Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
File:                     EA48F6970280B064226B470130F7ADE0F415C5C1.mft (raw, json)
Hash identifier:          5z1ko8lwbjdAqRxMz/Zw6dH8CZLTsQTKGWhZV+D7reI=
Subject key identifier:   63:9E:2C:60:32:C9:05:FD:67:81:02:B4:AF:1D:C7:BD:D6:DC:93:53
Authority key identifier: EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1
Certificate issuer:       /CN=EA48F6970280B064226B470130F7ADE0F415C5C1
Certificate serial:       6CBD244E662F9AF11E406EDFDB793117756BC72C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
Manifest number:          0158
Signing time:             Mon 20 Oct 2025 06:55:43 +0000
Manifest this update:     Mon 20 Oct 2025 06:50:43 +0000
Manifest next update:     Tue 21 Oct 2025 10:06:43 +0000
Files and hashes:         1: 323830343a356330343a3a2f33322d3332203d3e20323638383833.roa (hash: +J/+48PQGj3A8YAwbkAexgtHeTSwpiqQuxG8sDA/J9s=)
                          2: 323830343a356330343a383030303a3a2f33342d3334203d3e20323638383833.roa (hash: 29S1lj6TRjxi5yPYrKi0694KZs3I2sfOvG13TXgK8t0=)
                          3: 34352e3137352e35382e302f32332d3233203d3e20323638383833.roa (hash: n+SVZ37ddiQjaWGAN+O2uT8dPAKY3AhbVnXe6lFtccM=)
                          4: 34352e3137352e35362e302f32342d3234203d3e20323638383833.roa (hash: tI6yrpw+/5wafBoCgNBZfCHupB8kCNFNuBHaRHRb0zc=)
                          5: 323830343a356330343a633030303a3a2f33382d3338203d3e20323638383833.roa (hash: 6mx7nwudapfA5Brh2haHv5eQ3qZbR2lgCLn9y9c+pnk=)
                          6: EA48F6970280B064226B470130F7ADE0F415C5C1.crl (hash: qGhwwo3qBd4X9Dfvw3uBitaEvfZxSeVKvcH6T8/LTMY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl
                          rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bd:24:4e:66:2f:9a:f1:1e:40:6e:df:db:79:31:17:75:6b:c7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA48F6970280B064226B470130F7ADE0F415C5C1
        Validity
            Not Before: Oct 20 06:50:43 2025 GMT
            Not After : Oct 21 10:06:43 2025 GMT
        Subject: CN=639E2C6032C905FD678102B4AF1DC7BDD6DC9353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:ea:2c:62:f3:aa:d5:68:67:ab:72:b2:22:
                    d9:48:45:92:ae:d8:08:58:ee:d4:20:8f:a1:cd:63:
                    04:72:5c:be:f4:60:e9:a2:a1:58:6e:0a:06:64:85:
                    4f:9c:65:b2:bf:d8:35:f0:c8:86:57:33:6e:e7:50:
                    62:18:61:95:8e:6b:43:d8:ed:e9:3c:39:5f:23:f8:
                    a4:c8:d5:f7:d1:e5:38:0b:cf:f5:5a:94:de:ff:bb:
                    86:fc:b0:b5:23:1b:ed:e7:de:ae:a5:29:70:6a:87:
                    88:30:f7:67:e5:ee:ed:49:13:91:70:a7:e5:0b:d0:
                    ec:89:99:16:d5:d4:52:2a:c8:48:e4:c7:61:b6:8e:
                    7d:78:25:34:6a:80:95:a8:ad:36:79:03:43:34:d5:
                    7b:3c:0d:70:7a:3c:d6:72:fb:0d:82:f6:ec:1c:e8:
                    89:a8:ab:a9:c5:43:1a:1f:16:0a:52:de:e7:62:ba:
                    9e:4d:56:9c:aa:c0:37:b4:c4:2b:07:16:30:2a:bf:
                    6a:9a:f0:8c:31:36:57:b4:d3:ee:11:15:2a:54:52:
                    40:4d:a0:fe:ea:00:02:87:fe:d0:a8:18:d6:41:ca:
                    b4:fa:58:0b:71:3f:bd:15:dc:0e:f1:56:d0:92:65:
                    70:47:cd:18:b5:bf:49:69:2f:bf:91:8e:6a:29:c5:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9E:2C:60:32:C9:05:FD:67:81:02:B4:AF:1D:C7:BD:D6:DC:93:53
            X509v3 Authority Key Identifier:
                keyid:EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:19:e1:7d:66:15:af:2d:af:48:41:fb:7e:28:38:1f:15:e2:
         4f:26:80:1c:1e:da:0b:91:46:92:a7:f7:a9:5a:6f:f4:f8:1d:
         36:4c:70:f7:d9:91:f1:59:dc:c9:e4:f7:36:79:28:d2:c5:b2:
         c8:55:cf:f1:a8:e8:ac:6a:e1:c0:b3:63:d1:d0:fd:5d:73:1e:
         79:60:3d:0a:b6:73:b9:91:c6:74:66:3f:be:44:ef:a8:f0:c8:
         b9:93:25:19:25:2e:89:b3:1c:49:a4:e4:6c:5b:3f:e5:9b:6d:
         0b:3f:d3:bd:ba:8e:60:84:66:4b:82:42:44:b1:ec:42:4d:97:
         ef:65:f7:71:e6:38:06:76:5f:c8:d5:f5:4a:f0:c6:09:e6:95:
         dc:f0:4e:be:e5:b0:69:92:48:43:b8:f1:60:57:83:15:d2:16:
         d9:2f:47:6d:3f:70:2d:ea:89:76:7e:d2:4b:39:f1:27:31:31:
         55:25:fa:eb:9b:b1:a9:d6:a7:82:0f:80:1d:27:1a:ed:4b:8a:
         95:1c:bf:8a:3c:dd:29:e4:2b:a4:c8:22:ee:eb:2b:6e:47:ab:
         34:a3:16:32:22:a9:84:ca:58:ba:9e:c3:c0:6c:61:c8:59:2b:
         23:01:54:be:50:23:7c:c7:21:e6:32:05:40:37:42:64:39:cd:
         4e:7d:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:32 2025 by rpki-client