Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft
File:                     8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft (raw, json)
Hash identifier:          E4RB+45+2zr6Zt9Vip1I/vBmSqhwCRVftOD+Y89LouU=
Subject key identifier:   49:85:6E:46:CE:A7:CB:21:2E:22:8D:6F:2F:EE:C2:E5:CD:C3:A0:6F
Authority key identifier: 8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E
Certificate issuer:       /CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
Certificate serial:       660E236154ED665DA4F8C272E4AA45EB289473F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft
Manifest number:          0149
Signing time:             Mon 20 Oct 2025 05:14:26 +0000
Manifest this update:     Mon 20 Oct 2025 05:09:26 +0000
Manifest next update:     Tue 21 Oct 2025 07:36:26 +0000
Files and hashes:         1: 323830343a316339383a3a2f33322d3332203d3e203631363634.roa (hash: ErjXYB0BE3xkBxExu2CJaTp/FBjK/vo7dndLrn/euBk=)
                          2: 3133312e3130382e36302e302f32322d3232203d3e203631363634.roa (hash: QQNq5LIWChLx6lXpvwDNDndJd2pSpILbVY2R0UJJXvI=)
                          3: 8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl (hash: lx1qRbR/y2a8oXXPyVoBlp85buy0bYM271iTtHQbPeA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl
                          rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0e:23:61:54:ed:66:5d:a4:f8:c2:72:e4:aa:45:eb:28:94:73:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
        Validity
            Not Before: Oct 20 05:09:26 2025 GMT
            Not After : Oct 21 07:36:26 2025 GMT
        Subject: CN=49856E46CEA7CB212E228D6F2FEEC2E5CDC3A06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:3e:a4:32:e5:b5:43:77:a2:ba:c7:42:70:
                    4d:b1:c8:97:a5:01:5e:d5:05:a9:fd:f7:4e:80:5a:
                    1c:b2:13:10:9d:8d:2a:f2:5a:c2:d4:03:3d:1d:dc:
                    c9:99:f6:59:a0:b1:88:5c:6a:12:4f:62:0d:ca:e0:
                    bc:3f:92:b1:21:59:fb:42:f5:ed:b4:ce:35:14:fc:
                    db:e5:4f:43:b4:a2:4e:3f:1d:22:e7:72:20:6f:50:
                    9f:a3:8c:fb:c3:3b:65:fc:14:d8:7a:f4:f3:a8:33:
                    4b:78:b8:5c:f0:7a:5d:b4:9d:59:c1:ef:96:0a:39:
                    bf:c9:f0:89:fb:2e:65:e5:cc:f8:61:76:6c:e0:6b:
                    a5:1e:4c:9a:c7:45:03:6a:e6:e8:f7:e6:ff:d2:f0:
                    0d:d3:72:90:36:a3:9d:23:35:45:4d:a9:98:9d:4c:
                    00:f8:36:8f:d1:95:6f:d7:e4:07:a6:d9:7f:91:a9:
                    48:6d:b9:66:f0:6d:9e:92:79:8a:4c:84:1a:94:28:
                    66:0f:29:b7:a4:6d:0e:11:6e:cc:2c:4b:f3:33:8d:
                    a9:7e:a9:9d:7c:f5:e0:1d:2b:11:9b:27:65:26:13:
                    e4:54:b9:ec:6f:aa:db:6e:30:26:c3:2d:29:5a:3e:
                    e1:35:f7:81:ae:4d:15:ee:3a:6c:5f:b2:cb:78:16:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:85:6E:46:CE:A7:CB:21:2E:22:8D:6F:2F:EE:C2:E5:CD:C3:A0:6F
            X509v3 Authority Key Identifier:
                keyid:8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:97:c1:50:21:6f:54:6b:58:00:77:6c:6e:b0:c6:a5:bb:
         07:58:3e:fd:b2:0e:a9:c2:b1:a8:32:c0:00:96:6e:54:5d:c9:
         04:a2:89:64:9b:5d:87:dd:29:47:58:56:aa:b1:63:64:57:91:
         20:f9:43:b4:06:62:f7:12:d0:62:18:38:f7:96:2f:b8:ab:71:
         8a:20:63:8a:e2:8b:0e:e1:8e:7a:ab:42:0f:b6:73:6c:89:8b:
         8c:65:a0:68:b1:21:17:87:c2:e6:52:cb:75:7b:64:36:db:6b:
         1a:ed:0e:43:49:d5:c9:a0:50:df:54:53:cc:84:59:cd:ad:24:
         68:ff:d3:91:49:db:64:14:fb:ca:4c:8b:c4:e0:20:6f:fa:44:
         70:2f:bf:61:06:75:c0:1c:8c:ff:88:1d:50:62:5b:21:16:cc:
         91:94:69:0d:3e:d3:d2:7c:ab:a5:b9:00:b1:70:24:7d:29:c6:
         14:3e:42:45:a9:e8:8d:0a:7e:20:95:29:83:89:da:90:53:54:
         4c:7a:f7:2d:89:3f:7e:ae:01:2d:8b:7c:a3:a9:e9:03:b4:f1:
         dc:fc:0d:60:73:1a:3e:fa:16:0a:08:65:5e:a8:fd:54:97:e1:
         12:0f:be:37:8c:4e:7c:15:be:97:d3:e0:3a:2a:cc:7e:36:0f:
         3f:b9:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:38:46 2025 by rpki-client