Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
File:                     8434BF9DA91DE0828DA937403DB8B94230696BE8.mft (raw, json)
Hash identifier:          lWMnWZ7kf89rjXJxfyEpR41EVyYupxnNBrWPTfGBsHo=
Subject key identifier:   BE:10:3E:AB:59:AB:C8:4A:E2:96:96:60:02:F7:40:4F:08:E6:89:03
Authority key identifier: 84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8
Certificate issuer:       /CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
Certificate serial:       107C62F384FDD1304CDDF8909D4ADBF68E220C24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
Manifest number:          CA
Signing time:             Sun 19 Oct 2025 13:26:20 +0000
Manifest this update:     Sun 19 Oct 2025 13:21:20 +0000
Manifest next update:     Mon 20 Oct 2025 14:10:20 +0000
Files and hashes:         1: 3134332e302e3234312e302f32342d3234203d3e20323731323137.roa (hash: Qu0+QQT74FIMzrfTSMR/FBALc0ImisOyFJzHeTi3dyA=)
                          2: 8434BF9DA91DE0828DA937403DB8B94230696BE8.crl (hash: ALiIOOf5E4CDTcG6oL2z4qlsafGR5yLS6KQU/sWASHo=)
                          3: 3134332e302e3234302e302f32342d3234203d3e20323731323137.roa (hash: wJN76ufROtTddlk4slpumH8mLU1sH4O03h4M06Wd1Rg=)
                          4: 3134332e302e3234322e302f32342d3234203d3e20323731323137.roa (hash: LnmvvZzQ9lJai8D9OG+g8sbNtW9nybtn5FCuY9XcaAs=)
                          5: 3134332e302e3234332e302f32342d3234203d3e20323731323137.roa (hash: 739+AbVMn3jpd575EXG3HN+2K2VD6FD3sIFEe3h3DNk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 14:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7c:62:f3:84:fd:d1:30:4c:dd:f8:90:9d:4a:db:f6:8e:22:0c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
        Validity
            Not Before: Oct 19 13:21:20 2025 GMT
            Not After : Oct 20 14:10:20 2025 GMT
        Subject: CN=BE103EAB59ABC84AE296966002F7404F08E68903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:d0:5b:da:d4:59:2c:15:cc:f9:22:af:fe:
                    a2:38:fd:bb:23:3e:41:55:94:62:28:72:c7:83:33:
                    eb:ed:1c:1a:32:be:af:b6:14:5c:3c:cf:36:29:60:
                    01:d8:fe:d9:a8:90:3b:1b:b8:ee:bf:fd:27:b1:ed:
                    e9:80:a4:93:dd:78:fc:09:41:fa:77:be:c2:5c:dd:
                    4b:f1:24:b5:f2:d1:fe:df:ea:f6:18:69:39:99:67:
                    a9:31:d4:bd:39:27:1a:b4:4d:30:24:22:1e:1e:54:
                    4f:04:71:6f:8f:4d:b6:1e:16:9e:96:d9:8a:3d:9a:
                    76:54:73:9e:f6:5c:58:df:a0:7a:f7:2a:f5:93:b1:
                    6d:5c:43:d0:8f:5a:9f:49:f9:83:63:9d:53:20:ce:
                    46:d1:98:80:3e:db:f8:8a:58:84:93:5c:75:9e:23:
                    fa:75:e3:76:29:c6:fd:0b:3b:04:ce:61:16:a7:a1:
                    3c:90:c0:be:79:d8:75:50:5d:13:e9:70:f3:cd:5b:
                    9b:5a:b0:61:35:37:33:1a:3e:c8:67:7b:87:cc:4f:
                    9f:ea:81:0b:7f:f3:13:a8:08:3d:2a:eb:d1:68:e9:
                    fc:b2:1f:85:69:0b:ad:62:2f:a9:e7:3b:86:17:fc:
                    9f:43:8f:ba:ea:d5:3b:7c:3f:d1:46:60:e6:b1:0a:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:10:3E:AB:59:AB:C8:4A:E2:96:96:60:02:F7:40:4F:08:E6:89:03
            X509v3 Authority Key Identifier:
                keyid:84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:bb:de:ef:b9:74:72:0e:ab:c7:26:cf:37:dc:fb:c4:f7:
         aa:92:54:3f:0d:b8:51:6c:d5:a7:9e:8a:96:e3:00:81:76:0e:
         da:c7:98:42:da:f6:e3:f3:39:ee:8f:91:b6:d8:f9:28:7e:3f:
         38:0a:9c:9b:93:c8:5e:61:f7:b4:a1:0a:72:99:5e:d5:63:5e:
         4c:aa:f7:4d:3e:25:60:9f:36:31:aa:6b:e9:41:1e:ac:9b:f6:
         7a:fa:1e:b3:f4:63:9d:00:6e:ee:a6:1f:35:51:d1:9f:62:fb:
         d4:3d:89:69:61:d1:74:ba:87:30:ca:68:de:a5:a6:a9:81:de:
         f1:0c:0b:cd:ae:95:16:f2:35:40:7d:96:6d:5f:df:d1:ce:a9:
         0f:e7:66:e7:ab:7f:d7:b9:ec:fb:6d:78:e6:16:ea:b6:5a:0a:
         19:61:2b:d5:3e:7f:58:ad:d7:f8:68:d4:c9:73:c8:2e:35:62:
         a5:94:df:b2:1b:21:83:b7:e3:8b:41:38:b2:f8:aa:a9:58:05:
         bd:86:bd:66:bb:7c:c3:ed:9f:fd:f8:e3:5c:1c:71:58:59:5d:
         07:85:2e:f6:e4:6c:0e:2d:3c:04:e7:14:dd:f7:64:81:e3:0a:
         3e:75:06:0d:cf:30:59:d2:69:2b:7f:37:a3:ec:38:96:7b:ff:
         e5:74:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:51 2025 by rpki-client