Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
File:                     AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json)
Hash identifier:          +ZbK5RUOXn4UCF/6VwpwmjbsizMAq18FlfbaoyzvE1s=
Subject key identifier:   5A:63:CC:1D:7D:87:9F:FB:4A:D4:EC:87:24:23:ED:E0:44:41:8F:0C
Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85
Certificate issuer:       /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
Certificate serial:       6911929545C08339A0886AC7587D0D2454C3846F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
Manifest number:          15
Signing time:             Mon 20 Oct 2025 13:18:14 +0000
Manifest this update:     Mon 20 Oct 2025 13:13:14 +0000
Manifest next update:     Tue 21 Oct 2025 16:30:14 +0000
Files and hashes:         1: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=)
                          2: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=)
                          3: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: 3gjMksHnndaKM2mMVN4KGxGliYruxhggI0nI5qTGcvA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl
                          rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:11:92:95:45:c0:83:39:a0:88:6a:c7:58:7d:0d:24:54:c3:84:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
        Validity
            Not Before: Oct 20 13:13:14 2025 GMT
            Not After : Oct 21 16:30:14 2025 GMT
        Subject: CN=5A63CC1D7D879FFB4AD4EC872423EDE044418F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:f2:55:1f:b2:59:34:29:af:8b:28:bc:2f:
                    fe:17:35:56:62:3c:ae:86:d4:a0:9d:ec:9a:74:9a:
                    de:f9:a7:f4:c9:e4:93:82:53:52:9e:70:a4:c5:40:
                    13:4d:51:f2:79:c4:f9:9e:82:a7:72:79:0b:79:56:
                    65:68:8b:84:e3:92:7a:95:c7:49:82:62:b1:41:31:
                    9b:c5:8b:9a:e3:55:d0:06:3c:fb:27:55:7f:ad:3c:
                    c6:3e:03:40:21:3f:84:13:a2:fa:3c:90:c4:3d:92:
                    75:2e:04:57:bc:8a:ad:03:fe:43:2e:07:c6:ac:99:
                    56:70:0d:9c:17:64:41:15:ac:0c:42:ae:36:21:67:
                    5e:9a:1c:ed:52:60:83:56:85:f5:d6:5b:bf:76:35:
                    d7:63:89:61:61:63:1f:3c:32:2a:a3:b3:ce:55:ed:
                    4e:42:75:49:26:fb:6e:26:e6:85:3f:1f:a8:aa:ae:
                    54:6a:a2:ff:cb:0c:b5:36:ac:e2:97:7d:85:63:34:
                    da:90:1c:e0:00:77:9d:0d:5b:12:11:ec:3a:c2:f7:
                    d8:cb:3f:b5:74:da:98:67:e8:c6:e2:d0:7a:03:29:
                    ca:ce:55:ef:f5:40:b8:c5:56:13:fc:4e:38:b5:79:
                    34:e3:2f:9f:37:f6:9f:b5:e3:7a:88:c2:82:2a:2f:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:63:CC:1D:7D:87:9F:FB:4A:D4:EC:87:24:23:ED:E0:44:41:8F:0C
            X509v3 Authority Key Identifier:
                keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:c9:67:91:92:2f:5c:97:15:19:2b:01:a2:23:97:b2:8c:
         3c:1f:0a:24:03:07:d9:59:f9:24:11:43:57:d4:9f:19:0c:4c:
         2d:64:4c:97:83:00:fd:7d:39:66:73:72:2a:ce:bb:0b:c9:87:
         1b:08:97:68:44:32:00:f9:15:7c:d8:ba:8f:dd:22:04:86:44:
         ae:58:06:39:78:be:99:5c:d1:54:7d:4f:3f:66:4b:14:7b:24:
         b4:c0:70:24:53:38:59:e9:cb:32:01:59:e8:3f:55:b5:95:54:
         ca:b9:fd:6b:ca:6e:8d:97:83:35:2d:bd:e0:86:d5:7e:8e:62:
         61:8b:71:a0:ae:ea:76:8a:a8:e3:27:dc:59:d4:12:eb:aa:81:
         43:fc:1b:7d:b7:d1:90:12:42:d3:b3:db:e5:88:83:13:2b:2b:
         2e:f7:ab:ab:01:93:36:79:bf:ae:3a:83:34:76:97:d7:c9:4e:
         91:fc:43:da:c4:56:69:fa:89:a3:65:65:38:9b:04:40:19:14:
         94:4b:84:42:98:63:03:be:77:8e:59:6e:f2:06:84:f1:0f:44:
         ec:af:75:9c:97:16:bd:35:22:d5:2c:b5:70:86:06:15:eb:ae:
         6e:ae:b5:40:b4:79:65:0c:7d:78:b0:f0:76:2c:f0:60:60:e9:
         83:f9:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:08 2025 by rpki-client