Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
File:                     B12447B85424C8CE3169B0E67CABACBC33124F16.mft (raw, json)
Hash identifier:          2Hqe9QGHZo68CFlJtQ3to2+7nDmFkpvncrl6mvCEX94=
Subject key identifier:   5F:66:07:12:B0:C6:70:1F:5F:62:78:58:C7:16:F6:28:91:68:6C:8F
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       574D86CE0E5F5C1C6D66246D85F4DE4D155E9347
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
Manifest number:          033E
Signing time:             Mon 03 Nov 2025 18:15:43 +0000
Manifest this update:     Mon 03 Nov 2025 18:10:43 +0000
Manifest next update:     Tue 04 Nov 2025 18:49:43 +0000
Files and hashes:         1: 3137372e37322e3231362e302f32322d3332203d3e20323633393830.roa (hash: tSlMTYW5Dwz1JcHCX5B9kfXW21axfslNZ7oL1ux6nPc=)
                          2: 3136382e3232372e31362e302f32322d3332203d3e20323633393830.roa (hash: c8PhqOhbq2W68H5QhQujoZNZ6+xnv1hPgDkUJ2BOIWk=)
                          3: 323830343a323863383a3a2f33322d313238203d3e20323633393830.roa (hash: aofwg+6XX6kitzmt5hi4kDRi96zLfVXGRS2scY/SB3k=)
                          4: B12447B85424C8CE3169B0E67CABACBC33124F16.crl (hash: 5940AxMC4EWWmlOLxN3x/u7MpZhBMs1U15RlllUWzmw=)
                          5: 3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa (hash: VAYLpIvkIJzi9KLPWiYAYDGYSiEh8TDadxAy70Dt7J8=)
                          6: 3139312e33372e372e302f32342d3332203d3e20323633393830.roa (hash: rp7HgzpwxOiId2R0jyBeMYU3PVAI8ucK64Tu6bNFltU=)
                          7: 3139312e33372e362e302f32342d3332203d3e20323633393830.roa (hash: 4BY9w56MwkjQqe6hStlP2HHH3GlAaDg5iyTlf/HzEG0=)
                          8: 3139312e33372e322e302f32332d3332203d3e20323633393830.roa (hash: lF/t+OCIYXP1mtiKE6+OVP6rfTP1V4WyjtALUIlbOjk=)
                          9: 3137302e3234352e3132302e302f32322d3332203d3e20323633393830.roa (hash: zy3eKnfR9WuoVUTGr+9Vsj9ryLe6M8MwPYoL1nOTcME=)
                          10: 34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa (hash: JngCBc8kILQdnBUsXbQ3WGMafRKl6Jyxiz+/3SCw4gQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4d:86:ce:0e:5f:5c:1c:6d:66:24:6d:85:f4:de:4d:15:5e:93:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Nov  3 18:10:43 2025 GMT
            Not After : Nov  4 18:49:43 2025 GMT
        Subject: CN=5F660712B0C6701F5F627858C716F62891686C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:d4:76:0d:b5:93:01:cc:7d:1a:ee:1d:6e:
                    8c:15:bb:cf:c9:06:3d:43:05:6f:dd:96:e6:0e:93:
                    82:04:a5:52:c2:de:9a:70:2b:7f:9f:c9:09:11:f1:
                    e6:9b:8f:9d:f3:cb:5a:03:a3:8f:f1:c8:96:6b:fa:
                    54:6a:75:c5:0f:eb:5d:3e:09:4e:51:1a:fa:e8:fd:
                    a7:94:6c:18:b1:72:da:10:0b:08:d0:f6:e9:49:3d:
                    77:d4:d1:bc:73:b5:f8:07:12:38:db:20:fe:a9:7e:
                    e0:0f:db:31:6b:12:77:df:95:41:97:97:00:5d:d2:
                    2a:c0:7d:e3:52:4f:e6:95:03:a5:34:4b:92:f4:a7:
                    5a:a5:fb:29:9a:0d:29:f9:65:5c:62:7b:2a:db:8f:
                    d9:c7:ba:e6:10:df:a1:fc:1a:86:e0:2b:5d:26:79:
                    ea:15:78:43:78:f5:7f:fc:71:3d:bd:6b:10:ac:97:
