Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
File:                     4F91864780E3C640327E24B527D2248C0C5CAD25.mft (raw, json)
Hash identifier:          +qzLq/ovxB+iqJKUyBmZQ6KzwbkNvg8xp+LggzW99MU=
Subject key identifier:   9C:EE:20:BB:2C:C8:B9:B8:DB:F6:6F:BE:92:1E:2E:07:B9:4A:F7:7A
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       663B7E6E33B71C37E32522294222EE1F1D441416
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
Manifest number:          0221
Signing time:             Mon 20 Oct 2025 10:24:29 +0000
Manifest this update:     Mon 20 Oct 2025 10:19:29 +0000
Manifest next update:     Tue 21 Oct 2025 13:18:29 +0000
Files and hashes:         1: 3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa (hash: O6QiY+i7+vHzk8Eb3hPlT1fCPzDFAkjx3poajvR0FVU=)
                          2: 3137302e3234342e3130342e302f32322d3332203d3e20323632393532.roa (hash: Ii43PWpczkfCVFJD3LPxKjHVsO5iiUIwDAb4cetz7FI=)
                          3: 3138362e3233332e3137322e302f32322d3332203d3e20323632393532.roa (hash: iLFiHAm7uxUIS2txo0hcLSVRmz291tcFCKdh0c3hPMA=)
                          4: 3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa (hash: YKZHAUFLruoX1b1sPZOVvnVfGH76ZFUzK17iivehO8M=)
                          5: 4F91864780E3C640327E24B527D2248C0C5CAD25.crl (hash: SSRpW26P+/etwlIoW+EFo17P5NeIH8/33DN7AoTz6vw=)
                          6: 3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa (hash: HzYfN/PuN5+Sp0w/fVRmgdKTJXD/SAofaTmWsMaX03Q=)
                          7: 323830343a6536343a3a2f33322d313238203d3e20323632393532.roa (hash: RqxgGZ30dxpgHLbofSrWP3s0SDGnzJ8banCtWexE67g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3b:7e:6e:33:b7:1c:37:e3:25:22:29:42:22:ee:1f:1d:44:14:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Oct 20 10:19:29 2025 GMT
            Not After : Oct 21 13:18:29 2025 GMT
        Subject: CN=9CEE20BB2CC8B9B8DBF66FBE921E2E07B94AF77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8a:74:60:f5:d1:45:f5:e6:b5:96:46:66:d9:
                    1f:77:73:04:db:74:f0:0b:39:dc:44:02:36:5b:47:
                    61:20:19:ca:ed:13:8a:a2:cc:24:d7:48:01:47:fd:
                    d7:ef:e9:89:31:ec:3d:24:46:97:f9:bd:cb:0e:8f:
                    6a:0b:d3:56:78:c7:07:06:40:f4:42:10:b4:b0:2b:
                    c3:c7:9f:68:bf:8d:0a:b0:2e:2a:01:99:15:c9:cf:
                    ad:b1:05:57:cd:21:ff:9a:9b:f8:17:26:69:04:15:
                    c3:73:fe:54:eb:7a:15:1c:cf:e0:63:7d:ca:ea:92:
                    d9:f6:ec:0c:8a:76:7f:8d:62:c8:53:6c:3e:57:3b:
                    fd:3e:70:1f:22:1c:a2:9f:83:f2:26:bb:ee:3a:b4:
                    6b:16:e7:f8:a4:4a:7c:a6:11:6c:c9:82:e7:83:71:
                    32:c1:d4:8b:86:49:ee:56:84:17:34:13:ac:3c:5f:
                    57:01:0e:0e:6e:ab:1b:c5:20:02:fb:96:02:9e:bc:
                    2b:30:d6:c3:8f:e3:3f:15:6c:01:d4:58:28:e7:84:
                    8a:00:45:49:7d:cc:a9:b0:7f:d3:97:16:13:95:f1:
                    9a:18:f6:f9:d1:eb:ed:33:a6:ce:f6:8f:d8:3f:d6:
                    37:53:42:6a:4a:a5:32:67:76:2b:92:e4:33:22:a6:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EE:20:BB:2C:C8:B9:B8:DB:F6:6F:BE:92:1E:2E:07:B9:4A:F7:7A
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:47:a3:68:df:b6:d9:a6:ed:74:dc:79:67:86:a3:ff:9c:3c:
         5e:43:3d:f8:32:68:3d:69:5d:07:98:9e:e4:88:02:65:96:08:
         1a:c0:54:81:e6:a8:6d:93:2d:88:70:be:8d:cb:7f:78:d7:3e:
         d4:ef:2a:d5:6c:30:6a:c2:09:ef:d2:a4:03:fc:84:a3:b6:65:
         87:d3:ff:79:ad:b6:88:c2:c3:9b:91:fc:d3:32:44:ab:50:1b:
         9e:45:37:fd:eb:2d:a1:d4:18:fc:8b:42:ef:29:6d:87:02:c5:
         c5:86:1a:3f:69:2c:e9:03:c7:17:73:cb:5c:86:50:3f:9c:55:
         fb:15:b4:4c:ca:06:03:c6:69:d2:8d:47:d0:7b:b6:b8:5c:42:
         71:f0:95:9b:9d:c8:1c:e0:44:85:6b:3f:37:e8:d4:91:0f:15:
         4c:57:5f:22:ed:ab:fa:3b:a4:e3:4e:af:eb:0b:ef:c6:27:b5:
         a1:7b:1c:01:d8:75:b5:5d:44:65:38:d3:81:a5:00:1a:3e:e3:
         f5:69:47:ce:24:1a:a6:11:bf:58:a7:5f:74:b6:e2:fd:b3:91:
         83:6e:14:ce:bd:71:f5:e7:5b:a3:3b:c2:6a:1e:5c:9c:b8:34:
         5a:1e:af:71:a2:d9:4f:61:4e:f4:1e:b9:53:6a:28:96:33:90:
         49:74:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:00 2025 by rpki-client