Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft (raw, json)
Hash identifier:          qFo2b3LOelXFiOvQFOf+bXTcFEZRIxymGTzXNwiFDVA=
Subject key identifier:   CD:D1:CF:D1:51:D0:7C:E2:BB:1E:65:80:7D:29:D7:E9:92:0C:83:74
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       019FA9ED65FA76279EC7424CDBF3145EE23C1900
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
Manifest number:          B2
Signing time:             Mon 20 Oct 2025 13:05:17 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:17 +0000
Manifest next update:     Tue 21 Oct 2025 13:55:17 +0000
Files and hashes:         1: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: AByqAu5aFAKkVdIxOZPc9IFOefmyvDsFDw/jy1fUyFk=)
                          2: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: LFEgWICXHnee4/bGPrqW2v3LYv3dbDv2jg2lbR5xrCI=)
                          3: 323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (hash: CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=)
                          4: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=)
                          5: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl (hash: iR/pm0/FZpqnqoSUeu3ynYGdB5STXdc3fPCRDFldP3c=)
                          6: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=)
                          7: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: R7MIKUFJ61JnpNcf/kEfY1SDTgaGtaQruSRJo+oewXw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ed:65:fa:76:27:9e:c7:42:4c:db:f3:14:5e:e2:3c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Oct 20 13:00:17 2025 GMT
            Not After : Oct 21 13:55:17 2025 GMT
        Subject: CN=CDD1CFD151D07CE2BB1E65807D29D7E9920C8374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:8a:59:ea:cc:a3:0f:7d:60:63:3c:98:82:
                    c8:45:a4:4c:da:5e:91:b4:e9:ea:98:b4:0e:40:9e:
                    41:0c:5a:6d:f1:7b:e1:07:e1:9d:94:f2:be:91:d8:
                    ed:bd:7b:a4:29:d6:80:45:e8:0f:00:67:24:c0:07:
                    b8:b5:90:f0:a7:f2:ae:6d:64:ff:bc:7d:22:b4:86:
                    30:77:78:fb:98:91:06:de:b2:bd:ad:a9:bc:b9:f3:
                    23:8f:ec:3d:b3:32:4b:a4:10:09:e2:3b:91:61:c0:
                    99:c5:cb:46:71:8f:d4:88:14:1c:51:ad:a5:03:00:
                    8a:f0:8c:f2:59:94:25:04:69:f8:e7:ad:e0:59:19:
                    be:49:75:fa:ff:ea:e5:fb:58:9d:e4:e7:33:7e:3e:
                    b6:42:3d:2f:2b:77:07:a4:92:f2:72:6a:90:70:ca:
                    26:c6:21:31:eb:f9:9c:6f:ad:ca:61:71:b9:5a:30:
                    26:d8:c6:4d:15:6f:a5:37:c7:16:90:d5:19:0e:19:
                    ec:69:69:4a:b4:86:ea:de:fc:ff:26:10:ff:b1:74:
                    72:4e:90:8f:c6:bf:9b:69:9d:d0:c3:d5:20:0b:e1:
                    78:5f:80:2a:25:35:f4:70:dc:39:6d:55:b9:a2:87:
                    a9:d6:ba:d3:54:a2:aa:00:9f:5e:ea:88:90:c6:7d:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:CF:D1:51:D0:7C:E2:BB:1E:65:80:7D:29:D7:E9:92:0C:83:74
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:c0:31:4e:b6:be:ee:cd:66:54:2d:dc:b1:63:07:e4:b5:
         6c:d3:0c:c1:43:a0:46:6d:5d:a6:75:58:01:82:ce:c5:1c:7a:
         85:f6:9f:51:21:e2:fb:c5:44:38:71:15:e4:c1:09:b1:1f:ab:
         e1:b3:04:4e:cb:7c:1d:13:20:22:b6:3b:32:30:b6:7f:42:1d:
         c5:a0:f0:5d:95:c1:51:ae:33:cb:cb:1f:e9:6d:ad:ba:a3:4e:
         31:ab:a7:e1:c5:1a:27:46:64:58:ff:85:81:40:25:5b:13:39:
         c0:ee:53:5d:99:a4:b8:22:06:6d:47:fd:ea:c1:17:e4:b2:04:
         dd:28:57:6d:94:ca:cc:2a:65:9c:a4:48:f2:bf:a8:5e:59:e3:
         f7:ba:87:46:17:18:c8:ba:e3:7b:f5:2b:78:53:a5:43:d9:bb:
         9c:b4:a1:77:c4:a3:af:1f:2a:c4:61:28:44:2f:63:a4:0b:01:
         ac:1b:62:69:6a:ab:dd:ed:48:f9:60:97:a5:95:5d:90:c0:58:
         9f:d6:99:cb:6b:4b:42:4d:6b:ae:df:96:0e:c8:77:35:ca:ea:
         58:97:35:06:0b:06:e8:5c:ca:ae:e3:f3:66:df:ea:54:50:08:
         2a:8f:66:fa:80:4d:7a:75:75:76:c4:cf:57:0c:a8:b1:c8:d7:
         45:b9:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:35 2025 by rpki-client