Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
File:                     1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft (raw, json)
Hash identifier:          EKQuhuua0ZHKwc7qquuQs+S6KiCtJfDXVyuVulZchyU=
Subject key identifier:   58:02:9A:FD:AB:5F:E3:E9:D2:63:CC:B3:C8:B4:4B:D2:5B:02:0C:37
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       1AD481A2EBBBDD46FBDDB14FAF394833DC6AD8E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
Manifest number:          0109
Signing time:             Sun 02 Nov 2025 20:36:32 +0000
Manifest this update:     Sun 02 Nov 2025 20:31:32 +0000
Manifest next update:     Mon 03 Nov 2025 20:37:32 +0000
Files and hashes:         1: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl (hash: smJO9iAacFmVNY2kSC/IKr1iY0wVEf7145Qkc+YjZFw=)
                          2: 3134332e302e3134322e302f32342d3234203d3e20323634303039.roa (hash: L29rQu6A2D/GRscHMRxgKff1Mj4otpbS7jgvNTfbqrM=)
                          3: 3134332e302e3134332e302f32342d3234203d3e20323634303039.roa (hash: mEuK5L8cqAFP2ipXml/u6wiIus3ycpeZ8oNcV0ag2qo=)
                          4: 3134332e302e3134312e302f32342d3234203d3e20323634303039.roa (hash: VeR/O+9Gf+ayE3m4Vl1nJkDnw89kGLb98SbW5qArQ/c=)
                          5: 323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (hash: ZirqTWq7d7/lwQgHJx1DD+FiioGP1qk31ScfgX+AtN4=)
                          6: 3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa (hash: hVKZtPo2uOTvKf5GK1oLTTBexTI84WAT9zQJ3UV58/E=)
                          7: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (hash: 1opYPtLVmJbgysJRSAW69AB3hcLNgtJAvVFzTTA/ISk=)
                          8: 3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (hash: afJLR8PlUzFskdzVHFBs/+9++T5DKH+kQFl0KIelOiE=)
                          9: 3134332e302e3134302e302f32342d3234203d3e20323634303039.roa (hash: ADREfT9MheCE1Wjv94Tw9CnUHlS1l0PQ8XXqstyqAiQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 20:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d4:81:a2:eb:bb:dd:46:fb:dd:b1:4f:af:39:48:33:dc:6a:d8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Nov  2 20:31:32 2025 GMT
            Not After : Nov  3 20:37:32 2025 GMT
        Subject: CN=58029AFDAB5FE3E9D263CCB3C8B44BD25B020C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:77:a0:ca:39:4b:60:71:9f:9d:73:ab:58:
                    28:31:a4:bd:12:32:95:19:31:9d:7a:91:67:61:41:
                    11:98:44:e9:ff:6c:9a:f3:f8:ae:16:be:d8:12:b5:
                    c7:3f:76:fd:ed:d3:78:c3:96:4a:b3:bd:37:c7:72:
                    e0:4e:a5:90:09:17:88:ec:4d:12:bf:4a:41:9b:b9:
                    c6:23:df:78:e1:22:18:52:d4:97:9a:74:0f:04:0d:
                    d6:3c:d2:60:01:08:8f:c8:ee:44:84:af:f7:ef:96:
                    01:f3:17:b8:07:57:21:cb:88:d1:e5:18:e7:53:db:
                    2f:55:bd:2c:b4:7a:e8:94:41:df:4e:39:3a:47:f4:
                    4b:1c:b9:3a:b6:7c:7f:a4:29:73:e3:20:db:4a:83:
                    f9:5b:04:a4:7b:43:68:b3:a7:bd:86:18:86:5f:cd:
                    27:8f:ee:4d:ca:3f:08:aa:b4:21:54:b9:5d:b4:86:
                    cc:ec:dc:01:9b:14:af:4a:af:4a:90:13:ec:53:48:
                    74:be:66:d1:bf:31:0d:db:ef:e6:2d:62:19:77:14:
                    4b:d8:bd:9a:52:14:f8:9d:72:d3:d0:97:7e:bb:4d:
                    59:3b:50:75:2d:2f:16:bc:fd:42:9b:6d:9e:2f:ff:
                    33:07:93:fe:9b:ee:be:df:ed:97:96:8a:d7:18:ab:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:02:9A:FD:AB:5F:E3:E9:D2:63:CC:B3:C8:B4:4B:D2:5B:02:0C:37
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:af:1c:8a:e3:ad:a0:fe:ca:1e:a3:17:65:7c:e6:8a:5d:a1:
         d0:96:04:5f:46:b2:16:1e:8d:8b:08:c5:84:cc:26:de:d1:a5:
         a2:31:a0:b9:72:a1:69:8b:09:9f:a0:82:cf:ef:58:00:11:99:
         da:96:59:d7:0f:5c:12:65:7b:58:76:83:11:1e:d3:b6:a1:54:
         20:11:0b:56:24:bc:08:bd:b2:39:6a:4e:af:26:01:db:2d:c9:
         99:3c:ae:7f:27:23:36:f8:e6:1f:cc:a0:5a:29:73:75:4a:d2:
         11:44:82:1d:c3:64:41:8c:5e:b5:16:a7:ad:89:92:30:7b:92:
         39:17:1f:ab:f0:2f:d6:80:6b:8b:84:af:e5:39:c4:70:e3:c7:
         b2:93:41:d7:5a:43:b2:4f:8f:0d:99:24:69:63:13:2f:1b:78:
         2a:6f:b4:ec:de:dd:d2:74:4f:ea:9b:8d:98:0b:31:0a:b5:47:
         b7:27:15:63:e6:7b:ff:9e:24:48:21:40:b8:79:3b:e3:24:22:
         0f:08:9f:2d:ff:0c:9a:c0:00:a2:5a:d1:16:91:06:a3:49:1a:
         d2:da:98:ea:31:49:2d:f0:28:76:32:08:1d:87:3a:d2:6b:fd:
         ef:5b:8f:0c:b2:36:4d:a4:0a:eb:09:0c:bf:49:33:4f:65:1b:
         fd:d4:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:29:09 2025 by rpki-client