Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
File:                     2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft (raw, json)
Hash identifier:          3b9K5PaZUuwcf9JL1kev2fo/SzIzgTSB6li5SAIoKJQ=
Subject key identifier:   1F:4D:A0:14:B3:F4:23:0F:A4:0C:7D:1C:83:8F:3B:0B:6A:AC:BF:56
Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
Certificate issuer:       /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
Certificate serial:       1ECD979C3B286168048A7BD6E3105B5EFD42B718
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
Manifest number:          02F2
Signing time:             Mon 20 Oct 2025 16:28:42 +0000
Manifest this update:     Mon 20 Oct 2025 16:23:42 +0000
Manifest next update:     Tue 21 Oct 2025 16:58:42 +0000
Files and hashes:         1: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl (hash: adGQZ7zP/K+v0rDiCAxV5EdVFimQICnvS6Yl/iUIA4s=)
                          2: 3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (hash: jv5mGEDvNirUNb+ywEWplBQ51qJkA6j3IlJ4XwV4itQ=)
                          3: 323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (hash: 1nVescDhZB748DPO06KLiKZQV7YLDmgTqov+PIhCxEo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl
                          rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:97:9c:3b:28:61:68:04:8a:7b:d6:e3:10:5b:5e:fd:42:b7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
        Validity
            Not Before: Oct 20 16:23:42 2025 GMT
            Not After : Oct 21 16:58:42 2025 GMT
        Subject: CN=1F4DA014B3F4230FA40C7D1C838F3B0B6AACBF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:8c:67:60:bb:62:2a:cf:63:4b:ec:0f:1f:
                    78:05:76:34:92:b0:57:f6:d4:81:0a:00:db:cf:cc:
                    b7:b3:fa:ba:89:c0:8d:a0:60:35:b9:29:1e:be:3a:
                    68:7f:f5:66:c5:51:8a:69:46:97:c7:36:6f:95:0a:
                    1e:81:11:76:1a:1b:d7:68:61:2a:55:b9:cc:76:0c:
                    b5:63:10:33:2b:65:80:f9:37:24:c4:bb:3f:05:45:
                    04:8a:e8:31:d2:23:fe:08:c1:3d:74:16:a0:6b:0d:
                    92:a1:fc:f4:0c:5a:25:49:53:07:6f:f8:86:3b:8f:
                    08:d2:57:b3:3d:81:5c:c4:88:e9:b9:4d:ee:4e:23:
                    47:59:d4:ab:b6:e1:60:c2:9e:92:c3:39:cc:84:ce:
                    67:c0:00:a1:6e:3e:37:10:3a:35:4b:ea:b5:71:9f:
                    86:e7:e1:5f:3e:9b:68:8f:2f:93:f8:f8:b3:f8:0a:
                    b0:24:e5:3a:86:70:92:b6:05:d1:2c:8c:42:14:4b:
                    4f:70:9b:99:53:3c:71:4c:01:45:df:c6:6e:54:b4:
                    61:87:0a:db:03:37:29:32:10:c6:b2:97:d3:6c:fa:
                    3b:a1:43:e7:55:1f:76:79:37:c2:40:53:61:6a:8c:
                    4c:f7:a6:8b:ca:5d:8f:3f:26:87:2b:bf:b1:eb:ae:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4D:A0:14:B3:F4:23:0F:A4:0C:7D:1C:83:8F:3B:0B:6A:AC:BF:56
            X509v3 Authority Key Identifier:
                keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:07:ef:e6:a3:89:fa:34:e9:39:ce:aa:91:e8:f6:ec:54:
         8f:7e:a0:5b:34:e5:0f:f0:5a:45:a1:3b:6c:9f:a3:bc:cd:47:
         d0:20:bd:43:5f:bf:04:61:4b:a6:85:6f:86:5a:86:ad:10:cc:
         ba:c2:8f:a4:6b:39:8d:5b:d5:dc:c8:88:b0:54:be:0b:fa:39:
         6b:4d:99:4e:00:e5:ee:81:fb:54:b4:30:3e:b0:ae:90:3e:7a:
         c0:56:1d:f5:ec:32:ae:37:0d:66:ea:eb:73:22:16:f2:ee:c9:
         c2:65:fc:80:29:33:73:cc:2b:20:ec:9b:29:03:ac:ea:f0:22:
         ac:95:d3:81:e2:6c:20:fb:76:9b:40:3e:16:5a:a1:42:6e:35:
         46:7f:cb:c7:b7:54:50:96:e0:cc:36:b7:1b:c9:1f:fa:3f:25:
         0c:5c:dd:db:b5:b5:9f:62:c7:76:07:6a:c1:a3:9b:c4:ae:69:
         aa:c4:92:d7:76:e4:41:bb:20:d7:d9:95:6d:3b:64:fc:24:9f:
         6c:53:3a:e2:a4:0b:2a:e3:45:dc:a0:0a:db:84:38:a5:d0:cf:
         05:3c:61:73:8a:8f:b7:f5:1b:ac:f8:b1:17:09:d1:8d:4a:3e:
         06:f9:45:c5:f2:66:e8:e5:bd:6f:0e:47:42:58:92:29:f5:38:
         79:de:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:42:11 2025 by rpki-client