Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
File:                     A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft (raw, json)
Hash identifier:          OrC16W6WNt0359zei7IrnpjUP8u+fpUs33tX4yyw0+c=
Subject key identifier:   D7:59:39:79:18:C5:58:33:DC:2D:36:9D:51:C0:3C:FF:81:50:E8:8B
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       3FA19ED011E90DDF16EA91FD44B926401DD7E53A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
Manifest number:          BA
Signing time:             Mon 20 Oct 2025 03:48:25 +0000
Manifest this update:     Mon 20 Oct 2025 03:43:25 +0000
Manifest next update:     Tue 21 Oct 2025 04:36:25 +0000
Files and hashes:         1: A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl (hash: v4mx5EMpoukBY8f1WUZexxjBD/J+pIVUMrem1IhtYnI=)
                          2: 323830343a353837383a343030303a3a2f33342d3334203d3e20323638313331.roa (hash: bec0x/Cqckg2a+aVdlOWK1zgbnr5jAeqZG2vSjYskV8=)
                          3: 34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa (hash: gNfhoQu/TfDOi2RqItKVnvpLsxNGPBsfnb6MxhNe3qk=)
                          4: 34352e3136392e3139302e302f32342d3234203d3e20323638313331.roa (hash: 1arKiTMmd2wiJhxrLN/csmN5OxeZEvisOYN30+Mb+zM=)
                          5: 323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (hash: m6476XY9hw1HT0KFo3xqMgTPgV2DyCBCaY7VP3otwhE=)
                          6: 323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (hash: pD7uON0MR1cx9vrRl3bnWsw8Pci3XbwtAVzSZrjF0nU=)
                          7: 34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (hash: 76v3PwoFqjIvYhNGggm0A6GKqZidjpsE3qEBiwvNcVI=)
                          8: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (hash: YLRZFFurNnhOHIp+/ksNrdmT9wg1MccOCRFRPdpkpZE=)
                          9: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (hash: 1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI=)
                          10: 34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (hash: YMF1WGUqO/koid6qkm4eWU5+384jv5Woh3UeAEtElo0=)
                          11: 34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (hash: lQE0H5i+BmmRfKCVNDuwT4u8OEjW/9FHvTmmfwT2Nnk=)
                          12: 34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa (hash: VMtWnY/47+9VSdifVKXNAHzknKkgZcf9Z5+e1w7prrA=)
                          13: 34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa (hash: 4ezrZSIPRM2pWqs0nvSc684pzx0RAIeuMtmRPXlLzec=)
                          14: 323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (hash: vstmsY9Bxo51pO/q7iKPVEPpP1nhCTQDRYXv4ff95ZU=)
                          15: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (hash: p7Oa9YECuMMpX3lKf1BIHAgMsEdZxp1BAHLE2bpiWLI=)
                          16: 323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (hash: o712cBG4hVGA//PBX0FB/svdi3YsE7E/rUiUf67iUFs=)
                          17: 323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa (hash: ouhAyOcH2VayZfDA15PmGMIddBURZIqd8LmFxV/D8kg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a1:9e:d0:11:e9:0d:df:16:ea:91:fd:44:b9:26:40:1d:d7:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Oct 20 03:43:25 2025 GMT
            Not After : Oct 21 04:36:25 2025 GMT
        Subject: CN=D759397918C55833DC2D369D51C03CFF8150E88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:91:97:09:ab:4c:f8:22:92:00:2b:15:26:
                    98:7d:a6:7e:4f:1d:14:88:29:4d:82:25:2a:a7:0f:
                    fa:42:ff:47:5d:84:e1:96:fd:2a:34:f5:bc:c8:11:
                    17:03:97:4e:75:07:56:1b:fe:55:20:65:7a:6f:d2:
                    33:8b:38:b1:b8:09:87:ed:67:78:e3:6e:e8:80:7b:
                    bd:21:02:00:da:43:f3:60:f1:4d:47:b7:68:48:73:
                    79:b0:a7:98:ce:17:f3:1c:5c:0f:8a:53:23:b1:5b:
                    2e:c7:39:07:41:9a:2a:c7:2b:65:e8:4a:6f:73:dc:
                    86:bd:63:15:18:9f:2f:3d:fc:1d:90:6b:a4:e9:00:
                    63:a6:9d:a9:37:ba:3e:4a:3e:d0:83:36:7a:ce:97:
                    49:c7:75:79:4f:79:e0:70:b3:16:99:50:9c:13:54:
                    66:f8:37:04:0f:e3:ee:91:a0:bf:22:9f:b6:2c:58:
                    6c:a3:28:34:0f:17:46:0f:b7:b4:8c:c2:13:51:40:
                    7a:fc:0d:13:90:e3:89:0c:07:a0:b4:36:70:e1:01:
                    ea:4f:c7:84:2b:8a:05:52:f3:9d:06:08:10:02:32:
                    33:e8:4b:8e:15:a8:5b:cf:82:33:fb:a9:98:8c:24:
                    81:c9:83:13:65:64:9f:a9:bb:cf:27:69:17:0b:f5:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:59:39:79:18:C5:58:33:DC:2D:36:9D:51:C0:3C:FF:81:50:E8:8B
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:47:5e:de:7a:a1:af:15:f4:33:97:dc:57:82:f2:b7:92:
         7b:fb:06:a6:d2:bd:90:ab:8e:71:ee:b4:a9:9e:60:4b:c2:af:
         e6:9e:30:98:f0:b0:b2:f0:ff:a8:35:b9:bb:ed:b5:7b:46:ba:
         2b:28:64:d4:bd:2d:bf:03:74:ec:2b:36:ba:de:3f:4f:9c:88:
         e8:5e:66:fd:e9:59:0f:2d:82:ee:b1:c6:59:f9:86:ea:f5:40:
         05:84:5b:b0:f9:3e:7c:34:53:1e:64:c6:0f:58:da:b2:77:e1:
         e2:35:5c:24:ad:c6:e6:7e:08:59:ba:23:16:99:59:e6:a8:56:
         7e:ce:16:e6:2d:2e:0b:ca:f8:75:44:88:5c:a5:da:95:ab:aa:
         b8:df:4b:0d:14:03:92:b9:be:6d:2c:23:8b:e6:76:df:9b:aa:
         cd:ee:4d:58:9a:4b:57:94:85:ba:54:1a:22:ae:d1:c3:59:14:
         32:d3:1d:58:d2:5a:b9:99:ef:26:3f:81:6f:19:0f:13:31:02:
         c4:a3:fd:1d:cf:e7:ca:7e:06:96:7a:96:13:fb:ec:ce:1d:8d:
         11:12:d0:cf:79:52:a5:89:03:51:de:12:f5:ae:7a:56:af:14:
         83:ce:32:bf:2e:8d:4f:c3:3f:bc:c7:74:c8:b8:04:9d:07:6c:
         d6:60:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:25 2025 by rpki-client