Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
File:                     154E883FCB52E91706C17788E2199491DC6E45F7.mft (raw, json)
Hash identifier:          adsnCi+N4/HHNIWtjWOKw2eADrVSPSXP0AaZUdGjYc4=
Subject key identifier:   45:71:10:8A:C3:90:15:18:88:41:B4:FC:10:03:7D:7F:4F:78:D1:91
Authority key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7
Certificate issuer:       /CN=154E883FCB52E91706C17788E2199491DC6E45F7
Certificate serial:       2C301B68E19DBF1CF9BD70F1296EE039319F3350
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
Manifest number:          0198
Signing time:             Mon 20 Oct 2025 08:33:57 +0000
Manifest this update:     Mon 20 Oct 2025 08:28:57 +0000
Manifest next update:     Tue 21 Oct 2025 11:42:57 +0000
Files and hashes:         1: 3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa (hash: pNbhPDxda7jRgPzU04Q9/bS8qQcdhfwJ71v1pPX72ss=)
                          2: 323830343a323264633a3a2f33322d3438203d3e20323634313237.roa (hash: orUpteGth+JTOjLIpkDk5D2ZHYpZbmhzL1wAvYz4Wnc=)
                          3: 154E883FCB52E91706C17788E2199491DC6E45F7.crl (hash: /mJJM5hQ4sjDXBrYvlS3idbByfJX6d/Gwjh+MgpwWuU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl
                          rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:30:1b:68:e1:9d:bf:1c:f9:bd:70:f1:29:6e:e0:39:31:9f:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154E883FCB52E91706C17788E2199491DC6E45F7
        Validity
            Not Before: Oct 20 08:28:57 2025 GMT
            Not After : Oct 21 11:42:57 2025 GMT
        Subject: CN=4571108AC39015188841B4FC10037D7F4F78D191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:8d:b6:65:4b:f1:e1:72:17:fc:28:f1:a1:
                    c4:6b:93:d2:c1:25:b4:49:b3:5c:96:0f:aa:3e:cc:
                    c7:b3:d3:39:0d:24:fb:7d:be:71:66:22:5f:61:96:
                    62:dc:25:4f:aa:73:ad:63:f8:03:fb:19:34:b2:8b:
                    73:6c:0b:3a:f2:ad:04:2e:d9:2f:c4:9b:cc:a7:66:
                    97:72:44:0c:96:c9:a8:4c:de:c7:e5:59:4d:6a:9f:
                    5c:66:53:32:7c:08:00:ef:69:f9:3d:ab:b1:c4:db:
                    cf:65:b5:a4:b2:18:6d:3a:60:8d:14:5f:60:c4:c3:
                    1f:70:d0:6a:be:25:01:9a:33:56:e9:ff:19:60:75:
                    61:18:61:33:0c:53:fd:2b:6c:61:84:1a:c1:f9:ee:
                    76:07:8a:b2:c8:95:59:bc:49:7e:32:81:96:41:31:
                    42:84:4a:5e:bf:4f:79:52:51:81:af:90:88:ab:a9:
                    fa:ba:aa:6f:9b:e8:d0:8e:90:b0:64:ef:ef:5d:e3:
                    65:f1:53:16:85:26:03:b9:fa:71:27:cd:0a:44:2c:
                    b2:db:19:52:0a:ab:ff:8c:67:1b:62:f5:1c:d1:3d:
                    f4:37:69:d5:dd:05:0a:93:99:db:b5:1c:d5:da:b9:
                    f7:0d:f8:d7:78:8b:7b:01:f6:29:88:e2:f7:88:75:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:10:8A:C3:90:15:18:88:41:B4:FC:10:03:7D:7F:4F:78:D1:91
            X509v3 Authority Key Identifier:
                keyid:15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:53:d8:4e:3e:64:a1:73:dc:4b:63:69:23:83:b1:a0:04:
         5e:be:4e:71:19:c1:a4:b9:4a:4c:e0:31:54:e8:b9:4b:d4:39:
         1d:c6:f6:7c:51:fd:20:38:1c:06:c2:30:76:99:d8:d0:e3:f6:
         76:e8:20:25:de:54:31:ca:a2:d6:c1:48:4c:0d:33:c6:76:d8:
         42:f0:0f:a5:84:d4:33:a7:6d:e9:34:7f:ac:0d:af:7e:80:2a:
         fd:f6:d1:4c:c2:01:69:04:0d:ae:01:b7:5d:04:a5:d7:ba:ed:
         cf:08:5d:a8:26:b7:1d:4a:7d:63:83:36:60:c8:cc:5c:7d:75:
         c6:0f:ca:a8:5e:20:41:2d:c7:e9:85:7b:10:39:66:c2:ec:a8:
         01:18:00:ea:28:17:29:ad:6d:0e:99:cc:64:a2:ec:de:d6:74:
         0a:0c:78:18:d4:8b:02:61:b5:5b:71:51:10:98:a8:59:1c:1c:
         7b:a1:f3:c7:3a:e2:9b:74:00:8f:02:81:b1:19:6e:13:b6:4f:
         f5:de:ac:6e:3c:f6:61:df:b0:e0:70:a5:b8:73:b4:bc:df:30:
         df:45:33:5a:65:02:60:d4:b3:f5:12:5b:70:30:51:05:f9:e5:
         4a:54:21:e6:d4:d6:73:4d:8e:19:2f:5e:66:22:7e:9e:97:86:
         16:c6:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:47 2025 by rpki-client