Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
File:                     E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft (raw, json)
Hash identifier:          BrD7Kjf2fj1KUFjzq/8Jv0H73ZHwuTX6q1vIERFI0ak=
Subject key identifier:   2C:35:BA:9A:0F:28:CF:00:D6:5E:36:0B:55:08:F0:A4:09:96:1A:E7
Authority key identifier: E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1
Certificate issuer:       /CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
Certificate serial:       2D4831EAFEEC0D21CF1FCB082E666A5FCB2C8A62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
Manifest number:          0152
Signing time:             Mon 20 Oct 2025 00:49:00 +0000
Manifest this update:     Mon 20 Oct 2025 00:44:00 +0000
Manifest next update:     Tue 21 Oct 2025 02:27:00 +0000
Files and hashes:         1: 3138362e3232372e3234362e302f32332d3233203d3e20323632373739.roa (hash: 51hpeNJC9GH1K8pMpJsJkpsqf4LqwZHi8zrm5/5u4D0=)
                          2: 3138362e3232372e3234342e302f32332d3233203d3e20323632373739.roa (hash: oXyl9ZTVvxIvMG9HUvNaN0AFw+X88DFiPjF86dkbL3A=)
                          3: 3138362e3232372e3234382e302f32312d3232203d3e20323632373739.roa (hash: 5JVj6btYVqQJSyiVvKG2x4yJwxvG1NEeWouhhumj7Lc=)
                          4: 323830343a333231303a313030303a3a2f33372d3337203d3e20323632373739.roa (hash: 3U6AKPROuLe4EQ9pLaWN1tuqwDEEehLj4aOKggKIKfg=)
                          5: 323830343a333231303a3830303a3a2f33372d3337203d3e20323632373739.roa (hash: SSBw2LM4RFPhM0T0jt4KnEVDxzkutgA7w1WRp8gYE8I=)
                          6: 323830343a333231303a3a2f33372d3337203d3e20323632373739.roa (hash: su5pgfOiKdLtiffcT8DLD92s7YPrV5A23ipNEcTL4Jo=)
                          7: E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl (hash: qlTJGu+NpuwQbjkc7DgD0vPG/addAtCQWQHIW7HdzKg=)
                          8: 3138362e3232372e3234302e302f32322d3232203d3e20323632373739.roa (hash: KQd+SffHxRQjzNrz6AOxkhwphh6mrOa0GJWlbX01YBk=)
                          9: 323830343a333231303a313830303a3a2f33372d3337203d3e20323632373739.roa (hash: gsgHEuZUNUbDdsFrj2f/dxOHwiyQN60gKMH4X2lJgkc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:31:ea:fe:ec:0d:21:cf:1f:cb:08:2e:66:6a:5f:cb:2c:8a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
        Validity
            Not Before: Oct 20 00:44:00 2025 GMT
            Not After : Oct 21 02:27:00 2025 GMT
        Subject: CN=2C35BA9A0F28CF00D65E360B5508F0A409961AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:5a:0d:97:97:d5:c4:45:f8:d2:df:dc:0b:
                    5d:c6:6f:12:56:09:6a:cf:c5:d9:65:21:da:9f:eb:
                    94:11:dc:63:32:6d:9b:a4:09:b4:bf:40:12:8f:c9:
                    80:ff:c5:1b:9d:6c:6b:56:3d:08:44:d0:f6:1a:0b:
                    de:74:90:e0:bf:17:e8:dc:4c:60:0d:af:87:79:28:
                    5f:cc:b0:8e:b6:fe:d3:36:a7:42:16:75:16:a4:85:
                    ae:e1:27:7b:eb:8a:19:03:9f:cc:17:61:ab:11:de:
                    e0:bc:88:43:4f:18:cc:03:35:1d:e1:42:64:75:34:
                    51:a3:63:3a:ee:07:2e:a5:67:32:6e:ed:2b:56:e5:
                    8d:45:aa:cd:f7:c6:8d:c6:f7:3d:c4:5c:88:df:6b:
                    9c:51:0c:d7:7a:b7:0d:8c:08:d8:73:db:30:32:80:
                    39:d2:1c:65:fc:08:a8:01:7f:ee:dd:fd:93:86:f2:
                    e7:72:67:9b:37:48:e2:5e:44:c1:a5:bc:c1:df:aa:
                    64:30:c9:17:4b:e2:84:b8:12:b4:18:80:e0:2c:ff:
                    36:06:ec:f8:1c:e3:f2:d1:a8:b7:e9:b9:67:49:71:
                    6c:cd:c3:70:4b:35:a2:68:1b:45:ec:46:fa:32:23:
                    d2:04:28:21:e2:a7:28:dc:68:82:70:e8:a7:e0:0d:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:BA:9A:0F:28:CF:00:D6:5E:36:0B:55:08:F0:A4:09:96:1A:E7
            X509v3 Authority Key Identifier:
                keyid:E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:03:10:ca:ef:cd:53:c6:67:60:8c:08:f6:f2:8c:7d:bb:
         03:7f:ab:b0:ed:2e:f4:5b:cf:9e:c7:54:6b:f6:01:66:31:df:
         5e:d0:63:e8:b8:7c:7f:37:df:48:2d:6e:78:9b:c6:a0:4c:de:
         85:d8:65:e8:1b:dd:16:a2:65:93:16:55:1b:13:9b:50:06:a7:
         2e:c7:b3:38:e6:a9:e3:03:f6:d8:67:c1:01:32:a6:5c:f9:f1:
         b2:13:b4:f6:56:46:4a:e7:08:e0:84:c1:67:d1:90:0a:b6:a3:
         5d:98:47:d5:fb:17:22:31:6c:fd:75:35:41:1c:f0:f5:24:c7:
         d4:25:76:77:b0:34:92:b3:bf:58:93:62:86:91:a9:24:ca:f9:
         30:7d:3b:05:53:c2:5a:9f:7c:e5:8b:c0:a1:99:06:e8:57:98:
         46:36:3f:de:da:1e:5a:77:55:b8:0f:5c:46:d4:2e:14:d8:11:
         65:b1:79:ab:c4:f5:30:7b:3c:fa:c2:97:6a:03:3f:e8:8e:eb:
         65:7e:d8:20:28:84:f2:a0:08:3c:59:a5:bb:65:f7:9f:65:84:
         89:c1:db:70:a8:d4:03:4c:17:0d:05:75:7b:b0:86:a9:d9:0d:
         79:57:6e:bd:a9:0c:a5:a4:0d:fa:ea:d6:30:be:f0:ca:b5:b3:
         ac:a1:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:34 2025 by rpki-client