e1:
                    42:f9:54:5c:e3:e0:05:53:32:6d:59:31:eb:63:d9:
                    75:76:eb:86:ea:be:83:51:07:97:4f:10:98:7f:c4:
                    7c:22:cc:04:08:0a:87:cd:2f:1f:96:be:3f:d6:36:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:55:6D:7E:D6:2C:B3:6B:5C:64:5F:48:C3:4B:FD:49:EB:5D:CF:CD
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e5:76:2b:b6:06:ea:02:c5:e5:09:b7:ac:a8:90:c8:8c:7c:
         38:b8:12:92:4b:ab:9a:92:91:09:ed:cf:c9:b5:a1:3d:e6:29:
         b9:82:c4:1c:8e:5d:3b:3f:13:28:c8:fd:8a:7e:48:85:61:1f:
         55:fe:65:8e:6b:0f:ed:a3:d4:ec:67:cc:7a:0d:a4:89:ab:e1:
         b6:a3:f7:57:e8:0d:d5:99:64:da:af:50:10:00:54:8b:34:ee:
         23:52:16:37:c9:19:21:6b:e7:89:e1:c2:8c:77:12:be:e2:02:
         e9:15:dd:e2:13:8e:29:9e:8e:0f:f0:42:78:e3:83:7c:d8:25:
         62:ac:0f:4f:93:6d:a3:ff:3a:13:a1:66:75:27:e4:57:04:bf:
         ac:e7:0f:1f:a7:40:8c:33:f3:dd:9f:64:cd:cf:f5:d5:84:4a:
         bd:22:ec:f0:2e:86:7e:91:c1:1d:b8:33:fa:4a:03:99:44:d3:
         66:cf:7d:10:a8:de:63:3e:9f:b4:69:3f:ff:03:73:f4:a7:69:
         08:55:4f:8b:32:9b:5d:92:de:2d:79:23:b1:7e:64:19:45:7a:
         29:f5:0d:25:0e:46:a5:74:c5:30:28:a8:0e:c1:a8:1a:7e:8f:
         2c:bf:37:ad:72:c4:b9:2c:55:69:8b:13:d9:db:a8:f5:72:2b:
         5a:a6:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:23:09 2025 by rpki-client