Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
File:                     52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json)
Hash identifier:          hGBjpCCCerxMoAP49yT29SgmZjXv0wRujS4H83mqHQE=
Subject key identifier:   B1:35:81:AB:2F:DD:C5:19:48:8A:E0:CF:E4:DC:98:41:F9:A2:C4:BD
Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E
Certificate issuer:       /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
Certificate serial:       67CFB138E19F2C8924913EF795ADE639882F1334
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
Manifest number:          BA
Signing time:             Sun 19 Oct 2025 18:09:39 +0000
Manifest this update:     Sun 19 Oct 2025 18:04:39 +0000
Manifest next update:     Mon 20 Oct 2025 19:35:39 +0000
Files and hashes:         1: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=)
                          2: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: j7TWzUkW8rGKHTMlgon+hxdSOggENwEGVVdG76tF9EU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl
                          rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cf:b1:38:e1:9f:2c:89:24:91:3e:f7:95:ad:e6:39:88:2f:13:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
        Validity
            Not Before: Oct 19 18:04:39 2025 GMT
            Not After : Oct 20 19:35:39 2025 GMT
        Subject: CN=B13581AB2FDDC519488AE0CFE4DC9841F9A2C4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:60:6e:a9:7f:47:1f:6e:e2:3b:21:a1:58:
                    bb:53:0c:0f:3c:ba:74:3f:b0:df:9b:51:17:10:bd:
                    52:9c:35:81:21:00:c9:89:11:a0:7f:43:40:6c:8f:
                    81:22:79:97:24:f9:e8:17:65:0d:4f:e5:19:13:73:
                    be:58:6f:f2:de:15:c3:3f:f0:45:be:2c:0c:b3:13:
                    4e:ec:a7:f4:60:69:ff:5b:64:db:fd:10:5e:b8:73:
                    83:bd:14:3e:26:a2:69:a7:4a:ad:30:dc:5f:8f:bd:
                    7e:58:0d:b5:41:2a:42:76:af:6e:85:2c:c6:8e:37:
                    d9:c6:d5:4a:50:90:99:07:b2:3a:8c:88:47:8c:16:
                    80:78:fe:64:e5:65:0f:75:27:55:9c:bd:c7:ed:91:
                    dd:33:33:0d:ce:9b:40:d7:99:28:9e:c4:ab:7c:01:
                    0f:3a:c8:ec:ca:07:87:c3:41:49:2f:01:0c:b1:30:
                    c8:c5:54:5a:79:a8:42:7f:ec:4e:e8:f0:15:2d:3a:
                    5f:9d:fe:fe:d3:bd:ca:04:82:18:c8:60:2c:02:e7:
                    76:b8:f3:c9:d3:ad:84:9c:10:c1:41:09:38:06:1a:
                    88:8d:f5:5d:f1:cd:b6:7b:1e:f8:ea:aa:5b:be:5e:
                    c8:61:0d:c8:f8:87:c7:e9:f8:8a:a9:6e:9f:18:34:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:35:81:AB:2F:DD:C5:19:48:8A:E0:CF:E4:DC:98:41:F9:A2:C4:BD
            X509v3 Authority Key Identifier:
                keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:93:34:be:e8:19:19:20:fb:4b:67:64:15:04:1b:d3:3b:
         d7:57:2d:8b:6b:dd:48:de:1d:67:ee:bd:99:f7:22:e6:04:96:
         65:01:d7:af:b8:46:00:05:95:41:d3:a8:5e:ff:11:6c:f6:f1:
         aa:d5:65:73:56:87:b4:17:6c:16:96:02:48:e5:53:eb:bb:48:
         73:17:dd:81:a2:3c:14:2e:c5:f4:d2:ab:2a:f0:ea:21:26:5e:
         8f:32:c3:4c:9a:83:19:4b:ad:4e:e9:32:f5:0d:dc:7a:79:f3:
         28:ef:c5:19:12:4b:58:1e:b7:dd:50:76:96:5a:b6:4c:60:11:
         ee:1e:3d:59:60:18:31:97:c0:0c:79:a8:72:28:b6:0a:c2:2f:
         7a:99:d7:2f:7f:5b:eb:fe:d3:83:08:cd:6b:88:05:ac:1f:e6:
         49:84:ea:91:14:62:ac:20:6e:75:e8:92:97:6d:02:86:ba:2e:
         b7:47:a6:2f:e6:8c:df:89:8e:c3:45:26:0d:17:e8:af:2e:f1:
         64:71:7d:30:62:23:e2:1b:d2:ce:a2:48:9e:2e:24:8f:04:e1:
         1e:b4:5d:81:71:cc:ae:ef:61:61:b9:e2:57:8a:9d:20:63:dc:
         a0:d4:f8:15:32:3c:a2:21:8f:55:df:0f:f4:60:1a:90:c0:ce:
         02:04:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:37 2025 by rpki-client