Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
File:                     2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft (raw, json)
Hash identifier:          jiZ74XyZIcnPPrjSocwGlUKNaYG5XVAZeu3pMkHDJu4=
Subject key identifier:   8A:A9:79:DE:67:0F:24:7C:FD:FC:2C:79:15:3D:50:70:D6:8D:F3:26
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Certificate issuer:       /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial:       32A57F463980497E89743F37488E97178C5A936A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
Manifest number:          015D
Signing time:             Mon 20 Oct 2025 09:27:55 +0000
Manifest this update:     Mon 20 Oct 2025 09:22:55 +0000
Manifest next update:     Tue 21 Oct 2025 09:51:55 +0000
Files and hashes:         1: 323830343a376363633a3a2f33342d3334203d3e20323731353139.roa (hash: LJg0qIswYi2VO/edZihG1bpazFMYcqSZVFlGIuj3Nqo=)
                          2: 323830343a376363633a3a2f33332d3333203d3e20323731353139.roa (hash: dX9f/ny2OVOTbqieDv7GDbRMqgAF+krSR2i7o8azGsk=)
                          3: 3138312e3138392e31332e302f32342d3234203d3e20323731353139.roa (hash: rx/LIZMSojJ5LN/3rv2+SAGAB+w17MquMMul8Kg+wNE=)
                          4: 323830343a376363633a343030303a3a2f33342d3334203d3e20323731353139.roa (hash: tW66RttNQQDZ0lTOuByjPWgYDa3rUCRkaSqPBwrFgxU=)
                          5: 323830343a376363633a383030303a3a2f33332d3333203d3e20323731353139.roa (hash: EdKMBlP0Au8ZjgIXG1FjA5SUAqzGG5ZKMMxvqwuANTE=)
                          6: 323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa (hash: zlZIZjynokp4eeLrHU0nFnutkTExOf333NyHcj/s5YQ=)
                          7: 323830343a376363633a383030303a3a2f33342d3334203d3e20323731353139.roa (hash: OsLsjPl9/bUrfXIWMY/5NjMFPO2hGhnB9fx5PhBjWtQ=)
                          8: 2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl (hash: 6zQy5ysdbrVfXk9VEUAzIvEyofyWK3lwrzh8XrOphHM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
                          rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a5:7f:46:39:80:49:7e:89:74:3f:37:48:8e:97:17:8c:5a:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
        Validity
            Not Before: Oct 20 09:22:55 2025 GMT
            Not After : Oct 21 09:51:55 2025 GMT
        Subject: CN=8AA979DE670F247CFDFC2C79153D5070D68DF326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:8c:6b:34:45:7d:6e:88:09:a8:c9:b9:1d:
                    69:ca:c3:86:35:99:92:43:8c:84:eb:c9:f6:75:49:
                    ad:32:e6:1f:0b:3b:09:ed:d6:36:c2:90:6e:3a:c2:
                    2c:75:1d:27:5b:95:99:44:a6:e1:60:c3:fd:82:f5:
                    34:fd:3f:d5:c9:bc:cc:b3:86:7f:07:7f:db:bc:b2:
                    21:2c:81:ba:21:0f:e1:9b:09:7d:3a:0f:f8:b4:2e:
                    15:f6:c4:bc:13:b2:94:2f:34:fe:8c:88:37:01:52:
                    cc:ae:e2:4d:96:58:f9:49:ba:c8:e9:58:32:41:1f:
                    90:f9:70:30:5d:f4:b8:bd:ad:16:fe:9c:14:cd:79:
                    f7:92:61:54:8e:70:1d:9a:07:f0:40:37:0f:04:89:
                    76:de:7c:b7:71:a2:b0:5f:c4:f4:30:13:3c:c5:63:
                    eb:1b:5e:25:02:db:9a:c7:68:86:19:2f:35:75:c8:
                    ba:c8:5e:36:41:90:35:00:30:8a:a1:b4:53:a6:68:
                    e1:bd:26:49:65:84:d8:28:8a:9f:81:85:5f:17:c8:
                    47:0c:a9:2b:68:f7:54:26:2b:1e:79:4f:9a:af:22:
                    00:ce:cb:f8:ae:30:ac:cd:59:58:74:ca:3d:fd:43:
                    51:9c:9c:43:a6:fe:e5:0b:b8:97:80:50:e6:3e:f2:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A9:79:DE:67:0F:24:7C:FD:FC:2C:79:15:3D:50:70:D6:8D:F3:26
            X509v3 Authority Key Identifier:
                keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:a1:b2:81:9a:7c:24:db:ef:d4:5d:68:e1:14:dd:07:14:
         4f:6f:f5:98:10:54:3a:10:47:ab:bb:ce:d4:d5:50:b6:d3:0d:
         a3:1f:79:3d:9b:15:7b:40:40:aa:7d:95:37:e3:41:67:f7:53:
         ea:c0:62:65:ff:25:8d:74:74:f6:db:39:ee:5f:0e:c7:be:1d:
         e7:12:a1:25:f6:7f:68:61:e7:ed:bb:64:a1:10:43:56:f7:b1:
         b6:11:d8:9c:12:99:0b:36:9a:6f:51:51:b7:ef:5f:46:94:32:
         8c:80:3d:5e:d0:94:7f:98:70:07:4c:ee:23:f1:34:6e:b0:10:
         b4:e5:bf:37:08:0a:95:75:f1:6d:3d:31:ef:42:1c:ac:2d:7e:
         7e:d8:62:6f:fc:c3:db:2d:54:b5:18:be:93:19:20:7e:d4:16:
         20:7d:22:ec:56:8c:65:81:50:ec:1d:e0:02:16:1b:52:6f:92:
         99:10:62:2d:38:ac:44:9a:b7:f6:a1:90:93:2e:9f:a7:61:89:
         c3:51:dc:2d:61:29:b5:af:68:95:d0:c6:4d:13:d3:6f:67:ba:
         75:58:d7:87:f7:49:16:9b:02:da:54:b7:09:5b:37:af:8c:be:
         ec:e0:ce:5a:40:0a:bd:f7:33:9a:5e:f4:d2:6b:7a:e5:19:9a:
         a9:f4:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:49 2025 by rpki-client