                    5d:6a:00:1a:ee:1f:80:a8:8a:0c:b6:f0:a8:a7:e6:
                    37:e9:4e:6c:fb:59:79:09:22:bd:f3:8a:fe:6a:d6:
                    1f:27:2c:09:84:91:00:c1:1c:7e:32:8b:59:26:07:
                    08:4d:15:44:68:15:90:5d:7b:d6:e9:f4:d9:66:3b:
                    4f:bd:cc:fd:93:28:5f:86:d1:fc:cc:f9:19:45:57:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:66:07:12:B0:C6:70:1F:5F:62:78:58:C7:16:F6:28:91:68:6C:8F
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4a:f3:83:de:fd:ad:2d:87:9c:53:e3:90:25:90:f7:45:8e:
         eb:1a:1d:34:f4:6a:b2:7a:a9:6a:39:a0:85:32:10:a5:4e:83:
         fb:b8:8a:62:dc:da:0f:65:3f:67:08:67:3f:2d:b6:96:31:83:
         ad:bc:d4:01:9d:87:83:4b:3d:9c:ca:c3:19:68:90:54:65:5a:
         ca:bd:47:e5:9e:04:21:35:a7:09:09:d9:3b:fb:3e:48:0e:38:
         41:32:62:4a:76:78:40:39:09:87:89:2e:c9:2d:cd:d9:b4:dc:
         2e:c8:5b:76:5b:48:41:60:d2:d3:9c:12:6c:9d:ca:8a:c3:9f:
         22:4d:d2:ba:d1:fb:1f:c8:d7:0a:39:c0:21:60:9e:bd:3f:09:
         73:12:4b:08:dc:f0:4c:70:96:b4:78:dc:7b:1f:88:cc:f2:1f:
         b1:54:a2:88:3d:f4:83:13:72:f2:74:78:69:cd:23:bc:9d:7b:
         ce:af:54:b0:84:08:bc:fe:41:2a:b1:73:f3:d2:9e:6c:31:b0:
         13:04:dd:60:eb:80:81:31:c2:ed:af:cc:19:5f:23:4d:d1:cf:
         64:c1:84:6b:5e:92:6f:5b:a7:34:b4:12:d9:25:0f:9d:91:b5:
         92:c5:61:4f:8c:79:c9:fd:2b:a2:b5:1f:7b:1b:f9:11:f9:21:
         6b:17:5d:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV02Gzg5fXBxtZiRthfTeTRVek0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyNDQ3Qjg1NDI0QzhDRTMxNjlCMEU2N0NBQkFDQkMz
MzEyNEYxNjAeFw0yNTExMDMxODEwNDNaFw0yNTExMDQxODQ5NDNaMDMxMTAvBgNV
BAMTKDVGNjYwNzEyQjBDNjcwMUY1RjYyNzg1OEM3MTZGNjI4OTE2ODZDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufdR2DbWTAcx9Gu4dbowVu8/J
Bj1DBW/dluYOk4IEpVLC3ppwK3+fyQkR8eabj53zy1oDo4/xyJZr+lRqdcUP610+
CU5RGvro/aeUbBixctoQCwjQ9ulJPXfU0bxztfgHEjjbIP6pfuAP2zFrEnfflUGX
lwBd0irAfeNST+aVA6U0S5L0p1ql+ymaDSn5ZVxieyrbj9nHuuYQ36H8GobgK10m
eeoVeEN49X/8cT29axCsl11qABruH4Coigy28Kin5jfpTmz7WXkJIr3ziv5q1h8n
LAmEkQDBHH4yi1kmBwhNFURoFZBde9bp9NlmO0+9zP2TKF+G0fzM+RlFV3WpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUX2YHErDGcB9fYnhYxxb2KJFobI8wHwYDVR0j
BBgwFoAUsSRHuFQkyM4xabDmfKusvDMSTxYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVXR2VNVWdla0hKZDg3M1pnSGRjSjk5c1dEbllRelZtSnlVck5QUHRE
OVMvMC9CMTI0NDdCODU0MjRDOENFMzE2OUIwRTY3Q0FCQUNCQzMzMTI0RjE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMjQ0N0I4NTQyNEM4Q0Uz
MTY5QjBFNjdDQUJBQ0JDMzMxMjRGMTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjVXR2VNVWdla0hKZDg3M1pnSGRjSjk5c1dEbllRelZtSnlVck5QUHREOVMvMC9C
MTI0NDdCODU0MjRDOENFMzE2OUIwRTY3Q0FCQUNCQzMzMTI0RjE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq0rzg979rS2HnFPjkCWQ90WO6xodNPRqsnqpajmghTIQpU6D+7iKYtzaD2U/
ZwhnPy22ljGDrbzUAZ2Hg0s9nMrDGWiQVGVayr1H5Z4EITWnCQnZO/s+SA44QTJi
SnZ4QDkJh4kuyS3N2bTcLshbdltIQWDS05wSbJ3KisOfIk3SutH7H8jXCjnAIWCe
vT8JcxJLCNzwTHCWtHjcex+IzPIfsVSiiD30gxNy8nR4ac0jvJ17zq9UsIQIvP5B
KrFz89KebDGwEwTdYOuAgTHC7a/MGV8jTdHPZMGEa16Sb1unNLQS2SUPnZG1ksVh
T4x5yf0rorUfexv5Efkhaxdd1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 00:25:53 2025 by rpki-client