Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft
File:                     BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft (raw, json)
Hash identifier:          Tyy5vSetO56CQK+EnYTWMKSajpntC7zcVnVXeuXquAo=
Subject key identifier:   B1:45:E9:03:F6:C8:87:8D:83:20:66:E4:1B:95:56:90:D4:2A:7B:2D
Authority key identifier: BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9
Certificate issuer:       /CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
Certificate serial:       4346AD5D1057019BBDE0D348DF3DC5BCF8C7A369
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft
Manifest number:          0A
Signing time:             Sun 19 Oct 2025 20:17:34 +0000
Manifest this update:     Sun 19 Oct 2025 20:12:34 +0000
Manifest next update:     Mon 20 Oct 2025 23:13:34 +0000
Files and hashes:         1: 323830343a363566303a3a2f33322d3334203d3e20323639353234.roa (hash: fFISeSrSOW9En3SDOUBWDRGfW5aQXnV4N8EKYIdaFMY=)
                          2: 34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (hash: howQKS0OzpLigGMgEr0ZRFoC1I2DAgEs2WKJqF5Als4=)
                          3: BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl (hash: biGC7byOHVCOwETmkQYY0kv8SAILCiAEANjjT1R4aSQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:46:ad:5d:10:57:01:9b:bd:e0:d3:48:df:3d:c5:bc:f8:c7:a3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
        Validity
            Not Before: Oct 19 20:12:34 2025 GMT
            Not After : Oct 20 23:13:34 2025 GMT
        Subject: CN=B145E903F6C8878D832066E41B955690D42A7B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:62:0d:68:13:2e:ef:a7:d4:fe:89:52:d8:
                    0a:ef:e8:15:dd:f3:4a:2d:b9:15:a7:7f:85:44:0d:
                    de:0e:f0:7e:63:d6:5b:36:14:ec:94:a9:36:56:75:
                    7b:a8:35:f8:f4:58:61:6a:4d:a0:5d:e9:33:ed:1b:
                    cd:13:04:b5:4f:d4:5a:9b:c9:98:1b:85:72:20:ea:
                    46:02:ef:15:d8:b6:52:3d:b2:d0:04:a2:92:86:55:
                    c0:e5:f5:8c:5b:62:48:1e:1e:91:95:af:f8:e4:95:
                    8b:b1:b8:b2:4f:54:d2:ff:1a:92:07:0c:ca:95:87:
                    ce:d6:99:9b:15:28:0b:d4:5e:b8:35:98:c8:a9:60:
                    53:ed:9b:9b:74:b0:49:4f:f4:e3:bc:ca:82:3d:45:
                    5b:b5:e4:85:ef:b4:8e:96:f5:cf:f7:90:e8:4d:b6:
                    70:08:be:64:7f:5e:ac:90:e6:fb:36:f9:92:88:a0:
                    18:32:5a:85:28:b6:ae:71:57:0f:a1:46:ee:bd:e7:
                    b8:34:f7:2b:e9:61:ad:0d:94:7e:40:aa:e6:14:9e:
                    4a:2b:59:0f:4b:fa:bc:f2:aa:cb:18:1d:c2:ce:c6:
                    5f:c2:b8:87:bc:8f:33:da:fa:1c:4f:b4:a2:fe:59:
                    c3:14:f8:b4:a0:b3:8e:f0:ba:78:2e:41:07:49:ee:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:45:E9:03:F6:C8:87:8D:83:20:66:E4:1B:95:56:90:D4:2A:7B:2D
            X509v3 Authority Key Identifier:
                keyid:BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:20:73:56:51:fb:f6:47:ad:aa:52:04:cd:06:bb:8d:77:c9:
         2d:0b:3c:92:bc:40:cf:82:49:e9:f6:ec:cd:98:86:ca:ec:e3:
         04:ae:f2:f5:5a:95:24:9a:05:79:43:d9:64:2c:0c:a0:12:42:
         b1:7d:25:f9:b5:1c:bb:f1:a8:f3:7a:41:c4:b2:fb:76:fb:e9:
         ab:30:ba:24:36:74:28:c3:c7:a1:91:f9:48:69:1a:04:2f:38:
         69:04:eb:91:85:c5:6b:97:1a:55:55:7e:29:1c:72:2e:23:ec:
         03:5c:dc:09:b7:bf:18:9c:a6:16:b1:86:25:3c:5b:e9:fa:b0:
         4b:38:31:ef:cb:3d:5c:c7:67:aa:48:ea:ac:41:07:79:31:e2:
         41:0c:9c:77:fe:c0:e3:02:1d:09:40:ac:33:14:f9:5e:bb:70:
         77:f5:3c:bc:36:17:4a:40:60:cb:a3:ab:43:87:82:a3:2c:e6:
         9e:da:0a:2a:44:4d:66:58:06:f2:8b:46:86:c7:ea:65:e7:f3:
         e3:51:fb:db:86:f2:3b:9c:c4:a3:b5:19:ae:b6:3b:f2:a9:ea:
         59:fb:f3:5f:3e:c8:b3:7b:7f:76:1f:5f:64:c5:eb:95:fc:94:
         84:df:a0:1b:0c:97:bc:18:b6:cf:b7:3b:cf:8c:1a:95:f8:e6:
         80:13:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:28:41 2025 by rpki-client