Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
File:                     36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft (raw, json)
Hash identifier:          ksjtzFRV/L4A9ww67YTNzFb+6iIvE/3PYoZpFfzWOCU=
Subject key identifier:   16:4E:56:59:00:5B:48:65:32:CE:0A:72:D6:C0:73:AE:95:B8:59:AD
Authority key identifier: 36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80
Certificate issuer:       /CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
Certificate serial:       135971E87FDEF02372A8B847354096D1548B30D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
Manifest number:          2E
Signing time:             Mon 03 Nov 2025 03:03:42 +0000
Manifest this update:     Mon 03 Nov 2025 02:58:42 +0000
Manifest next update:     Tue 04 Nov 2025 05:15:42 +0000
Files and hashes:         1: 3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa (hash: Q8UBRh0hTfSCsd4RiacAAKcPqzHAfv45lX+zztg4Brw=)
                          2: 323830343a326533633a3a2f33322d313238203d3e20323635333334.roa (hash: QF8VQwARJKuaS0v6ROc9Wa6I26Qc9yQxM436sBW0P3o=)
                          3: 36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl (hash: 7qXD6oTUSolUdnCqspC8D4bWfGW5oh4t0+fnk9DqEYw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl
                          rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:59:71:e8:7f:de:f0:23:72:a8:b8:47:35:40:96:d1:54:8b:30:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
        Validity
            Not Before: Nov  3 02:58:42 2025 GMT
            Not After : Nov  4 05:15:42 2025 GMT
        Subject: CN=164E5659005B486532CE0A72D6C073AE95B859AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:b6:1d:97:85:37:47:32:db:12:63:87:52:
                    dc:87:e8:aa:1a:59:fb:42:b7:de:9b:c1:e2:a4:69:
                    aa:1b:a4:8d:54:2a:d0:69:da:24:d2:8a:a3:82:f3:
                    b8:bc:3f:0c:9a:ba:e9:9d:a6:5e:42:12:30:f4:42:
                    b4:ce:d7:38:65:93:8f:d2:b1:cf:3e:67:6a:c3:f6:
                    05:a3:ec:b7:b8:d6:fc:24:82:b3:eb:b0:9f:01:21:
                    a9:b6:15:9e:07:2b:bd:c6:c6:9b:82:73:02:a2:85:
                    a8:9c:59:6c:83:b0:0f:79:24:5a:1a:76:45:ce:db:
                    a5:dc:60:81:e7:b7:3c:2b:59:73:23:e7:b6:e5:f1:
                    c2:3b:42:cb:b3:a4:78:62:8f:66:86:c4:98:31:39:
                    5f:66:e9:a8:77:74:55:af:a7:fa:ec:bd:94:32:ea:
                    c7:42:d9:3a:0f:dc:69:9f:d7:33:12:ea:e8:72:7a:
                    7d:a3:66:65:6e:f7:0c:40:c3:48:31:52:be:be:4e:
                    11:8f:66:3a:fa:55:34:ea:62:2c:5c:fc:cc:29:e2:
                    83:2f:73:05:68:43:b2:d9:e8:a6:61:71:45:92:b8:
                    b0:3c:09:c8:c9:d2:64:40:d2:78:b8:66:d1:54:cc:
                    b8:ec:51:65:81:f0:d2:43:ac:0a:a9:5f:54:eb:23:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:56:59:00:5B:48:65:32:CE:0A:72:D6:C0:73:AE:95:B8:59:AD
            X509v3 Authority Key Identifier:
                keyid:36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:68:f8:d6:02:9e:11:da:d0:ed:ea:2e:16:62:19:3f:e4:dc:
         b8:f5:ba:32:2c:3c:5b:c7:46:b4:e8:63:be:b8:2d:6d:3f:60:
         10:7a:1d:de:e1:47:11:3d:18:a4:5c:47:b8:e6:86:09:16:88:
         36:bf:2c:45:65:e1:c7:5c:b5:aa:22:70:90:93:54:6b:15:e9:
         93:b6:38:56:6c:7f:46:f5:aa:0b:20:ca:8c:d7:f6:05:af:eb:
         19:a6:24:b3:33:32:22:8f:aa:e6:e0:da:5b:0c:05:19:63:d4:
         37:25:3f:7f:34:c9:a2:b5:e0:38:6b:3f:e0:2e:c6:ae:30:24:
         63:82:78:bc:19:ca:aa:e7:01:83:75:13:05:df:51:d2:c4:51:
         35:d5:48:81:fd:d3:80:86:fd:01:c5:27:c7:f4:75:3c:45:f2:
         10:97:70:e6:c2:23:7a:6f:8b:f1:b9:93:c6:8b:f7:4b:21:73:
         5c:82:5d:ac:f6:97:75:8f:23:ba:8b:29:c4:a1:77:b5:d9:db:
         00:e4:03:b0:72:c1:95:d4:53:0f:a6:5b:9f:74:39:00:32:f3:
         ae:b0:0b:7b:61:dd:3f:2c:11:05:61:8c:8b:a5:66:e3:16:bc:
         a7:98:b4:75:8b:c0:5e:96:f1:62:37:1b:15:21:68:5d:cb:c4:
         1e:7a:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:16:43 2025 by rpki-client