Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft
File:                     B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft (raw, json)
Hash identifier:          iJ+UKR6/PhNEN7IqPNplKUFvSa5ETAyViXBqvH2EmpQ=
Subject key identifier:   63:B3:29:5D:07:25:A5:41:C9:AB:A8:98:70:75:47:09:C7:08:33:27
Authority key identifier: B5:DD:40:20:A5:28:87:5D:48:DA:F9:7E:54:B1:4D:A3:17:7C:B1:D0
Certificate issuer:       /CN=B5DD4020A528875D48DAF97E54B14DA3177CB1D0
Certificate serial:       6CBCDCFB514BE245C84E24F605B046DB0DEE137F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft
Manifest number:          67
Signing time:             Mon 03 Nov 2025 08:56:57 +0000
Manifest this update:     Mon 03 Nov 2025 08:51:57 +0000
Manifest next update:     Tue 04 Nov 2025 10:01:57 +0000
Files and hashes:         1: 323830343a393534383a3a2f33322d3332203d3e20323734353131.roa (hash: jTmV754AonkwigYC9b9TgO2xK1qg5mJnkbOgTzsvf8c=)
                          2: B5DD4020A528875D48DAF97E54B14DA3177CB1D0.crl (hash: CGZ1tqj18pNu5jVGVG+ria/7eLoIPoffg99yE9+5PC8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.crl
                          rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bc:dc:fb:51:4b:e2:45:c8:4e:24:f6:05:b0:46:db:0d:ee:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD4020A528875D48DAF97E54B14DA3177CB1D0
        Validity
            Not Before: Nov  3 08:51:57 2025 GMT
            Not After : Nov  4 10:01:57 2025 GMT
        Subject: CN=63B3295D0725A541C9ABA89870754709C7083327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:4f:e2:8f:9c:76:77:a8:03:a6:1d:b7:b5:
                    9a:c7:cd:2f:91:eb:89:1b:d6:3b:52:3f:48:16:af:
                    d4:16:55:98:0c:19:68:57:54:f2:27:c0:87:0d:91:
                    58:c3:4c:c3:6f:64:58:55:4c:1c:e5:07:3c:83:15:
                    64:d5:78:71:2a:33:be:60:60:a6:c7:b3:24:d4:4e:
                    fb:ef:02:5f:c5:85:1b:fe:e5:ff:dd:86:c9:5d:a7:
                    70:be:43:90:5b:81:50:e8:cc:dc:6a:f3:0a:c7:c3:
                    d9:12:63:e5:b6:28:48:22:66:2f:3e:05:f1:73:44:
                    5a:f9:4f:9c:7e:00:d1:42:dc:03:d1:f3:45:d9:00:
                    bc:00:c4:f0:f3:4c:ce:6c:2b:4b:50:f6:aa:d3:08:
                    53:4b:09:a0:06:d7:dd:f4:8e:82:78:b1:f3:cb:06:
                    af:a3:69:1a:d6:8f:fb:ef:ad:d9:10:69:27:7a:aa:
                    08:17:34:34:cc:35:25:dd:13:da:b8:21:55:fb:7e:
                    b6:05:6a:16:e9:22:1f:54:1c:8f:91:f6:39:e7:cb:
                    7c:79:94:ec:7c:7a:2d:c0:7f:cc:a4:5f:cd:1e:04:
                    5a:4e:c8:75:79:84:ff:6b:68:5c:41:89:a2:cb:b7:
                    e4:5c:a3:31:2f:d2:93:8a:a6:21:2f:54:87:e2:cc:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:29:5D:07:25:A5:41:C9:AB:A8:98:70:75:47:09:C7:08:33:27
            X509v3 Authority Key Identifier:
                keyid:B5:DD:40:20:A5:28:87:5D:48:DA:F9:7E:54:B1:4D:A3:17:7C:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:59:81:a7:28:72:ff:0b:d4:8d:c7:94:ee:3d:7f:ad:7d:
         60:f7:41:89:bf:dc:7a:69:41:0f:bc:18:f8:2e:3b:96:f0:be:
         4b:79:d1:f5:92:d8:50:bc:0c:35:20:74:93:d3:45:b3:30:aa:
         b5:85:2f:81:7f:01:ab:b5:69:17:ee:e0:ee:38:7b:8e:5d:ff:
         c2:95:5a:8a:6c:cb:ed:8a:59:c8:dc:e0:8c:f5:83:0d:1c:8e:
         0c:0b:b8:25:56:13:b4:98:9c:dd:60:5d:c6:a1:2e:6c:c7:61:
         a8:ed:92:0e:84:c9:c2:c6:4a:0d:79:1f:7a:74:27:f5:7e:be:
         c8:51:e3:8d:df:b3:02:22:a5:9a:f0:f8:1d:a0:6b:11:4e:dc:
         94:db:e4:e8:56:64:70:54:4d:e0:62:22:8f:6c:d7:82:3d:70:
         e7:15:4b:4c:0e:e5:07:7d:c7:f3:81:4e:43:68:0a:0b:50:f3:
         55:5d:9d:01:57:c4:53:35:d5:91:58:53:b7:11:a0:51:c5:d2:
         a7:68:c7:80:87:93:5b:5c:23:2d:42:04:68:90:49:4c:83:2d:
         de:f0:d5:24:ff:5c:f3:6e:b8:4f:eb:c7:2c:ff:fd:56:c7:fa:
         60:1a:c7:2b:51:d6:f2:23:99:b7:d9:41:ba:12:b2:76:0b:69:
         e3:7f:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:28:25 2025 by rpki-client