Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          ZiG0YoMACW4pLv1Cbmdkj2+fn2eNVJiaa7GENE2zrwE=
Subject key identifier:   21:AD:58:D6:48:3E:94:79:06:47:A1:89:4B:63:43:1F:FE:5D:66:DB
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       7561BFF7FC9EFC7CE9082E3E762300999FAC06B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          02ED
Signing time:             Mon 20 Oct 2025 00:59:44 +0000
Manifest this update:     Mon 20 Oct 2025 00:54:44 +0000
Manifest next update:     Tue 21 Oct 2025 04:16:44 +0000
Files and hashes:         1: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          2: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: SoC/JJ7/DMq7kmXQF9TdbZBsXUMQwr9bcoVQVhye0rw=)
                          3: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          4: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          5: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          6: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          7: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:61:bf:f7:fc:9e:fc:7c:e9:08:2e:3e:76:23:00:99:9f:ac:06:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Oct 20 00:54:44 2025 GMT
            Not After : Oct 21 04:16:44 2025 GMT
        Subject: CN=21AD58D6483E94790647A1894B63431FFE5D66DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:09:cb:37:9d:f3:7d:8e:3f:df:a8:bf:cb:
                    2d:b3:76:12:c4:8a:1c:f5:bb:fb:1b:47:e8:2f:70:
                    70:db:2a:27:82:1d:6f:16:01:2f:00:f6:b3:62:e4:
                    53:35:b0:77:0d:76:bd:82:0a:50:aa:89:3f:ba:42:
                    36:ba:ba:d1:2c:93:49:88:ff:2c:aa:53:d8:d1:7c:
                    23:b3:e4:e3:3d:8b:4b:4e:2b:ef:61:41:09:df:b9:
                    be:13:dc:4d:9e:3a:a2:5f:58:df:df:09:72:cf:8d:
                    52:c8:6f:15:3c:1e:0e:83:88:64:4d:a5:4c:c0:21:
                    82:13:50:d5:06:95:14:e2:4f:8f:f0:19:53:3d:ad:
                    4b:df:f5:5e:c2:92:1e:d8:ad:1b:a5:be:af:78:74:
                    ed:52:58:43:91:53:84:e9:e9:9f:3b:2e:08:c3:63:
                    f2:90:6c:9b:ed:db:38:d9:ca:50:c9:07:40:a4:2e:
                    65:49:0f:71:c6:2d:e0:f6:08:4a:1f:bc:f5:52:e6:
                    6a:22:85:50:16:09:9b:39:05:71:a4:97:c6:e2:17:
                    db:cd:2b:8e:dc:38:be:13:4d:2e:45:b8:f9:ee:93:
                    d5:20:3a:e3:24:7e:ce:de:7d:57:c8:1f:e2:50:bb:
                    a7:83:9a:d2:75:c5:e9:0e:fc:d0:14:f4:a8:2b:16:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AD:58:D6:48:3E:94:79:06:47:A1:89:4B:63:43:1F:FE:5D:66:DB
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e2:e0:1f:6d:b5:ee:32:d0:ae:4b:92:ea:2a:95:57:6f:73:
         04:ae:c5:3d:13:0c:93:62:eb:4b:45:55:05:7a:8a:23:79:67:
         4b:9a:ee:1e:73:68:63:3c:34:44:8a:c8:c7:26:88:78:b5:41:
         16:3e:4b:06:08:56:d6:d4:6e:c9:ae:ef:3d:37:e5:25:9e:08:
         99:e6:e7:24:9a:c6:7a:44:52:53:c1:71:28:3d:87:97:d9:0b:
         3a:f1:19:4f:cd:95:9c:c4:24:74:8f:ac:17:2b:db:19:0e:9e:
         36:56:c4:83:c4:25:1f:5f:4d:f9:b9:ba:bf:0f:d5:2b:4c:e0:
         86:92:cf:ba:15:cc:6c:d8:87:d7:ef:9e:3b:49:a7:01:2b:4e:
         cb:f2:e1:5a:09:da:ca:e7:ff:e4:8b:9c:45:67:35:7d:77:f4:
         03:79:37:cb:37:04:5f:a8:f0:f8:9c:ec:42:c3:99:d7:8a:4c:
         50:ad:11:10:86:69:54:e7:df:b0:25:10:0c:45:45:23:df:b8:
         0f:a5:a8:a4:2e:4d:96:5b:be:85:57:09:09:d3:db:41:7b:fa:
         06:59:57:41:8d:0b:a2:2c:9b:8e:26:ac:28:37:fc:45:78:ba:
         80:99:c2:bf:01:fe:a1:67:54:a2:d3:80:1f:cb:89:86:97:5e:
         5e:2d:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:44 2025 by rpki-client