Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft (raw, json)
Hash identifier:          BTQ6cvcD7ACZ78gne2PC61lB6dSUvGi126bwWQuDUrk=
Subject key identifier:   E6:1D:12:DD:15:A0:A3:29:76:94:3E:69:40:E1:2F:E8:F4:95:D3:19
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       3573AD2D760B44DEE7B4A53D3A9DB686E6CB2950
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
Manifest number:          01AF
Signing time:             Mon 20 Oct 2025 08:14:39 +0000
Manifest this update:     Mon 20 Oct 2025 08:09:39 +0000
Manifest next update:     Tue 21 Oct 2025 10:17:39 +0000
Files and hashes:         1: 323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (hash: hQb+4bJCLueZdw9zMe8maPJ2VFU86LTKiK7lH2fIgzA=)
                          2: 3136302e32302e3137362e302f32342d3234203d3e20323731313130.roa (hash: roCjiwn3BFM68/X9lTNC/eHWHyzOA8loX33ToscVxEs=)
                          3: 3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa (hash: pTb4BZBb+vT1N3y2rOEzZTkDwA1MFDS+AauZA2gcMWU=)
                          4: 3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (hash: 8P1eaFp0tA8qC8rMxyfqGAMEpI9v3qQCV5zgBFTyZZg=)
                          5: 0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl (hash: 0klskev/G1W062TpeiLGO8wEvNl6SwOkH7BLf9swavM=)
                          6: 3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa (hash: 9nEqa5tSdE4U2Bk6FZixssrYslJxLVWNmjZzPYiScQE=)
                          7: 3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (hash: UdG7kbJM/WVCbUaEpLZG+mOcMv/uiRVonmIjQ54ofpE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:73:ad:2d:76:0b:44:de:e7:b4:a5:3d:3a:9d:b6:86:e6:cb:29:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Oct 20 08:09:39 2025 GMT
            Not After : Oct 21 10:17:39 2025 GMT
        Subject: CN=E61D12DD15A0A32976943E6940E12FE8F495D319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:3f:ea:f1:39:ed:bc:39:27:ab:98:c3:ce:
                    8d:ad:12:94:55:99:ea:5d:5b:df:75:fa:bd:cc:cf:
                    74:b8:21:0c:d0:2b:9d:5c:f8:df:66:dd:8f:0c:05:
                    74:88:1d:31:b1:1c:93:26:2a:a4:f6:69:fe:19:72:
                    50:e0:05:71:58:3b:4e:47:b9:45:ac:99:cf:6b:da:
                    86:68:7c:1e:3c:5f:21:16:d5:6b:13:9b:f7:1e:6b:
                    58:2e:af:7f:ce:62:82:63:e3:f5:92:ea:5c:0b:7e:
                    6d:1a:17:1b:ee:d2:1b:a6:5b:c8:17:bd:e6:b4:80:
                    05:40:0e:df:b2:b3:76:ec:37:08:cf:48:dd:19:26:
                    67:29:a0:1f:82:9d:bb:ff:24:16:f8:0d:c5:a3:3c:
                    aa:a1:e3:e5:f8:20:e6:73:03:d8:90:72:f9:1b:74:
                    52:92:1c:ca:c8:3b:e1:e9:1b:92:72:02:9c:49:2a:
                    af:d9:b8:22:3b:db:af:4a:f3:d0:17:60:68:df:13:
                    83:95:14:3f:2e:11:49:25:00:e4:c2:03:41:92:68:
                    35:3b:ff:77:f5:e6:ef:2e:0f:82:40:83:5e:0f:9e:
                    74:83:57:2e:01:8f:2d:de:66:b9:07:b5:e1:30:a0:
                    6a:91:d6:5a:aa:55:05:3a:62:3b:f8:21:3a:0c:8b:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1D:12:DD:15:A0:A3:29:76:94:3E:69:40:E1:2F:E8:F4:95:D3:19
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:12:8d:17:ab:75:c4:f0:2c:cb:ad:07:da:68:67:af:ba:bf:
         c7:e8:2e:65:91:76:f2:a5:5c:98:4d:25:51:f1:82:5b:9b:d6:
         bb:3b:10:e5:6f:99:96:3b:1c:08:b8:b3:dc:6e:f2:d9:38:a1:
         fa:7e:73:bd:30:be:d0:f7:b5:52:52:34:3f:85:92:b6:7c:ef:
         88:92:8a:bf:39:1c:14:f6:a3:5c:ec:9e:4c:49:c9:d0:30:e8:
         1e:f8:af:7a:2b:4b:53:63:90:24:27:b8:fd:f3:ea:a2:5b:fc:
         57:6d:f6:15:7a:df:a9:f7:af:1a:65:c0:e8:17:a7:f3:31:5a:
         4b:2c:f8:10:74:03:07:03:3a:f5:d3:06:50:3e:04:ae:16:ee:
         8a:dc:90:92:e7:67:0c:25:13:3e:b7:60:19:48:94:70:b6:c3:
         c3:6a:dc:af:40:9d:b1:c5:95:0b:aa:1c:d6:56:c3:0a:7c:92:
         cc:8a:e4:db:2e:c9:1c:96:2b:6d:62:5e:46:68:dc:1f:02:84:
         33:07:15:a6:64:70:74:76:be:63:58:f9:51:99:b5:6c:b2:da:
         2f:6f:9d:8c:ac:f0:9b:fe:78:e1:12:cf:49:37:78:15:6b:cf:
         02:94:e0:0f:58:22:f9:bd:e7:8e:5b:04:31:c6:0e:03:ae:19:
         1d:dc:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:58 2025 by rpki-client