Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
File:                     98980CEC2611F43F690D06E91CE7253FC1396E1D.mft (raw, json)
Hash identifier:          kCJf2ImsUZTRcuOFPQFXF1UNe3RBzg3TQCAzCqcygUU=
Subject key identifier:   13:8A:6B:2F:5B:3A:9F:1B:B9:18:9C:E4:96:AF:CF:A2:FC:E4:28:E7
Authority key identifier: 98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D
Certificate issuer:       /CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
Certificate serial:       12E18748860674C81437CFF157B5A12F82E5B339
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
Manifest number:          012A
Signing time:             Sun 19 Oct 2025 13:07:07 +0000
Manifest this update:     Sun 19 Oct 2025 13:02:07 +0000
Manifest next update:     Mon 20 Oct 2025 16:23:07 +0000
Files and hashes:         1: 323830343a376135383a3a2f33322d3438203d3e20323731333631.roa (hash: UghSLn3A+ytTKvqndTJ2o9qFeZaiTsBd07Fh0T7LKt4=)
                          2: 3137392e302e37362e302f32322d3234203d3e20323731333631.roa (hash: RRR55kh3PsEBtltJnYpzmvXcONn+w6LhmOV77SpKi/w=)
                          3: 98980CEC2611F43F690D06E91CE7253FC1396E1D.crl (hash: N/ax3hdWRJri328qb2IJnmT5yHbyrSaaaBBIw7Zx6P0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.crl
                          rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 16:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e1:87:48:86:06:74:c8:14:37:cf:f1:57:b5:a1:2f:82:e5:b3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
        Validity
            Not Before: Oct 19 13:02:07 2025 GMT
            Not After : Oct 20 16:23:07 2025 GMT
        Subject: CN=138A6B2F5B3A9F1BB9189CE496AFCFA2FCE428E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:04:f0:02:9f:93:1a:d8:44:e4:8f:a3:42:
                    ca:b0:07:3c:ea:79:7e:cb:4f:56:e5:c0:c0:1b:74:
                    f8:7b:f6:5e:d6:97:2e:5d:9f:6b:8b:d8:28:4a:74:
                    8a:6f:e0:02:b8:ac:83:e7:8c:21:30:cf:41:03:75:
                    66:2a:e9:91:b1:fc:44:b5:5e:0a:eb:d7:5e:92:ba:
                    9a:83:03:f8:1a:82:0c:a5:bf:fe:86:7d:eb:78:9f:
                    33:39:d1:23:e8:6f:03:d5:e6:f6:d1:64:8e:4f:84:
                    46:3d:66:9b:74:d7:ed:8c:c0:d7:71:ee:49:f3:d8:
                    68:8e:93:69:22:4d:5a:41:c4:97:7d:64:dc:88:91:
                    33:c4:88:fe:73:fe:24:23:a1:96:1e:b3:9c:55:19:
                    f7:54:56:75:58:21:f0:68:5f:cb:1a:0d:f0:b1:a5:
                    35:fc:f1:2d:44:c9:89:5e:80:25:91:9a:e1:fa:ac:
                    af:8e:7d:c0:02:24:c5:04:fa:ca:3e:8b:c1:6f:cb:
                    ee:01:15:e2:ff:5b:89:10:9c:c7:a7:61:41:78:5d:
                    af:cf:e2:7b:d6:a7:71:cc:80:69:26:12:d7:53:60:
                    45:0f:99:1b:9b:5f:e9:39:62:c5:a8:1c:e6:11:45:
                    09:61:ab:69:a8:00:e7:c6:b0:f0:f7:39:7e:7c:82:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8A:6B:2F:5B:3A:9F:1B:B9:18:9C:E4:96:AF:CF:A2:FC:E4:28:E7
            X509v3 Authority Key Identifier:
                keyid:98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:2b:4d:91:c2:3c:3a:70:13:91:ec:f9:a2:a3:14:60:25:
         1b:90:91:c0:41:98:3e:96:7c:32:d2:49:57:6c:c1:31:10:a4:
         4a:16:cb:a9:8c:1c:58:11:ff:8f:b1:ad:57:9c:31:22:ea:4e:
         9a:10:65:e4:73:63:9f:c6:00:a0:1e:74:92:50:da:21:56:25:
         7b:10:a3:ad:19:b5:51:22:87:ce:02:36:82:19:0d:12:70:83:
         56:2c:66:b6:28:98:b5:57:af:96:67:0f:0f:05:5f:0f:d7:04:
         aa:09:5f:d1:c8:4e:a8:54:8e:4c:9a:ac:02:9e:62:04:ea:4a:
         28:cf:d6:75:18:40:4f:a8:26:f2:ac:37:13:7c:f7:ec:f1:99:
         b8:d4:f2:f3:59:85:48:20:4c:82:52:b2:47:70:6f:22:36:a5:
         65:95:6c:e6:c5:af:01:60:d6:a4:3f:29:11:a7:e0:63:88:22:
         53:0d:b3:54:53:c6:ac:25:21:b0:50:ac:8d:e2:e7:fe:0b:3a:
         ef:ea:e2:4e:62:f1:b1:4d:8a:f3:58:09:d6:10:fb:01:5b:0e:
         2c:1a:8f:09:5e:66:11:42:7a:b7:ad:0e:bd:65:bb:e1:1c:38:
         3e:28:c5:fa:0b:a7:13:9f:2e:bb:91:d9:37:e5:be:da:2a:a3:
         e6:05:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:50 2025 by rpki-client