Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
File:                     F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft (raw, json)
Hash identifier:          xeUla2r6K+VrQRA4PJUhQfQuJpGunETpyrxG0nMZUnE=
Subject key identifier:   A8:31:87:7F:85:72:DE:27:B8:72:C8:20:4A:3B:0E:E3:D6:5C:9F:1C
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       4257CF770549F35B3160F2118BB7667537C02FEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
Manifest number:          02BE
Signing time:             Sun 19 Oct 2025 20:33:14 +0000
Manifest this update:     Sun 19 Oct 2025 20:28:14 +0000
Manifest next update:     Mon 20 Oct 2025 21:59:14 +0000
Files and hashes:         1: 3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa (hash: mWib45VxzqTtIDFo0pUsBgtHjql0ZMDSZQrkSOQEjyk=)
                          2: 323830343a326263303a3a2f33322d3332203d3e20323635313733.roa (hash: DfYvO4Hl+TnrOhFrwqNueChpfOSrrMCnVssXqHvScZA=)
                          3: F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl (hash: NeXG5k8jomqfMTXjN2VeT3TUG9Y2yyPxuXG+ARQJqaY=)
                          4: 3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa (hash: Go7TcquwR4G1UTCt6xeUgqLYsgVcMbp3HrsiJ/xhTk4=)
                          5: 3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa (hash: 0t3O515ZscUD7AYUpjPRRl0QmL8XDr+TJdwKclAgX9g=)
                          6: 3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (hash: TQIWvgPybckuRDgNawrWl52foQOzfxhU4LVG+2RgegQ=)
                          7: 3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa (hash: afaAWesiSlnf9FW7f8Tv0SLaJtA7zURFxVjGP8k60Xg=)
                          8: 323830343a326263303a3a2f33352d3335203d3e20323635313733.roa (hash: iMMUMLYYrK18YSgU73R25kQhTX3gGO+vR7mXyDzWcF0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 21:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:57:cf:77:05:49:f3:5b:31:60:f2:11:8b:b7:66:75:37:c0:2f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: Oct 19 20:28:14 2025 GMT
            Not After : Oct 20 21:59:14 2025 GMT
        Subject: CN=A831877F8572DE27B872C8204A3B0EE3D65C9F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:33:b0:e4:b1:af:d2:2f:90:9e:01:40:5c:
                    43:8e:79:cc:0d:b3:2a:3d:69:52:0c:02:d4:2e:e3:
                    42:b3:c3:c5:37:95:79:48:72:00:f0:d9:83:e9:2a:
                    d6:2f:09:68:f8:35:76:be:f0:40:61:d5:bb:2e:0e:
                    d9:68:b3:3b:e1:62:f5:57:7c:ed:05:36:4b:8c:45:
                    9b:b0:d0:4e:a7:be:11:ad:3a:50:e9:2c:cc:b9:84:
                    f8:7f:1a:2c:5e:4b:bf:ec:a9:5b:0d:10:7e:cb:d6:
                    ae:2a:06:86:0d:50:5e:71:5b:f7:c8:a2:91:bf:cd:
                    88:79:db:33:c9:61:98:86:74:4d:ce:21:2e:80:e2:
                    de:d5:bb:5d:63:c2:dc:0f:cc:95:03:09:f4:af:54:
                    3d:d8:15:fa:54:b6:1c:33:63:ba:ad:3e:ff:c8:53:
                    b4:53:79:02:60:a5:99:be:bc:93:33:12:d7:b4:8b:
                    5e:04:99:a3:1b:d5:aa:ca:a8:e9:e8:aa:85:5d:cd:
                    d1:08:67:00:42:b0:52:f1:4b:96:d4:1d:e1:f4:11:
                    cd:f5:b6:33:91:0a:0a:81:dc:d4:4b:c8:33:35:5c:
                    a9:f1:48:e2:71:7e:c3:11:ed:ff:58:05:1b:5b:5e:
                    67:c1:68:c1:cf:e5:dc:0a:ed:68:d9:c7:82:ab:da:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:31:87:7F:85:72:DE:27:B8:72:C8:20:4A:3B:0E:E3:D6:5C:9F:1C
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e4:a2:12:1f:b0:43:f8:f2:4a:e9:b6:4c:41:bb:47:12:23:
         34:9e:ac:48:4b:4b:90:85:f1:58:73:f6:8d:f9:73:5e:51:9c:
         92:03:8f:82:5f:f9:f2:4a:ed:f7:64:05:2c:d2:a3:72:f8:4e:
         0c:b3:49:a3:8c:1e:60:69:d6:ec:f7:36:f2:18:0e:26:01:63:
         47:8e:c1:d7:92:fb:a4:89:0e:08:b6:f3:e8:53:69:83:67:85:
         a4:5d:8a:c0:88:b9:b8:10:78:6b:be:6d:2f:1c:a8:0f:ca:35:
         2b:14:b4:c0:0d:06:9b:5a:f1:d1:79:f1:e2:10:36:db:3a:28:
         43:53:63:45:d8:6a:d1:eb:03:4f:72:d7:9d:c4:0a:cf:55:04:
         9c:fd:2d:97:f3:67:98:a3:47:61:c5:85:6f:cf:b5:ee:60:ca:
         52:54:6a:9b:8d:16:dc:2d:1d:96:2c:0b:d3:2e:95:fa:3b:14:
         d2:54:c4:65:3f:18:f3:d0:50:af:02:12:73:fd:1a:45:60:a2:
         e6:de:c8:83:87:e9:d6:04:f1:70:68:66:a6:1e:93:1a:b1:48:
         97:2d:b7:2c:82:f3:a2:94:52:d1:69:01:64:d9:3e:1f:09:fb:
         40:9e:ba:08:98:d8:34:a9:10:00:44:56:f1:52:c7:4f:5d:70:
         91:04:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:02 2025 by rpki-client