Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
File:                     891876379661096633CCF1E14D82D1BBB9CBF133.mft (raw, json)
Hash identifier:          e23Oskh2mtnfTK6XTowg/w7affkxllduDWo4bdygjPA=
Subject key identifier:   CA:54:8A:C0:B4:EC:62:78:1A:B4:76:E4:49:CD:EF:13:2E:C9:00:CE
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       475F31E87EF863DDF7AE82625E604F58C7FB1909
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
Manifest number:          01F1
Signing time:             Mon 20 Oct 2025 01:39:29 +0000
Manifest this update:     Mon 20 Oct 2025 01:34:29 +0000
Manifest next update:     Tue 21 Oct 2025 03:59:29 +0000
Files and hashes:         1: 34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa (hash: eCicn8ImATtRCvC9cDtGoHFzEjsxcilD3e7acHERHGI=)
                          2: 323830343a363235633a3a2f33322d3332203d3e20323639323932.roa (hash: Qf1AKQUVJEo0TWetYl/0R8LDuxxKKivHBRp1bsiN+Dg=)
                          3: 323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa (hash: epbEj8krG33tpaWS0bXehGzTYsTkA59oEqF1PjGbstQ=)
                          4: 323830343a363235633a3a2f33332d3333203d3e20323639323932.roa (hash: l7j5jrYtTHS96gbvaETyWxklO0VohGEx5IrrwFK5RFg=)
                          5: 34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa (hash: 729Dku4WQ8bBIObM2xPK3PMDng8cqGeKofQnaGtEmd4=)
                          6: 891876379661096633CCF1E14D82D1BBB9CBF133.crl (hash: PeKHe66YaUjTNH8/LxQ0QdJ07FxZ93x1ZGDk5NsCjxM=)
                          7: 34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa (hash: dKMX6qACUJhaUBirHnkZJbAFc2qN+rbyd2QiST1MyPI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5f:31:e8:7e:f8:63:dd:f7:ae:82:62:5e:60:4f:58:c7:fb:19:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Oct 20 01:34:29 2025 GMT
            Not After : Oct 21 03:59:29 2025 GMT
        Subject: CN=CA548AC0B4EC62781AB476E449CDEF132EC900CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:9e:cd:03:08:c3:62:dc:78:d1:88:bb:8c:
                    40:4b:f2:a0:15:2c:c7:fa:c2:aa:43:ec:bd:51:36:
                    14:ba:1c:25:14:dd:d2:35:b3:31:ae:f0:05:b6:9a:
                    f6:0e:72:1b:fc:e1:7c:40:02:95:72:b1:e2:5f:eb:
                    ab:74:17:07:5d:49:0d:2e:2a:9a:9f:fc:00:66:e4:
                    91:6c:e2:f6:2f:18:e9:f0:9c:cc:11:12:a6:b9:0f:
                    4f:88:76:0c:16:d2:c4:72:e9:7c:ef:1b:6c:5e:00:
                    de:67:b6:e7:be:df:22:9c:50:ab:4a:9f:10:2a:bd:
                    25:8b:96:ca:dc:c5:e1:8d:93:9d:d0:c2:23:0e:c8:
                    ac:18:a1:78:cb:e1:98:c3:92:90:f4:a8:92:42:df:
                    37:ea:f5:4f:f8:5d:bb:c9:9b:7b:98:62:33:99:90:
                    fe:77:6e:48:66:7d:41:b1:9a:13:74:93:a7:37:2f:
                    3f:6f:c5:e2:bb:cb:06:f8:c0:45:9a:aa:e9:ae:b8:
                    7d:81:eb:c8:b4:15:d5:6d:a0:79:d8:81:ac:66:74:
                    1a:da:d0:fa:00:ee:14:b6:55:b5:31:a7:d0:22:8b:
                    83:cb:d1:db:51:d6:04:5b:55:46:fa:75:eb:b0:77:
                    3a:14:e6:0b:d9:3d:05:53:5f:df:87:f4:0d:00:44:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:8A:C0:B4:EC:62:78:1A:B4:76:E4:49:CD:EF:13:2E:C9:00:CE
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:17:48:4c:4a:03:f1:8b:2e:93:74:6c:8e:5e:f7:f9:bb:9a:
         cd:63:ca:38:97:53:a6:7d:7b:b1:7b:bb:cd:2e:ac:0d:6c:a0:
         bd:e1:ce:42:e7:6b:bf:a5:11:19:78:c3:35:7c:e5:bf:96:bc:
         ef:a7:c4:4d:de:df:92:4b:ff:cb:57:90:3e:a9:26:27:af:93:
         90:d4:df:40:47:f1:89:9b:ea:a2:00:5d:3e:1e:6c:20:56:88:
         bf:f7:e2:c6:b1:60:54:86:88:3c:ab:41:d6:bc:2b:20:58:ae:
         8e:38:e4:02:54:54:1c:3c:61:c8:7b:8e:99:a7:c2:18:6f:ae:
         a4:6a:8a:65:00:6b:8c:f6:94:0c:1f:37:1c:bc:0d:46:51:de:
         d3:1b:d8:5b:dc:4c:43:79:79:77:0a:94:10:dc:7d:48:9d:4f:
         09:ab:23:75:df:6e:a0:e0:4a:03:4a:da:27:e6:a7:1b:a8:28:
         d9:42:61:11:79:d1:27:c8:36:21:7a:49:61:89:12:78:57:77:
         2b:f9:af:b3:7d:c4:3f:bf:b8:42:c1:dd:83:f5:99:d0:84:07:
         9d:e7:fd:c1:fa:31:fd:2f:0b:bb:16:be:c9:b8:bf:78:97:f9:
         2e:c1:e9:63:52:7d:7d:ae:f9:da:41:5a:6d:1b:cb:d7:16:47:
         fa:e3:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:15 2025 by rpki-client