Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
File:                     2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft (raw, json)
Hash identifier:          Ft3c1hx85RztgMWA79woEkSu2Zv11oQeYA7QtJR/8DQ=
Subject key identifier:   57:33:BC:A0:8E:8D:D6:CA:66:BF:A4:B2:29:96:70:20:BA:7D:45:54
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       49CF25544CE7598A6C498F24D8861682108E05F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
Manifest number:          0321
Signing time:             Sun 19 Oct 2025 19:00:00 +0000
Manifest this update:     Sun 19 Oct 2025 18:55:00 +0000
Manifest next update:     Mon 20 Oct 2025 19:00:00 +0000
Files and hashes:         1: 3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (hash: WnxFkjgBAQRKMZZDYpAUe7BwDntsek7X2KvX4VwASxA=)
                          2: 323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (hash: N77OEG9pmlHUj8lD205/hv715RlaC7sqCWqYTtfKTMM=)
                          3: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl (hash: YHRVMrFd82860miex9GlXRiI4cHzg+y3mQJxFwCnqvk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
                          rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cf:25:54:4c:e7:59:8a:6c:49:8f:24:d8:86:16:82:10:8e:05:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Oct 19 18:55:00 2025 GMT
            Not After : Oct 26 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:52:9d:e2:e2:4e:fd:9d:c5:bc:30:4c:4a:
                    dd:2d:99:f7:9d:08:7f:62:d3:7e:b0:cf:7e:86:8d:
                    0b:ec:24:74:d3:e3:87:f9:6d:c9:8f:22:63:b9:f1:
                    39:be:6b:cf:e9:ce:f1:f5:f1:fa:75:32:84:fe:8f:
                    b1:dc:41:ba:5b:70:91:5e:ad:89:52:51:ca:cf:e3:
                    4c:5a:6a:48:bf:a0:a0:17:a4:bb:a8:15:7d:10:99:
                    03:97:c4:56:74:3a:f1:44:1e:77:4e:78:20:d0:a2:
                    4a:0b:ea:d5:34:9b:52:46:cb:d9:0e:96:f8:15:bc:
                    1c:49:22:92:b4:2f:14:a1:9e:40:7f:14:ad:65:c0:
                    53:d0:ee:16:70:cf:6c:5b:a9:93:4a:cd:a7:27:2b:
                    06:59:90:6b:52:79:38:1a:6b:e3:a2:72:6c:f1:4a:
                    13:5a:82:c6:66:b6:68:ff:62:3b:d7:2f:38:22:79:
                    55:43:bd:06:d4:8d:cd:46:32:c6:7b:16:4e:59:03:
                    8e:73:7e:cc:05:d2:3d:23:ce:8a:d5:50:38:21:b9:
                    f7:70:91:72:e0:30:2f:dc:4b:9c:7a:ba:49:7f:4c:
                    99:ed:60:6c:02:b2:3d:dc:49:e0:9c:fe:57:dd:f3:
                    86:91:0d:8f:25:e4:4c:a1:45:14:1c:5e:3e:79:be:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:BC:A0:8E:8D:D6:CA:66:BF:A4:B2:29:96:70:20:BA:7D:45:54
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:53:69:83:f8:aa:10:95:b1:75:d4:0b:29:45:c5:84:2a:
         93:65:94:96:f2:e2:68:b6:c9:ff:aa:78:5c:3a:92:c6:77:71:
         74:fc:f5:f6:8e:d0:c5:c3:3c:89:a5:cd:0c:9f:28:62:1d:13:
         b4:71:9c:61:41:d7:61:1e:66:2c:18:9a:f5:8b:77:af:2c:0c:
         3e:29:f3:39:dd:b4:df:78:e4:1d:0f:14:78:1a:c2:9f:9c:ad:
         87:b8:e1:85:2f:45:0e:b8:45:60:66:5d:45:93:db:28:d2:db:
         14:08:40:55:0e:84:d6:12:a9:8b:3e:5c:00:f8:6b:4c:b6:52:
         90:17:73:cb:cb:73:bb:18:b1:f8:d7:9e:20:44:1a:36:10:80:
         f2:de:72:e6:d1:d2:0c:86:a3:ac:4b:7b:e0:ac:e1:df:64:3d:
         c0:64:87:e5:9f:d1:04:0f:d4:72:7f:32:da:87:28:59:45:1b:
         ad:72:3d:0b:2d:a1:f6:d4:16:39:99:bd:17:fd:1d:21:ba:97:
         e8:58:50:d9:b1:3b:97:2f:1f:d7:1f:ff:9b:61:9c:2f:2f:47:
         47:43:ff:d6:47:f3:c1:d3:0e:74:94:10:dd:0d:fe:ef:07:a2:
         6c:2c:41:4b:4e:8d:78:5f:54:be:a6:ca:11:13:97:68:0d:e2:
         69:77:0d:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:45:05 2025 by rpki-client