Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
File:                     11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft (raw, json)
Hash identifier:          wMFKaiF1XC+AxinA1dUbBQAP/TNw2ifhAJdPfCVs2M4=
Subject key identifier:   7E:D9:5E:D7:52:D7:09:EA:B6:C5:74:21:EA:D1:E0:2E:63:CE:68:75
Authority key identifier: 11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05
Certificate issuer:       /CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805
Certificate serial:       1C6C6731034C9BCE7D161C3A0E096C84B8EE7F65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
Manifest number:          9F
Signing time:             Mon 03 Nov 2025 10:38:43 +0000
Manifest this update:     Mon 03 Nov 2025 10:33:43 +0000
Manifest next update:     Tue 04 Nov 2025 14:10:43 +0000
Files and hashes:         1: 323830343a333732633a343030303a3a2f33342d3334203d3e20323636333934.roa (hash: N4lEki/B6/0uCIsUsg+P01x6hC/9w7hDRDTzdQZJvS8=)
                          2: 323830343a333732633a383030303a3a2f33342d3334203d3e20323636333934.roa (hash: DO7t8qqnPOMb081Z5pUnHwondjUbpyk3mXzqeLj7v5w=)
                          3: 11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl (hash: TGcWh6xapbeHo27t9fCZ7faWfgIlvslLU98FtF1o86Q=)
                          4: 323830343a333732633a3a2f33342d3334203d3e20323636333934.roa (hash: AWcAIcos7JvGJsufxg+H8d0EcS463i6i1K5EMLdZf9c=)
                          5: 323830343a333732633a3a2f33322d3332203d3e20323636333934.roa (hash: MbgmA9xW/wF1uf0e0wQjZ59+KPdVYa3YMQSGd77cPOY=)
                          6: 323830343a333732633a633030303a3a2f33342d3334203d3e20323636333934.roa (hash: Ix8eRWQHyNaG97EzmFL826uIb8NIHHIOcqYAMs0HL9w=)
                          7: 3137302e38312e37362e302f32322d3234203d3e20323636333934.roa (hash: tVRi5JyERJD8r9u9BE1kNJsoDmpAZynHpxJlnRLlL+4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl
                          rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6c:67:31:03:4c:9b:ce:7d:16:1c:3a:0e:09:6c:84:b8:ee:7f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805
        Validity
            Not Before: Nov  3 10:33:43 2025 GMT
            Not After : Nov  4 14:10:43 2025 GMT
        Subject: CN=7ED95ED752D709EAB6C57421EAD1E02E63CE6875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:6d:52:c3:04:37:28:26:f7:47:6f:68:21:
                    89:78:50:28:fd:d9:a4:26:db:ac:27:4d:48:e9:d5:
                    1d:61:39:44:66:8a:70:81:31:aa:a0:f1:4c:5d:d0:
                    42:69:8a:56:01:a7:6f:b9:33:66:fb:96:d5:a4:7c:
                    3e:9b:1c:e0:32:e2:ad:27:4a:5c:44:2e:46:ac:12:
                    ce:5c:e0:17:50:f0:cf:ec:b4:f1:43:8d:df:6f:2c:
                    b5:97:a3:36:1c:f8:b1:84:c3:de:76:4f:06:9a:cc:
                    be:6a:e5:42:96:71:df:76:d8:5a:f6:c1:87:65:5d:
                    4d:34:95:17:c7:0c:4a:0c:b4:2c:bb:24:ca:d2:fd:
                    93:12:c8:08:12:ac:08:cb:4f:c8:db:b0:25:7e:66:
                    76:74:b8:52:59:48:8a:4a:56:a4:59:a5:76:89:36:
                    bf:0a:4f:d2:42:4a:1b:f1:3f:7a:f4:96:b1:88:aa:
