Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
File:                     D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json)
Hash identifier:          injIZNjO+nF932BjnEdYpNoP+q2CMscdse24BmKAZ3U=
Subject key identifier:   49:83:68:FD:45:B0:AC:3D:FE:21:D0:B6:8C:8A:42:2F:A2:D0:9F:D5
Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B
Certificate issuer:       /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B
Certificate serial:       7D85C6819B5CFBD6B7079EAEBC52AFA40EF05179
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
Manifest number:          0192
Signing time:             Mon 20 Oct 2025 03:50:48 +0000
Manifest this update:     Mon 20 Oct 2025 03:45:48 +0000
Manifest next update:     Tue 21 Oct 2025 04:10:48 +0000
Files and hashes:         1: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=)
                          2: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=)
                          3: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=)
                          4: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: t3Dl1OZkIdYvA6ZBKRkXpt27Qou8zw6DsxP+upwpYsM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:85:c6:81:9b:5c:fb:d6:b7:07:9e:ae:bc:52:af:a4:0e:f0:51:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B
        Validity
            Not Before: Oct 20 03:45:48 2025 GMT
            Not After : Oct 21 04:10:48 2025 GMT
        Subject: CN=498368FD45B0AC3DFE21D0B68C8A422FA2D09FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:32:3a:b6:50:be:bb:fb:58:82:8a:88:a8:
                    7f:9e:60:74:fd:1b:b8:2d:05:30:a1:00:9d:58:e2:
                    f9:26:3f:1a:4b:51:16:16:bf:79:c7:37:57:bd:f1:
                    7d:0b:03:be:a9:3c:70:67:66:9e:3a:81:87:9a:89:
                    dd:80:4b:ad:bf:0b:0e:9d:c5:1f:61:72:06:29:39:
                    ac:d2:e9:6e:f6:c0:8e:70:55:be:9a:19:d6:d1:36:
                    9f:6f:64:7f:87:1c:a4:27:2f:fc:18:bc:23:8c:bb:
                    80:c3:e8:dd:61:53:7d:63:44:7d:06:7e:e2:99:93:
                    43:c1:0c:2c:75:88:fc:37:41:fd:e5:4b:a1:99:0c:
                    58:53:e0:73:6b:92:ad:ce:a6:61:48:92:9f:f5:43:
                    a0:4d:43:5a:8c:19:74:40:06:eb:7e:3f:b9:93:96:
                    e4:41:bc:c5:dd:6b:dc:a2:17:6d:89:75:3a:66:88:
                    09:15:94:9f:22:d0:7b:9d:c9:09:ce:1b:35:c4:4a:
                    dc:60:7a:3d:b6:6e:b5:6c:cf:72:01:96:87:ef:fc:
                    4d:3f:ec:ab:fd:7d:b7:1c:ec:b5:c3:a4:a3:d5:5f:
                    37:ac:c3:20:da:7d:72:5d:dc:2f:0a:25:27:69:f3:
                    fd:37:e7:7a:7e:4a:b9:5f:70:f3:60:70:23:7f:e9:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:83:68:FD:45:B0:AC:3D:FE:21:D0:B6:8C:8A:42:2F:A2:D0:9F:D5
            X509v3 Authority Key Identifier:
                keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a1:93:95:6e:4d:26:53:71:26:c6:f6:37:34:00:96:54:47:
         ba:ea:17:a8:1d:21:9a:a5:d9:f0:a5:98:67:b5:7a:eb:87:e5:
         10:12:f6:ae:3d:0d:a0:9c:f5:41:ad:7a:76:77:c0:51:d1:ad:
         8f:ef:0f:95:0a:f5:b4:5d:45:0b:59:e8:19:3c:42:4a:13:68:
         02:2f:71:64:18:3f:c5:bb:66:b2:ef:01:bf:83:02:2d:c6:df:
         34:fe:8c:1c:40:94:a7:16:50:37:78:34:e8:2c:01:b1:3a:b4:
         4d:9d:93:a7:0f:11:f9:31:5d:53:f2:3a:75:7e:5d:47:3e:49:
         6c:07:9a:de:38:c6:03:2e:08:74:b8:5c:9b:c6:b6:bf:af:5e:
         7f:44:bf:05:31:b1:6a:16:c8:46:db:b5:6e:aa:83:56:f5:ab:
         72:7d:d9:e0:04:49:2f:95:70:f2:9a:06:d4:07:6d:5f:b4:9a:
         c6:d6:65:66:c5:d8:1d:6a:bc:f9:e2:31:1c:99:e8:54:a2:b7:
         1d:4d:e4:16:48:84:5d:2e:10:00:49:3b:3e:c6:a9:87:51:c3:
         f5:f8:13:f5:cb:81:ec:01:72:38:df:48:dc:6a:81:4d:ee:ad:
         11:f4:50:11:3c:20:58:87:cb:23:8c:6a:e3:41:94:bf:52:93:
         fc:79:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:55 2025 by rpki-client