Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          0IpbFSkj8/8Rr20T/5mjWVw7viJtgOp/hgyvQiYreGA=
Subject key identifier:   10:BE:0F:F4:1E:15:C1:56:63:5F:95:1C:84:5F:E8:B2:C2:00:4A:1D
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       0FFD47F81CDB98CF6A448CC64053C9657BD3424B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          0366
Signing time:             Mon 03 Nov 2025 02:10:00 +0000
Manifest this update:     Mon 03 Nov 2025 02:05:00 +0000
Manifest next update:     Tue 04 Nov 2025 02:10:00 +0000
Files and hashes:         1: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: MuLCu/ebtGTRQdFTtxwflEFsRUPY8b2YKd2KzoWHrGI=)
                          2: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: WZr+/Q54cg2mZtFayzv8bTTykV+0uhwUu5vv3XCe91s=)
                          3: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: jNre954ylBKqBfqOR7sW+4P/02andW5wroDJrSD+LJw=)
                          4: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: ccCrOPO+fniR7wGL9nAJb4TbiYc08AJ9vqTsfD1PrJw=)
                          5: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: pYX7gLD942b9mIMDP9CQQscGPQ3cTGQQeX55sgOWnHI=)
                          6: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 8tcPtbeFADqn7j5wPgEV/xkungZIxf0p1KKa9Fv9kro=)
                          7: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: K6MwIK+3msfBTjd+nDj6vx1bhEf6yAKnBKiZuf/G4hg=)
                          8: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: w5Aup+NkUiSPGJOkgm0D2pt62dq35BDv6u3R+EXF5Y4=)
                          9: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: YHcOeZAppI0yBQHU5VaAv9v49jpZW7BbBaBFcagKeAo=)
                          10: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: +MxwWMlz9S9ev8gjiYaaRI7n12W9bpBHWTXxklmRXcg=)
                          11: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: YkiMOKlXUfp39jAbnOanM0KLPuwUcDBAVWsGF1xqc/E=)
                          12: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: wBg7OLAC+U5rb0dz2JZauuXhMzmWVbds76u/zhua/YE=)
                          13: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: PsG/KbNUa3nKz87y+qnxaBmbAh/4v58jK3L06h+VOiI=)
                          14: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: 7z7st9VExUOxO1HPQ6IHGyHiaeWv0sgAdWNGW8vEHnI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:47:f8:1c:db:98:cf:6a:44:8c:c6:40:53:c9:65:7b:d3:42:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Nov  3 02:05:00 2025 GMT
            Not After : Nov 10 02:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:17:99:72:ef:3f:31:74:00:d5:71:3c:10:
                    43:c4:55:d7:37:fd:dc:94:68:ec:4e:a4:07:da:99:
                    39:c7:be:ee:2b:af:9d:f3:b8:8d:28:6b:c3:ff:95:
                    9c:20:10:60:e6:07:dd:2e:8a:f5:8b:27:be:7e:3c:
                    b7:6c:9f:fa:a9:d4:8c:ef:6f:1b:64:62:48:31:56:
                    94:28:18:2e:3c:ad:3b:31:56:62:2c:e6:69:00:73:
                    bb:a2:7f:2e:cd:cc:68:fa:fb:fb:13:93:b9:41:38:
                    34:cf:14:c0:dd:7b:32:9f:69:cd:81:1d:ae:fd:b0:
                    ae:d3:9d:39:35:19:9f:9f:f1:af:10:29:33:78:ea:
                    12:24:04:dc:c7:23:8a:a2:fd:e4:32:06:2a:e0:5d:
                    d1:9a:e0:2c:9f:c4:c8:e1:f9:df:75:49:ab:22:fe:
                    67:e4:27:62:5f:1c:5b:32:3b:2c:e3:b7:87:8f:7d:
                    a0:15:a0:df:27:94:19:0d:93:75:09:bd:6b:1b:4b:
                    c6:e8:83:ae:1e:61:dc:8b:29:42:31:ac:2a:a7:9d:
                    05:5e:d3:a0:59:5a:6e:71:e9:73:d2:f6:5d:04:a1:
                    c2:e4:ab:fa:35:dd:55:9e:21:30:8f:97:fb:75:14:
                    9a:84:8e:d9:70:44:2b:09:52:bf:17:21:e8:a9:f2:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:0F:F4:1E:15:C1:56:63:5F:95:1C:84:5F:E8:B2:C2:00:4A:1D
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6e:e9:2d:2a:e2:10:fb:6a:0b:dc:21:11:a9:24:2d:9e:d6:
         11:36:bf:b4:5b:3b:57:fb:91:ec:bb:6f:78:df:d2:81:4c:bd:
         4f:cf:6a:3f:24:e1:4c:bb:8a:b8:45:7f:79:f1:87:99:f1:f3:
         32:75:1a:b1:f7:f6:8e:95:70:b5:18:54:6a:04:79:23:14:b7:
         6b:22:a4:95:6f:5a:27:0a:20:28:b8:89:16:ec:53:56:cd:62:
         a2:a3:81:67:f4:d4:b3:a4:d9:a0:9a:54:61:c5:ae:43:b4:aa:
         a3:6d:25:99:75:3c:28:8a:c0:9c:96:28:82:e1:a8:dc:8c:77:
         be:ec:0a:d5:9d:71:5c:53:c0:17:58:2b:a9:ef:cb:83:08:32:
         b9:94:35:81:03:9e:c2:0c:be:b8:6e:1a:3e:bc:8d:d1:00:a2:
         c0:4f:a1:c1:88:cd:27:9a:30:87:80:d8:7a:01:f4:70:06:04:
         0b:f7:4d:a4:42:84:c6:48:fb:7c:4c:6c:84:9a:1f:63:d9:9c:
         7c:98:81:45:34:74:78:8a:5f:96:55:63:5d:b2:4c:7d:78:ee:
         a7:1f:e8:cf:dd:2b:49:60:51:ea:bb:b8:a0:94:6b:74:9b:70:
         3b:2f:4b:c1:46:31:73:14:d2:4a:5c:2e:e6:12:a0:16:72:91:
         fa:85:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:36 2025 by rpki-client