Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          Lh7FPBdTTb0wukGF3ga1GVHx0tUhWrZIs+GtgI0nzsI=
Subject key identifier:   63:8E:36:7A:79:06:38:9A:E9:9B:E1:9C:FC:81:48:B7:27:61:00:2B
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       5BD0B44EF74DFFA14ABED377CE0D545D8B8DB1B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          0354
Signing time:             Mon 20 Oct 2025 14:40:00 +0000
Manifest this update:     Mon 20 Oct 2025 14:35:00 +0000
Manifest next update:     Tue 21 Oct 2025 14:40:00 +0000
Files and hashes:         1: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: aGIl/LE/JlIFKLywuV74BW53ExFvQdI3FynFIHfHA0Q=)
                          2: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: kpz85S3F/UyvIFg4nsGD0TyPoEsIWKIs/mVtBE/XNfQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d0:b4:4e:f7:4d:ff:a1:4a:be:d3:77:ce:0d:54:5d:8b:8d:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Oct 20 14:35:00 2025 GMT
            Not After : Oct 21 14:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:24:47:53:ff:2d:d6:f5:08:a2:66:d3:65:
                    aa:29:7d:40:f9:ee:74:eb:9f:2a:11:08:83:f7:1c:
                    96:8a:65:e3:ec:04:97:a0:4a:1e:50:74:f9:0b:dd:
                    ca:4f:1a:b4:6f:0b:34:4e:bd:b6:01:15:71:ac:2e:
                    6c:df:74:d0:84:68:a7:1c:9f:54:43:4a:1e:55:e8:
                    b5:b6:2e:1f:a6:67:ed:36:b9:d4:49:bd:b9:79:43:
                    02:5b:33:1d:31:d2:e0:bb:82:da:37:a0:2f:ca:66:
                    e9:22:cf:aa:7a:cc:7e:16:e6:c4:14:f5:1a:98:47:
                    56:d8:ba:44:99:5b:70:87:b3:70:e2:a4:b0:5c:ea:
                    8b:49:7b:c1:94:ab:8d:10:a2:ed:b8:4d:d2:4a:50:
                    17:aa:6c:e4:45:53:37:a3:08:5a:61:1f:f8:4d:83:
                    90:e4:e9:f5:d2:af:c9:af:54:03:ac:a0:b3:5e:6c:
                    80:cb:aa:5f:b5:4c:92:c2:06:02:aa:14:e6:2d:e3:
                    53:31:ca:30:62:c7:74:74:e5:2d:b1:05:72:e1:e3:
                    53:22:ed:e4:85:54:85:b1:80:fa:66:d0:cb:99:e7:
                    e3:86:1d:73:ae:33:ed:29:96:91:70:6f:4b:12:11:
                    cf:ed:fe:58:10:75:5c:23:b2:a6:6b:75:2c:14:07:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8E:36:7A:79:06:38:9A:E9:9B:E1:9C:FC:81:48:B7:27:61:00:2B
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:38:21:ee:0d:57:a7:da:d8:70:41:66:59:ea:a5:a6:ac:
         3e:20:14:ae:53:15:d1:17:27:bc:38:a4:32:ff:17:6f:e1:78:
         21:90:b4:a5:80:98:8e:40:da:12:a9:99:6f:14:51:0f:c0:9b:
         25:ea:12:c2:00:e8:e1:21:e6:c4:97:bc:e7:e1:fb:16:ac:49:
         15:90:9a:f0:04:83:69:a5:97:61:fb:f3:4e:ea:72:30:41:68:
         99:e8:d6:dd:7f:fa:1a:48:74:29:f3:2e:58:fc:be:05:29:9f:
         8c:b2:ef:3a:df:9d:31:71:c1:5b:ba:58:bc:84:b5:5d:37:73:
         64:11:71:70:87:df:3c:2f:b9:36:35:7f:f6:b4:34:32:c3:b0:
         e7:58:0c:66:1c:b8:74:a2:9b:b8:25:19:63:ec:f9:93:27:b4:
         de:28:61:2d:10:07:2a:c9:19:12:d8:a1:60:9b:df:12:c1:d3:
         74:79:4d:1a:e3:78:95:aa:39:9e:5a:74:de:60:5d:1a:00:c6:
         71:98:5e:a5:d8:0c:7d:1d:bc:8b:7c:ed:87:94:f4:77:69:f7:
         25:1e:d0:87:fb:5a:c5:31:0a:56:bc:dc:e0:df:7a:59:12:cc:
         7f:68:2f:a7:f8:4e:80:66:3d:43:0d:1e:b7:52:33:d8:21:ca:
         72:e2:7b:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:22 2025 by rpki-client