                    f1:f4:79:7f:a9:bc:c8:83:e2:bb:01:29:ea:78:d1:
                    a5:c9:d0:58:54:4d:0b:d3:a6:2b:9f:1e:d7:52:2e:
                    2e:fe:f9:65:c5:57:c8:1c:f7:bd:81:35:bd:bc:7f:
                    b4:74:75:aa:1c:9a:f0:c0:ae:0a:d3:9c:64:61:95:
                    c3:28:67:19:50:c2:78:0e:3b:b5:e6:a0:32:53:18:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D9:5E:D7:52:D7:09:EA:B6:C5:74:21:EA:D1:E0:2E:63:CE:68:75
            X509v3 Authority Key Identifier:
                keyid:11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f4:0e:86:95:e0:fc:d7:c3:e3:91:7a:7e:51:29:63:54:7a:
         55:40:7c:ce:b0:9e:19:bd:80:bc:f9:50:b4:d8:78:0f:f6:71:
         1e:49:30:d8:6c:53:ff:ea:53:a1:c2:89:16:f1:09:d1:15:b7:
         f9:3b:2c:94:dc:a5:d0:4e:8f:50:2c:7d:2e:31:3e:68:ee:0a:
         76:fa:a6:bb:bb:d6:35:42:dd:42:a9:c1:0e:87:29:cc:d8:2e:
         0d:ae:35:bd:62:85:ee:48:f4:ee:7c:aa:04:9d:02:f9:57:92:
         84:2d:4b:21:74:96:0f:1f:3a:a4:4d:e6:94:e1:db:e9:06:52:
         ce:b5:7e:8e:bc:4c:94:7b:1e:02:8e:dd:19:d1:35:25:28:54:
         56:6c:c5:d8:7b:96:d6:df:5f:d2:e1:07:28:b4:61:78:47:82:
         dc:e2:6f:78:e3:13:d2:c5:c6:3b:3e:a8:0e:5a:95:b0:d6:e4:
         33:b4:3a:59:eb:41:eb:c7:4e:77:4d:cf:dd:7d:5b:85:f6:4d:
         8b:78:be:ab:96:7e:62:97:6f:76:88:b2:4a:32:68:12:f3:3e:
         37:1f:7a:64:ea:02:25:53:76:21:07:58:fd:0b:8d:0b:99:fd:
         2e:34:9d:c6:3e:88:7c:01:f8:35:a6:de:bc:75:da:c0:31:8a:
         3a:e9:96:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHGxnMQNMm859Fhw6DglshLjuf2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFCMUU4RTEwMDcwNDdGNUY1MDE5RTZFNDhFQUM5Q0RG
REU5QTgwNTAeFw0yNTExMDMxMDMzNDNaFw0yNTExMDQxNDEwNDNaMDMxMTAvBgNV
BAMTKDdFRDk1RUQ3NTJENzA5RUFCNkM1NzQyMUVBRDFFMDJFNjNDRTY4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClam1SwwQ3KCb3R29oIYl4UCj9
2aQm26wnTUjp1R1hOURminCBMaqg8Uxd0EJpilYBp2+5M2b7ltWkfD6bHOAy4q0n
SlxELkasEs5c4BdQ8M/stPFDjd9vLLWXozYc+LGEw952TwaazL5q5UKWcd922Fr2
wYdlXU00lRfHDEoMtCy7JMrS/ZMSyAgSrAjLT8jbsCV+ZnZ0uFJZSIpKVqRZpXaJ
Nr8KT9JCShvxP3r0lrGIqvH0eX+pvMiD4rsBKep40aXJ0FhUTQvTpiufHtdSLi7+
+WXFV8gc972BNb28f7R0daocmvDArgrTnGRhlcMoZxlQwngOO7XmoDJTGO/HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUftle11LXCeq2xXQh6tHgLmPOaHUwHwYDVR0j
BBgwFoAUEbHo4QBwR/X1AZ5uSOrJzf3pqAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNM
QWYvMC8xMUIxRThFMTAwNzA0N0Y1RjUwMTlFNkU0OEVBQzlDREZERTlBODA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQjFFOEUxMDA3MDQ3RjVG
NTAxOUU2RTQ4RUFDOUNERkRFOUE4MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNMQWYvMC8x
MUIxRThFMTAwNzA0N0Y1RjUwMTlFNkU0OEVBQzlDREZERTlBODA1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEfQOhpXg/NfD45F6flEpY1R6VUB8zrCeGb2AvPlQtNh4D/ZxHkkw2GxT/+pT
ocKJFvEJ0RW3+TsslNyl0E6PUCx9LjE+aO4Kdvqmu7vWNULdQqnBDocpzNguDa41
vWKF7kj07nyqBJ0C+VeShC1LIXSWDx86pE3mlOHb6QZSzrV+jrxMlHseAo7dGdE1
JShUVmzF2HuW1t9f0uEHKLRheEeC3OJveOMT0sXGOz6oDlqVsNbkM7Q6WetB68dO
d03P3X1bhfZNi3i+q5Z+YpdvdoiySjJoEvM+Nx96ZOoCJVN2IQdY/QuNC5n9LjSd
xj6IfAH4NabevHXawDGKOumWkg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:30 2025 by rpki-client