Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.mft
File:                     14A074279BF0B98275FD6F5FAB71058F35F69FD0.mft (raw, json)
Hash identifier:          MwxdZzH0xJapp4TLCJZdhNlYYrH77QkhEYXQkrmizsQ=
Subject key identifier:   DE:99:B9:57:94:32:93:C7:E7:29:CA:EC:A6:B6:F8:56:17:09:C7:FC
Authority key identifier: 14:A0:74:27:9B:F0:B9:82:75:FD:6F:5F:AB:71:05:8F:35:F6:9F:D0
Certificate issuer:       /CN=14A074279BF0B98275FD6F5FAB71058F35F69FD0
Certificate serial:       328D536D80EC8E9B6BC9E369269C7A5535374320
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.mft
Manifest number:          02F3
Signing time:             Tue 21 Oct 2025 01:27:33 +0000
Manifest this update:     Tue 21 Oct 2025 01:22:33 +0000
Manifest next update:     Wed 22 Oct 2025 02:01:33 +0000
Files and hashes:         1: 3136382e3232382e32302e302f32322d3234203d3e20323634393032.roa (hash: 8wIvdZPX9OCmymgueJQDGWaM+DhJzSexN+isRc+Nqg0=)
                          2: 323830343a326639633a3a2f33322d3438203d3e20323634393032.roa (hash: bJ6X/uUt/aJ3azUP6z9uI92uTuz59w5QJlwlSJhwwqY=)
                          3: 14A074279BF0B98275FD6F5FAB71058F35F69FD0.crl (hash: Z/ZGRdS9MSOE7TKH7tANgiV2FBDJUfpX4mtLJerwPYU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.crl
                          rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8d:53:6d:80:ec:8e:9b:6b:c9:e3:69:26:9c:7a:55:35:37:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14A074279BF0B98275FD6F5FAB71058F35F69FD0
        Validity
            Not Before: Oct 21 01:22:33 2025 GMT
            Not After : Oct 22 02:01:33 2025 GMT
        Subject: CN=DE99B957943293C7E729CAECA6B6F8561709C7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:c7:f3:b6:cc:03:6d:cc:95:f9:cb:a4:33:
                    4e:2d:f9:49:57:87:8f:68:6d:9c:5e:59:ce:ca:ed:
                    c4:42:bb:cc:01:b4:a2:a7:87:f9:e8:51:b4:b9:52:
                    fb:3d:77:43:86:4a:d0:37:2f:d9:52:7b:45:71:13:
                    89:0f:c4:b6:ad:96:7c:0a:71:fe:00:4d:24:9c:5a:
                    1d:2c:18:cd:12:0e:b2:3a:82:8d:16:38:95:79:6b:
                    f7:d0:41:fa:fd:94:1b:33:b2:3e:4f:fe:d4:d8:3f:
                    34:d2:0b:64:e9:d6:63:a5:ab:67:6e:83:e9:6f:d1:
                    4e:7b:4e:98:fe:ba:19:e1:97:de:96:94:8e:fe:aa:
                    1b:b2:c6:c0:62:e7:82:ea:e5:8d:ba:c9:2e:de:2a:
                    96:56:b6:f3:cf:41:32:52:dd:d0:50:a7:6d:1d:46:
                    2b:7c:1a:08:90:e2:81:4c:3a:ce:75:83:bd:40:87:
                    8b:cc:42:44:8b:73:95:3f:bd:18:da:7b:45:b1:a9:
                    1d:de:01:cb:15:f9:81:70:e5:9a:a2:77:13:40:ca:
                    92:db:c8:b7:6d:48:00:da:f2:0b:1e:04:ba:40:17:
                    49:60:15:e8:a9:64:21:78:13:8c:9b:8d:56:a5:f1:
                    3d:8b:37:bc:bc:2e:dc:b8:f3:dc:57:8b:22:bb:1f:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:99:B9:57:94:32:93:C7:E7:29:CA:EC:A6:B6:F8:56:17:09:C7:FC
            X509v3 Authority Key Identifier:
                keyid:14:A0:74:27:9B:F0:B9:82:75:FD:6F:5F:AB:71:05:8F:35:F6:9F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:cb:b5:60:e4:33:05:3f:fd:0f:db:79:e4:3a:ed:fc:08:40:
         fc:6e:cd:ea:c5:c9:26:81:c9:2b:eb:e2:5a:f9:06:d6:0b:fe:
         f3:ba:8f:b5:7c:1e:77:e9:f2:4f:f0:14:8e:ed:c4:6d:c7:d9:
         07:ef:93:bf:6e:bb:bc:24:52:72:9b:db:c6:48:9b:04:83:33:
         59:ad:e8:12:03:17:3e:4b:68:14:4f:4e:e6:07:01:6e:80:cf:
         1b:9a:b9:22:18:aa:c6:e7:f8:b3:08:b4:81:d7:e8:b8:50:c7:
         43:b0:81:19:31:ed:58:cb:55:40:53:9b:8e:7a:05:03:3b:86:
         85:a1:e4:20:1a:02:a3:47:a2:50:75:35:29:43:a9:98:0b:fe:
         4c:7c:5a:f4:db:89:d8:dc:37:3d:a5:12:68:f2:39:29:00:0c:
         0e:61:ab:0b:4b:3c:19:fc:5c:39:13:b7:de:7b:8e:c0:d9:db:
         d1:3b:87:49:6e:e8:f2:02:41:00:6b:d1:72:08:46:62:10:04:
         0e:1a:4d:b5:ac:65:e7:14:a0:2a:68:71:3e:02:88:97:05:22:
         c2:1f:2e:d2:1d:c7:43:82:6d:b9:a9:2d:bc:c0:11:db:e0:27:
         b4:71:a8:3b:e2:3a:da:c3:d2:a2:96:dd:7d:92:75:91:b2:0e:
         a3:b9:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:55:10 2025 by rpki-client