Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          vB8+cXXTuoyfi+QACo8ZB7w4zpEp+NrZP3U9QdcR8Do=
Subject key identifier:   00:82:CC:8A:50:54:4D:13:C0:D6:89:C0:1C:40:EF:51:A0:17:A0:39
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       5E9A150C914B298076DEF33CAD14F32CA0BCD24F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          0254
Signing time:             Mon 20 Oct 2025 06:51:28 +0000
Manifest this update:     Mon 20 Oct 2025 06:46:28 +0000
Manifest next update:     Tue 21 Oct 2025 10:28:28 +0000
Files and hashes:         1: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: iUhuZCqf+gxZqO/cM6ScZTXsH+jrXHXlfnCWGA2Il7o=)
                          2: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: 6JWd5mE5VskzKa06dOehuRC38l54iLZvDm8ktJiyfoo=)
                          3: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: j1nslom0e916eBzyw+5Vl34iuI8TAS5aLHgLgLAY4IU=)
                          4: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: jjkK6I+oxF27Zn+hFNgeO1Co4NAnpp1C7qu8FLGYa5c=)
                          5: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: p5omUXy9yYQivxpLEK7G+/QEmnDJdLq1oFkSlZc70J0=)
                          6: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: 78++bmMlB0Bovi7AyiX7x6vYCK0aaHsx+gF5MCimEZY=)
                          7: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: R+lJ3l7UdjCU7kkCR68kGkR301UIjRYBugRziVPE9yM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9a:15:0c:91:4b:29:80:76:de:f3:3c:ad:14:f3:2c:a0:bc:d2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Oct 20 06:46:28 2025 GMT
            Not After : Oct 21 10:28:28 2025 GMT
        Subject: CN=0082CC8A50544D13C0D689C01C40EF51A017A039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:7b:56:38:c3:c7:37:eb:2c:b4:a7:ec:35:
                    cd:24:3c:d8:26:b8:d8:c2:8d:de:80:0f:e1:4e:91:
                    8d:44:b6:39:e6:3b:ef:fa:02:d0:67:74:80:a2:6b:
                    eb:24:06:09:1c:69:4b:20:77:ec:96:df:ad:e9:f1:
                    e5:b8:d9:f4:6f:d3:3e:bc:ec:0d:10:cf:1e:07:27:
                    3d:69:b1:27:5b:9b:67:91:da:b7:07:ec:3a:1c:50:
                    f0:9b:d7:b0:56:83:e3:6b:0c:a0:00:1b:8f:55:d7:
                    1e:63:09:79:7b:f5:8d:55:ed:4b:1b:d8:d5:16:8e:
                    43:62:8b:71:7f:04:6a:66:e4:c4:d2:f6:e0:89:0b:
                    d6:2f:4c:c9:e5:d1:fb:db:1b:66:a2:5e:af:d7:bf:
                    8b:c2:63:c1:f9:e8:df:4a:df:03:68:e9:78:e8:5b:
                    e4:37:6f:9b:cb:e7:ee:b7:03:45:d8:72:8e:36:db:
                    36:45:1c:53:d1:fb:48:7c:cf:d1:fd:29:f9:10:c2:
                    40:b7:1d:98:b0:81:de:6f:33:c5:15:71:e3:a4:c3:
                    d8:7c:f2:5a:3f:1e:32:5b:7f:a2:89:16:50:13:e5:
                    5e:00:31:a4:5d:26:15:53:7d:08:9a:e2:57:11:5b:
                    ef:7e:e8:4f:40:9b:9d:de:bf:fc:8f:bd:29:b4:c6:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:82:CC:8A:50:54:4D:13:C0:D6:89:C0:1C:40:EF:51:A0:17:A0:39
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:19:87:67:a1:82:6f:a3:bb:cd:b6:17:da:e4:c9:cc:12:
         03:a3:0b:c6:93:9c:ef:49:75:a2:af:5d:d9:62:bc:22:3e:47:
         ab:22:d3:3f:82:01:9d:d1:d8:b7:33:b9:f3:49:a1:ad:bd:cc:
         ad:8d:14:1b:79:b3:44:3a:13:b5:8a:46:7f:17:cc:8e:85:31:
         d5:68:28:ba:f4:7c:8f:8f:68:ea:7a:27:d3:86:bb:ff:68:cb:
         3b:5e:e6:40:2d:33:00:55:ae:a9:dc:b6:5e:61:b7:2b:a6:67:
         7a:56:23:4a:c9:57:b9:a6:b1:6e:9f:2f:2e:5a:6c:23:aa:5f:
         be:01:8c:06:3e:bc:0e:fc:34:c7:63:c5:c2:ad:78:ee:4d:6a:
         2d:ee:8c:60:28:a9:13:0b:41:f3:28:aa:85:57:90:cc:62:d0:
         94:54:cc:cb:0c:e2:f3:00:27:29:ef:af:86:bf:e1:f9:4f:93:
         f5:d0:1d:16:de:47:db:ab:1d:ab:77:4d:6a:a1:ff:ca:49:bf:
         6a:93:14:62:c5:10:2d:95:d4:0b:4a:08:dc:8d:70:db:38:34:
         8d:a8:26:f5:2d:df:62:17:6c:bd:63:34:f9:87:fe:c1:9c:e0:
         ab:ad:91:19:6a:64:7a:af:16:21:43:ed:10:2c:7d:4e:3f:70:
         83:07:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:41:47 2025 by rpki-client