Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
File:                     0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft (raw, json)
Hash identifier:          GU5/0Kqvevf6Zv2/y6bBtnainRbcX+jA41gFkbFGO/w=
Subject key identifier:   04:E2:D8:F9:BD:C1:B1:49:A6:C8:74:14:C0:7C:93:0E:DF:66:E9:26
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       52C9C0BD0EF91FA12157430F6C685286E18250F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
Manifest number:          02F0
Signing time:             Mon 20 Oct 2025 12:20:59 +0000
Manifest this update:     Mon 20 Oct 2025 12:15:59 +0000
Manifest next update:     Tue 21 Oct 2025 15:48:59 +0000
Files and hashes:         1: 3137372e38362e3132322e302f32332d3233203d3e203532383532.roa (hash: xKIUrVIggq7PIZczk4fzn7vaaRw+Y/bqcfY/oeOEoz0=)
                          2: 0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl (hash: t1c6HGSgCODwFSW/LNW3MQFW/EN8KvBwTx4w4odyvCo=)
                          3: 323830343a3833303a3a2f33322d3430203d3e203532383532.roa (hash: OAY+O492sH9oOGRpJqR13+gX5LH1Nb82jzo1Fv50v3k=)
                          4: 3137372e38362e3132332e302f32342d3234203d3e203532383532.roa (hash: V8CtQ5Zq95IJWpTwL89tfgGHZMz+x4t3OvkK650zzMM=)
                          5: 3137372e38362e3132312e302f32342d3234203d3e203532383532.roa (hash: sMUaBw/U3QIknbNpcxKL23aoE9bmswQ93xvAZKSkfHE=)
                          6: 3137372e38362e3132302e302f32342d3234203d3e203532383532.roa (hash: 96VF9Staauf3dsuRt8r4pCvMBn17yhiWg+mTczALVx4=)
                          7: 323830343a3833303a3a2f33322d3336203d3e203532383532.roa (hash: vq/3tDCm2OEcOZcNyM6+v/n+6ppGUA9V8sl8SrBtXhA=)
                          8: 3137372e38362e3132322e302f32342d3234203d3e203532383532.roa (hash: HsiIwALd4tolhIyRRdXJFFrfj5mRkrWXsIJxc0JaYdw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c9:c0:bd:0e:f9:1f:a1:21:57:43:0f:6c:68:52:86:e1:82:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Oct 20 12:15:59 2025 GMT
            Not After : Oct 21 15:48:59 2025 GMT
        Subject: CN=04E2D8F9BDC1B149A6C87414C07C930EDF66E926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:94:c6:91:10:bb:db:a6:74:3b:38:a7:50:
                    5e:87:29:9c:8a:0a:ae:65:7a:a9:5d:35:2e:69:33:
                    24:b8:f2:7f:9b:bd:5e:f8:f8:ea:18:b9:a5:88:41:
                    82:03:ea:86:fe:07:c4:c0:09:0f:ac:b4:c4:39:fb:
                    4e:10:49:34:27:35:b5:be:ba:2f:a2:b2:47:2d:f6:
                    03:36:f7:83:de:c6:b4:64:67:a7:ce:b1:03:a8:89:
                    8c:54:8b:b1:78:92:04:3c:f5:ad:2e:29:18:58:7f:
                    e4:89:71:51:9e:2e:05:90:2c:7c:e6:e4:2d:2a:85:
                    83:f8:04:6a:eb:97:71:66:7a:34:73:09:3c:e2:26:
                    04:08:a7:7a:f0:9c:c6:70:8a:e2:5e:20:28:bc:d5:
                    d4:3f:4f:f9:21:f2:26:50:2d:e7:0a:64:0f:28:2d:
                    45:e8:53:da:08:32:e0:5b:eb:b6:a9:89:c6:f4:2c:
                    0f:e6:8c:66:cd:a9:81:41:a6:14:f5:0e:51:b2:7c:
                    3e:81:a7:3e:0a:a6:0e:82:50:80:bd:0b:e7:97:92:
                    19:67:1d:07:c2:37:5a:b7:f6:c9:83:3f:09:09:09:
                    d3:f4:38:03:2b:3a:f8:b8:0e:10:5e:04:c8:46:2c:
                    45:4f:61:2e:11:db:67:33:6f:ce:aa:c2:42:ed:8f:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:D8:F9:BD:C1:B1:49:A6:C8:74:14:C0:7C:93:0E:DF:66:E9:26
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:0d:b9:17:c5:08:f6:b2:c7:cc:b8:0a:9b:a0:3d:3f:3f:
         55:a0:4c:7e:89:77:43:ff:e3:a0:ff:96:ed:91:3a:0c:2b:83:
         6e:ce:57:84:0b:f0:fd:26:24:e7:ec:1a:e0:f4:ea:27:a4:ae:
         1b:0f:c5:c0:cd:83:c6:df:c7:fb:ea:1d:3c:f6:dd:65:75:b1:
         00:36:4d:85:22:c5:4d:7f:58:6d:2d:72:37:74:f7:34:a8:a7:
         2c:b3:6a:0e:42:78:4c:1a:6d:68:93:f5:7e:c8:e6:74:0a:f2:
         bc:78:bb:77:ca:8e:88:4f:6c:f9:1d:96:88:5c:85:cb:d5:bf:
         f5:ca:78:dd:b1:0a:0f:db:f9:a1:1b:bf:c1:a4:91:c4:29:6e:
         b8:cd:96:78:85:27:93:48:47:ad:26:cb:3a:08:b1:68:06:c8:
         b2:0e:4f:a6:7e:46:b9:d7:fb:be:bd:30:2f:43:80:44:92:23:
         96:47:10:ee:66:8c:b1:fc:df:1e:5d:d2:ab:0b:52:7f:ff:d8:
         9f:a7:10:46:93:d9:a9:c4:03:a7:76:d7:ad:7f:da:77:4d:b7:
         26:18:08:17:b0:52:25:47:47:13:4d:d9:a8:d1:50:1b:11:8f:
         21:91:73:b4:54:a5:b3:27:12:ed:e8:81:34:46:02:8e:4d:5b:
         0f:b9:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:15 2025 by rpki-client