Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
File:                     3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft (raw, json)
Hash identifier:          Isst65e29HUfXgpNKsqJRdUPyJp8kJvq6tj4FMPjFXo=
Subject key identifier:   BA:B7:68:AF:FC:77:BF:99:20:6F:05:DF:4A:3C:2E:BA:4A:E7:CC:3C
Authority key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE
Certificate issuer:       /CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
Certificate serial:       3AD20E175A753274376011FEAE715A6C4FA1187C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
Manifest number:          0305
Signing time:             Mon 03 Nov 2025 13:18:34 +0000
Manifest this update:     Mon 03 Nov 2025 13:13:34 +0000
Manifest next update:     Tue 04 Nov 2025 15:17:34 +0000
Files and hashes:         1: 3136382e3230352e37362e302f32322d3234203d3e20323635333535.roa (hash: 8d7fb9ij+PooSWUf38BeSaVdGp1TOm0K0uvvCP+F8NI=)
                          2: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl (hash: c/u70Lub8FeYX1Uaupq5JWs8Y/ViPdhYH2VRExjIGcQ=)
                          3: 323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (hash: OGY/LrMrlfQKwjbab8G09HMM8TnKgSFSf9D0yjKBpNA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl
                          rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d2:0e:17:5a:75:32:74:37:60:11:fe:ae:71:5a:6c:4f:a1:18:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
        Validity
            Not Before: Nov  3 13:13:34 2025 GMT
            Not After : Nov  4 15:17:34 2025 GMT
        Subject: CN=BAB768AFFC77BF99206F05DF4A3C2EBA4AE7CC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:e8:ef:e4:6d:ef:18:94:38:07:0d:63:a9:
                    4e:19:c4:59:53:fd:6d:9b:e8:59:a6:ae:9b:c0:5b:
                    fc:04:e1:ea:4a:44:fa:86:10:52:5a:d4:9f:a4:6e:
                    6e:e2:ca:fe:7b:fc:a0:96:7e:d2:69:56:0e:96:19:
                    8f:6b:dd:59:f3:59:d4:35:ad:4a:38:9c:cc:6f:7c:
                    13:17:7d:dd:0c:6e:3e:dc:cf:7e:1f:f6:a3:6c:0f:
                    3e:c7:ca:72:6e:e9:86:3c:30:1c:50:17:4d:79:f4:
                    e1:c0:2e:a2:22:ff:d0:43:c7:28:29:9c:45:58:34:
                    b1:93:c5:81:45:69:f6:96:7a:80:7d:6f:17:20:7c:
                    d6:a8:a2:80:5a:ea:e7:54:28:70:a0:07:91:ff:5c:
                    2f:01:eb:49:66:4a:75:5f:04:98:8f:a3:39:9e:c8:
                    d8:6a:bc:3a:bb:8c:4b:a7:5b:cd:97:52:b1:01:b4:
                    30:c8:c7:87:60:b7:d5:97:7d:67:4e:e5:57:52:3f:
                    f9:2d:f8:7f:61:5e:79:01:d6:67:b1:1c:e0:32:4a:
                    67:0d:93:68:9b:19:ee:5b:72:3c:1a:8b:bb:a0:c0:
                    4a:32:bf:2a:ec:e2:15:48:d5:10:37:87:b7:d0:58:
                    e0:6a:33:be:d3:ac:a4:9e:ff:0d:bd:f0:4e:28:f1:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:68:AF:FC:77:BF:99:20:6F:05:DF:4A:3C:2E:BA:4A:E7:CC:3C
            X509v3 Authority Key Identifier:
                keyid:30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:0f:3d:be:7c:f5:b9:f7:67:26:3f:10:f5:f2:5e:f8:ca:
         85:a1:2c:5e:ac:26:6f:91:c6:d7:94:39:58:c9:d6:11:e2:3e:
         7f:7a:09:af:38:d6:b4:0e:e1:3b:05:d5:00:0b:bf:d6:d8:d2:
         e4:e9:ff:0a:26:7b:94:25:06:f3:10:27:5a:bf:15:be:a7:6a:
         36:59:0d:3f:34:83:fb:93:58:b5:2f:9f:36:4e:16:2d:4f:e7:
         0e:e9:e6:d3:f6:f0:4e:cd:b4:16:d2:16:8a:ae:24:2c:90:40:
         31:87:1b:d8:c8:e5:fb:c1:d6:ee:90:12:91:6b:a2:98:f2:b6:
         54:1c:27:14:68:81:87:df:c0:3c:36:7e:ed:81:47:f8:26:51:
         4b:24:44:8c:a1:25:a5:a3:c9:59:08:db:32:60:6f:c3:28:af:
         12:33:a6:08:9b:24:90:d3:47:46:3f:aa:fe:ed:06:ce:eb:5c:
         15:e2:6d:a1:75:70:5b:35:65:5c:dc:3f:01:1d:40:11:fd:6a:
         03:cb:1a:9f:6b:3a:c8:96:6f:ae:6e:27:e4:56:03:36:ba:63:
         33:f1:7e:61:ed:94:dd:06:54:0b:22:47:4a:5e:bb:56:e7:1e:
         04:f4:dc:58:0c:48:fd:82:74:bf:3c:51:50:39:e3:b5:15:d0:
         fd:af:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:39:19 2025 by rpki-client