Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier:          nZQ7McT92kKQg+4YkiXieFJRspwMgawXsnTZwJ5/9iE=
Subject key identifier:   5F:52:9C:7E:E6:C6:E0:B8:2B:78:77:3D:BF:0D:35:5E:75:CC:A5:2C
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       14F35ACDB1244D1DE7F5CF42EFC9CC58FDA41745
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number:          0199
Signing time:             Sun 19 Oct 2025 18:33:14 +0000
Manifest this update:     Sun 19 Oct 2025 18:28:14 +0000
Manifest next update:     Mon 20 Oct 2025 19:23:14 +0000
Files and hashes:         1: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: IV9UKLkqvW1VpDS7pfR4aX82h1SpkES6xPAyJri/sW0=)
                          2: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f3:5a:cd:b1:24:4d:1d:e7:f5:cf:42:ef:c9:cc:58:fd:a4:17:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Oct 19 18:28:14 2025 GMT
            Not After : Oct 20 19:23:14 2025 GMT
        Subject: CN=5F529C7EE6C6E0B82B78773DBF0D355E75CCA52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:f2:b3:69:a3:34:a7:37:ee:46:e2:6f:73:
                    c7:ed:16:e6:4a:cc:77:09:a9:6e:0a:6b:54:a8:db:
                    a9:d0:fe:06:49:d9:17:6c:e8:ae:29:a9:03:8f:47:
                    fc:82:a9:32:51:be:77:f9:d0:77:ba:57:f0:45:8e:
                    37:41:fc:fc:0e:24:fa:bc:c1:ae:92:48:fe:09:26:
                    a2:bf:62:41:b1:09:f6:fc:d3:e2:61:93:0d:82:f3:
                    0c:43:71:0c:bc:85:37:4a:a4:2c:cf:70:4f:0a:bb:
                    ae:96:95:2f:e9:34:cf:ad:88:b6:17:73:b7:01:07:
                    ba:2c:df:66:0d:a8:8d:9f:84:30:57:18:cc:67:9c:
                    8c:96:84:e3:e7:2d:02:6d:1d:31:9a:98:92:cb:bf:
                    8b:ee:ee:23:c4:60:2d:36:64:be:8f:77:cd:94:d9:
                    9c:a7:f5:99:a9:b0:a4:24:7f:7b:02:a0:31:85:d7:
                    c6:42:ec:96:50:09:4d:8a:b0:9f:dc:a5:bb:47:89:
                    37:be:a6:8d:55:28:65:a6:81:1e:32:50:a6:7e:ac:
                    a7:8d:cc:81:e7:31:95:a1:04:2e:92:d4:e5:82:0e:
                    8b:cf:0e:9f:35:72:76:a7:06:e5:bb:52:03:ec:22:
                    c0:86:ba:73:1d:3c:3d:c9:54:5a:fa:c0:a4:08:08:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:52:9C:7E:E6:C6:E0:B8:2B:78:77:3D:BF:0D:35:5E:75:CC:A5:2C
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:ea:66:02:97:3c:80:49:7e:22:d2:33:e9:30:99:62:62:
         16:13:e6:31:c4:b9:9c:ef:e5:08:39:68:6c:34:4a:24:ac:e3:
         cf:eb:a2:02:5d:64:3b:33:50:47:c0:22:cc:10:81:de:6e:b3:
         9e:15:d4:ef:c9:66:4e:c9:f6:f2:42:ba:b4:10:45:76:9e:6e:
         83:f5:8f:8a:3e:45:16:50:90:6d:ee:f0:89:ed:05:d9:65:12:
         44:50:23:90:db:77:f6:86:67:24:f4:a6:7b:b4:bc:37:98:87:
         73:56:f8:54:f9:ff:9d:1f:a8:db:a8:40:3e:79:7d:49:33:81:
         84:92:57:01:4e:44:89:9f:eb:19:3f:48:c1:c3:30:8c:f8:f8:
         80:51:78:c3:6d:64:e9:f3:9e:fc:12:13:db:e2:30:9d:9a:cd:
         b9:ee:78:c1:4b:a5:0d:60:74:17:be:4e:d3:94:29:14:06:8d:
         8e:01:7d:dc:a9:2a:1b:74:4d:75:10:1b:61:49:9e:47:22:3a:
         48:87:de:08:81:b5:41:d3:b6:a3:12:70:99:b1:06:8d:86:ff:
         e5:9f:4c:4e:01:be:4e:48:95:a5:ed:7a:af:df:ef:5e:e7:46:
         a8:1e:bb:77:61:fe:14:d2:d8:09:d1:fd:a6:13:b7:0a:51:10:
         c3:7e:ed:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:32 2025 by rpki-client