Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
File:                     AC154D8D44795F5E54B65B3B1FF4584355304522.mft (raw, json)
Hash identifier:          TFBwGW87cmVYSz6jLS/FoDAb3pLiR9P7XyVQAAUmzPM=
Subject key identifier:   F9:14:7C:4D:6A:35:AF:F2:18:F5:67:41:81:8A:F5:7C:45:E2:10:2B
Authority key identifier: AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22
Certificate issuer:       /CN=AC154D8D44795F5E54B65B3B1FF4584355304522
Certificate serial:       3EF261E8F7C643B0426AEB8E4105C76F202D1789
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
Manifest number:          0354
Signing time:             Mon 20 Oct 2025 00:00:00 +0000
Manifest this update:     Sun 19 Oct 2025 23:55:00 +0000
Manifest next update:     Tue 21 Oct 2025 00:00:00 +0000
Files and hashes:         1: 323830343a373838303a3a2f33322d3438203d3e20323731323437.roa (hash: MAqBnQ9SmfN3mdyuCA234HR4vt8s2UuzNpbYFEWGdQQ=)
                          2: 3230302e3130362e3231322e302f32322d3233203d3e20323731323437.roa (hash: eMER3m5EYA6eXYVarrDZeeH1eZio6xXrHIklujolW/Y=)
                          3: AC154D8D44795F5E54B65B3B1FF4584355304522.crl (hash: 5LSAuSyqEHvRJlo41K9o4NvUgiprtaeieFg7ghW8FJU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl
                          rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f2:61:e8:f7:c6:43:b0:42:6a:eb:8e:41:05:c7:6f:20:2d:17:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC154D8D44795F5E54B65B3B1FF4584355304522
        Validity
            Not Before: Oct 19 23:55:00 2025 GMT
            Not After : Oct 21 00:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:0c:e9:91:18:51:03:c3:17:b0:7f:35:6a:
                    d8:bc:f1:ac:84:83:7c:cf:bb:12:43:a4:a6:ed:33:
                    bc:c6:d1:4e:b8:09:33:8a:a9:12:55:bf:32:c1:c8:
                    fe:13:74:be:b3:f7:f8:e8:12:5a:55:ad:d7:de:b4:
                    ed:6b:88:ad:5d:fc:69:48:76:fb:64:25:eb:76:8f:
                    12:6e:49:6c:2e:9a:5a:12:42:df:27:22:f0:d0:7d:
                    fd:39:22:a2:da:f6:f2:9f:6a:4c:ab:c0:cd:4b:7f:
                    43:21:11:cf:72:8d:f0:9b:91:a5:3e:45:69:8c:a6:
                    be:73:bb:cc:05:16:50:0c:2d:da:31:65:44:22:95:
                    63:2d:83:e6:78:bc:c0:67:ef:7d:5c:dc:58:f3:32:
                    b2:c9:e7:3b:1f:60:27:eb:9a:00:4f:5c:af:7d:5b:
                    44:75:d0:34:28:f6:93:3f:8b:6d:6c:f8:9e:e6:7a:
                    48:ad:93:59:89:71:fb:ca:2c:8c:e3:4d:ea:3f:37:
                    d4:a4:77:4b:82:b5:cf:8d:7e:f3:c2:e8:b3:bb:72:
                    9d:9e:eb:64:b5:79:3e:9e:02:1f:96:8f:5d:93:cb:
                    8c:bd:d9:72:c9:76:22:e3:8a:b4:38:57:c4:e1:1a:
                    7a:62:86:91:97:e6:3e:40:30:e3:52:07:b0:da:2e:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:7C:4D:6A:35:AF:F2:18:F5:67:41:81:8A:F5:7C:45:E2:10:2B
            X509v3 Authority Key Identifier:
                keyid:AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:77:a5:9b:ec:91:2b:3e:26:4b:0a:6c:27:4c:ac:3c:da:
         02:34:06:2f:75:4e:16:1c:42:12:4d:bc:27:ac:b8:08:a2:1f:
         3e:7a:8b:8a:df:e0:d7:37:4a:38:2b:8e:e1:ed:2d:6d:50:90:
         96:73:9c:8b:4c:0d:1e:27:c3:60:66:58:7a:45:b8:b8:06:d2:
         c3:53:3d:43:0b:cc:60:d0:96:6a:d3:84:01:16:17:e7:c0:0f:
         fb:30:55:76:27:85:33:db:0d:25:45:19:36:71:9d:9a:68:ff:
         e0:e6:55:e8:46:9c:1d:7a:99:bd:1a:b0:49:8f:bb:2e:68:f4:
         27:ae:3e:b3:82:8a:0a:6b:b4:10:8c:be:b4:53:45:fb:00:a2:
         6c:b9:96:6b:35:77:1b:aa:ec:aa:a1:82:a9:d7:fa:6b:e6:c5:
         a4:62:05:75:3b:75:87:a8:e1:0a:02:72:59:76:19:2e:3b:94:
         08:9f:86:07:5b:08:5e:03:82:a7:a3:8b:fa:d7:75:99:68:a4:
         5d:ec:13:18:ff:b2:01:a0:99:c8:5d:97:42:09:eb:67:c1:1b:
         a4:7d:82:21:ae:5b:65:9c:eb:39:12:b1:e6:ef:fd:3f:49:3b:
         45:a9:d1:d5:a4:a2:b2:e6:24:cf:c9:57:f8:3e:7f:78:4f:14:
         e3:00:b4:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:34:31 2025 by rpki-client