Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.mft
File:                     103C563F76C2FC07B4105E588114D30162C3DB49.mft (raw, json)
Hash identifier:          PF7qUCyKglPYo5tNV4FxONQRRxj2CBNXp89Vw8AXM/0=
Subject key identifier:   D5:0D:68:B6:5F:00:E2:08:E1:2D:66:BF:52:D2:E7:31:6F:16:94:68
Authority key identifier: 10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49
Certificate issuer:       /CN=103C563F76C2FC07B4105E588114D30162C3DB49
Certificate serial:       102805076833C4EA3B7F92872B892123EE82EB6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.mft
Manifest number:          1E
Signing time:             Sun 19 Oct 2025 21:56:06 +0000
Manifest this update:     Sun 19 Oct 2025 21:51:06 +0000
Manifest next update:     Mon 20 Oct 2025 22:05:06 +0000
Files and hashes:         1: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: ZKfaNdKQawmsRPvnjcTTAGD2+0IMXihfXoquI3vm+o0=)
                          2: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: D/WXd3lCfNEAQCafxVlXkbKhULtOja0SLYJuY4NeZC0=)
                          3: 103C563F76C2FC07B4105E588114D30162C3DB49.crl (hash: iPgix5irf0CBcDp2ZAgwHivfj810iGubrRJITc/SG1o=)
                          4: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: EsXIRWZvWB7eRE08XtEay9ggOMQTW+oz8BBjYfXlRoU=)
                          5: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: 6/JB+HcPH2qOBmxrQhUbG/nXINxW/YctTaNQEdp/AcY=)
                          6: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: Zocq2Mqu3fMCzLjHTwRxaEy2xviTteOFcv8M2XJOfik=)
                          7: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: ZH5M/U03L+50TZrfLKk2sSvqHYlCFuPBcVntIBT9DOY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:28:05:07:68:33:c4:ea:3b:7f:92:87:2b:89:21:23:ee:82:eb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103C563F76C2FC07B4105E588114D30162C3DB49
        Validity
            Not Before: Oct 19 21:51:06 2025 GMT
            Not After : Oct 20 22:05:06 2025 GMT
        Subject: CN=D50D68B65F00E208E12D66BF52D2E7316F169468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:19:4d:55:08:9d:f0:61:8e:53:36:d2:4d:
                    69:04:9c:04:56:0a:2e:ff:8a:ac:d9:de:42:bd:61:
                    8e:a8:d1:d2:e7:4d:a1:7d:4e:21:c2:60:e1:f8:1a:
                    ff:83:84:ee:70:53:c2:9a:df:c8:4b:07:d5:92:7c:
                    8f:48:4e:fd:81:34:5f:ee:03:6c:16:fe:65:70:33:
                    06:0e:20:eb:9a:e4:95:14:31:4f:6c:81:55:98:99:
                    c1:a1:64:8c:3c:1f:56:a0:39:4e:6b:96:61:3d:3a:
                    95:c8:48:5e:01:21:f8:6c:35:1d:6e:04:40:00:87:
                    64:c7:80:31:aa:07:57:92:4a:6f:74:fc:16:1f:54:
                    15:9a:de:28:09:da:66:86:29:03:57:ec:f0:e5:f3:
                    ea:dc:db:14:bb:6f:1c:da:2c:b9:19:0d:61:f4:3d:
                    25:73:5a:32:9a:32:4c:9f:e1:e9:63:54:19:f2:b0:
                    6e:38:81:04:40:5b:08:21:4d:d2:48:ec:6d:55:51:
                    74:b0:60:57:e1:25:d9:2f:56:87:22:20:a4:18:bf:
                    86:e5:77:bb:7e:44:43:80:06:4f:50:77:c1:d7:34:
                    17:ad:0c:2e:ad:f7:65:84:f1:4c:45:c5:0f:86:bc:
                    69:c0:19:49:54:8c:dc:ae:a7:59:df:a4:36:07:46:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0D:68:B6:5F:00:E2:08:E1:2D:66:BF:52:D2:E7:31:6F:16:94:68
            X509v3 Authority Key Identifier:
                keyid:10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:63:be:2e:49:3a:05:6e:6a:4b:4b:8a:f5:41:e1:75:9f:32:
         eb:25:bb:e0:66:c7:9c:94:f9:ad:7e:27:dd:a6:ad:97:f1:7a:
         a0:3c:51:33:b7:34:da:d7:98:2f:b0:ce:a3:0b:80:a7:54:76:
         93:3d:43:a8:fe:03:5a:80:19:31:cf:89:85:50:e6:24:da:29:
         55:7f:cc:12:7d:5d:0e:e2:c8:fc:72:23:f3:59:92:54:9e:8a:
         ff:0a:2d:02:17:65:8d:58:8c:db:74:e9:35:0e:01:38:57:76:
         39:95:1a:f1:c2:25:ba:b9:b9:02:10:2a:db:d0:0a:10:e6:d5:
         df:f2:00:02:59:8e:ca:bc:8b:6a:5b:41:4b:a6:b9:14:45:6d:
         57:86:97:ff:91:1a:2f:ee:d6:44:bd:72:a3:87:14:50:a6:93:
         38:96:b8:3e:94:60:26:50:8c:d2:bb:13:c5:ea:81:c1:21:5a:
         d3:95:f7:f2:ab:b5:9a:ad:de:36:ac:aa:6f:6b:e5:6d:a1:32:
         ab:43:b3:8d:ed:f5:17:61:28:de:f2:ef:b5:7d:2c:bc:1a:61:
         c6:ff:27:ec:cb:2b:09:b4:fc:8c:72:63:01:6c:f2:19:2e:06:
         69:8b:a1:cf:bc:73:d8:6f:27:c9:7a:7c:50:23:a4:e1:69:dd:
         d1:70:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:29:27 2025 by rpki-client