Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
File:                     8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft (raw, json)
Hash identifier:          9nPcus2x0w/+k8v4yFQvmGxb/zWvzeJ+NJOTfkGCMwk=
Subject key identifier:   FF:23:29:5D:3B:7E:D2:B6:8D:79:CC:61:9C:DE:E3:2E:AA:30:04:74
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Certificate issuer:       /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial:       26EF52E70BF3C998724A15DD2155371B7ED227D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
Manifest number:          0303
Signing time:             Sun 02 Nov 2025 22:13:28 +0000
Manifest this update:     Sun 02 Nov 2025 22:08:28 +0000
Manifest next update:     Mon 03 Nov 2025 22:19:28 +0000
Files and hashes:         1: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl (hash: ev+oIfXwfCjcZZVJUhvHAleeKEiGEipXlz+cs7AJs1w=)
                          2: 323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (hash: dMeIzUUgXYMifee7yUy6Z7Qqcq81KQpEhu3ht6d+GPM=)
                          3: 3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (hash: 0aM/hZZShDJsW9ewKI93DVkiHc2tzvTtFjiHy0/zhVU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
                          rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 22:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ef:52:e7:0b:f3:c9:98:72:4a:15:dd:21:55:37:1b:7e:d2:27:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Validity
            Not Before: Nov  2 22:08:28 2025 GMT
            Not After : Nov  3 22:19:28 2025 GMT
        Subject: CN=FF23295D3B7ED2B68D79CC619CDEE32EAA300474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:8c:c5:75:df:ab:33:da:d9:c3:cf:6d:cd:
                    fd:ac:f3:80:4b:eb:0b:2d:41:e6:d8:40:21:ed:e3:
                    b8:f4:3d:ad:05:cb:c5:f1:c5:41:7b:98:f2:5c:72:
                    22:33:bc:55:56:27:6e:90:6a:18:e6:30:c7:e1:77:
                    3a:ec:6c:c6:36:36:33:08:85:15:5e:e5:01:f6:e3:
                    49:81:be:c6:1f:ba:21:b4:84:5c:06:00:a8:78:fc:
                    dd:3d:cc:11:e7:6c:92:fa:db:c5:26:ad:55:45:f4:
                    9c:55:09:39:8c:d5:3f:29:52:96:aa:82:4f:6c:f3:
                    8f:29:54:df:07:e6:4f:ab:52:de:ff:8d:cc:51:85:
                    c2:02:2a:5d:ae:a6:86:d8:37:9a:a1:54:3b:62:34:
                    bf:eb:fb:e0:bb:77:e8:66:0e:0a:6b:e1:3b:4f:95:
                    2b:b7:96:c4:f0:0d:79:1c:6c:78:37:84:f0:79:b3:
                    c6:86:ce:93:45:00:e4:94:8c:f7:d3:34:ac:a8:81:
                    9c:5a:a6:9a:b6:45:d4:a4:88:58:77:a9:dc:49:2a:
                    4d:81:cd:35:c1:35:5f:a4:e7:8d:9c:37:98:43:77:
                    9a:b8:7b:f7:6b:4e:8f:e4:f0:8d:ff:64:87:c1:fd:
                    0b:c0:d7:f1:dd:2e:6a:0e:ac:9c:e4:d1:af:77:97:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:23:29:5D:3B:7E:D2:B6:8D:79:CC:61:9C:DE:E3:2E:AA:30:04:74
            X509v3 Authority Key Identifier:
                keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:f1:bd:c4:7d:55:82:a3:2d:89:2a:72:cd:80:4d:2e:15:
         61:89:f0:f0:c0:55:e1:a4:31:0d:9a:8b:aa:c0:f0:cc:25:51:
         3d:76:bb:c3:a6:8d:c8:2f:5b:99:b0:79:6c:fb:50:9f:07:1d:
         59:57:04:03:bc:71:c6:a8:96:d5:c9:c0:ac:20:21:13:d4:f7:
         ce:41:fc:93:71:1e:32:5f:21:82:26:9d:f7:e4:16:3e:4f:8d:
         0d:cc:7a:dd:c8:5b:16:5e:3a:dc:51:9b:de:9f:35:1f:8a:e0:
         03:cc:42:cd:96:b9:cf:1e:f8:d8:d9:18:22:b7:0f:52:8a:00:
         ba:b5:57:4d:f2:2e:0d:9e:41:dd:15:dc:ef:5a:04:15:9d:ab:
         60:fb:7b:eb:7a:db:1d:6f:37:94:4a:b8:5d:8f:90:ca:d0:af:
         04:8b:57:43:df:50:77:d7:54:db:79:85:a6:3c:74:c1:1c:27:
         b2:61:a2:b4:4a:c5:0a:f7:54:ae:d2:49:df:4b:bb:3f:c6:d3:
         dc:5f:47:d6:ef:fe:67:9a:87:d1:25:7d:f9:fd:90:2d:e5:4b:
         b0:3b:3b:a9:cb:51:fe:43:94:62:54:dc:ea:e4:16:67:83:5c:
         82:d8:26:bc:f6:fb:59:86:ed:d7:59:92:43:57:2b:e2:9d:04:
         53:b4:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:35:11 2025 by rpki-client