Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
File:                     A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft (raw, json)
Hash identifier:          Y4oym4xgm/lggJj8CtzvlfvngQDnmNKQdyWpYl8IMxA=
Subject key identifier:   24:B8:F7:E9:35:29:D4:CB:0B:37:D0:53:B9:C1:56:D0:00:BF:20:86
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       0DA0E65A4C34BC399EF753AE2E2560596F5CA114
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
Manifest number:          0352
Signing time:             Mon 20 Oct 2025 11:20:00 +0000
Manifest this update:     Mon 20 Oct 2025 11:15:00 +0000
Manifest next update:     Tue 21 Oct 2025 11:20:00 +0000
Files and hashes:         1: A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl (hash: SFIvuHvg6LzOnP7NSi9wxbaeJpTb//1rC677Kq2y8dg=)
                          2: 323830343a343566383a3a2f33322d3332203d3e20323636393538.roa (hash: oIn9GZF5p5pNefIVeN0UiS8wgqn3Gv7XI5/YxvIRfSA=)
                          3: 34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (hash: SErwqqgGaKkYiiTZSZGe1niblQP3x2+Q6HGo8mm/f7g=)
                          4: 34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (hash: mFDQzS/Ad8gKFIuL0FgAwGbiz2AkpGyAGickt8RlhVc=)
                          5: 34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (hash: +K5pOFau4ZXe2MVLt8P7O8Yh0nJiT0WuYcjyq4lHU0U=)
                          6: 34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (hash: cvl9XN6D9prdMFpaUtK33s8zHTgWyCPhHvs5DTeHQOk=)
                          7: 34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (hash: GxoI1DsIOHonoYDFpLsELEka4FnyR3oyfVJn+2wiMAE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a0:e6:5a:4c:34:bc:39:9e:f7:53:ae:2e:25:60:59:6f:5c:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Oct 20 11:15:00 2025 GMT
            Not After : Oct 21 11:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:b9:27:6c:2a:2b:01:2a:d6:62:5c:cd:1a:
                    9c:33:55:b4:84:a0:c9:2d:3f:6b:ab:c6:f5:fe:43:
                    db:8e:08:b0:f1:0a:2a:81:cb:bc:f4:5a:0d:0e:e1:
                    6c:ae:fa:54:a2:d1:51:4c:aa:31:8b:d0:48:cd:7c:
                    40:c6:cc:da:17:de:7f:65:29:2a:67:a1:67:8b:ce:
                    be:18:8c:5d:f3:8c:fb:ce:ba:70:09:ba:1c:44:12:
                    ee:66:ec:d0:22:b8:ec:06:cd:6c:e4:c9:04:26:e5:
                    db:e6:5e:85:bc:2c:b8:d0:42:7b:5b:94:2c:c2:cc:
                    4f:5a:0f:c4:4a:7b:98:77:07:3a:0e:71:f2:71:0f:
                    8e:bb:34:39:e1:0e:70:6b:a5:05:d7:62:36:b5:9e:
                    e5:79:bc:be:01:d7:74:6d:24:2e:91:17:cd:af:3c:
                    04:51:ff:82:fc:f6:89:de:9f:cc:20:f4:ae:a9:0c:
                    b5:09:1c:68:08:63:52:b8:c5:1c:20:87:ec:08:54:
                    9a:76:46:17:6d:63:63:97:40:cf:42:35:16:7b:2a:
                    9b:63:04:cb:5b:e8:d2:95:34:62:6b:06:57:19:5b:
                    be:62:96:fa:0d:06:30:1b:8c:d1:ea:96:da:2a:a8:
                    fe:81:81:43:de:1e:b9:03:b7:6e:4f:b7:6c:d2:52:
                    86:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B8:F7:E9:35:29:D4:CB:0B:37:D0:53:B9:C1:56:D0:00:BF:20:86
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:ef:86:ed:00:a4:55:3f:7a:ad:ef:1c:f3:fa:3e:68:bc:
         8b:9f:00:59:95:2c:4f:91:cc:a8:12:96:f3:ee:b9:29:20:cd:
         45:d1:99:01:de:9e:c6:df:5f:4b:5b:43:0f:d1:f5:3e:2b:96:
         ee:19:fc:3e:61:e5:7e:0a:2a:37:36:3e:69:0e:10:7a:3e:3a:
         8f:09:da:d4:14:76:df:49:37:11:17:3f:c3:bb:5d:b8:cd:fc:
         15:78:3a:24:fb:35:af:2f:c3:95:ac:1e:c4:3e:a8:82:23:85:
         3d:35:0a:e5:15:be:4d:ac:fc:46:48:a3:14:c8:47:1e:f0:34:
         67:b9:aa:1a:52:e6:7e:e7:07:13:dc:df:28:23:3e:0b:78:aa:
         bc:d3:56:a1:65:05:83:3a:eb:d2:03:d3:d3:fb:a5:ea:84:26:
         b9:47:6b:2d:b3:a8:e5:37:e2:ad:5f:a4:3e:5a:b8:84:a4:99:
         e8:97:1a:dd:81:14:5e:aa:31:59:4b:27:43:82:f1:96:64:48:
         0b:b3:bc:f0:18:79:48:e9:b3:6e:88:d1:a6:d5:54:94:b2:71:
         3e:db:33:45:00:4e:8d:2a:bd:22:9c:15:8a:da:32:5d:8e:da:
         03:26:e8:f2:04:fd:4a:14:bc:b6:b0:9c:06:3b:55:cb:7a:24:
         fe:76:cd:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:12 2025 by rpki-client