Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
File:                     7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft (raw, json)
Hash identifier:          MVnys2BVxvhWBsZCuTXJEWiYeb/rOGqJZnqp1iZP+Ak=
Subject key identifier:   3B:A8:69:5B:10:5A:7D:A5:05:09:94:DA:33:A0:BC:56:3A:B9:34:71
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       41201D9D67D1E696CB142390D0DF5ACE80714814
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
Manifest number:          4F
Signing time:             Sun 02 Nov 2025 22:28:29 +0000
Manifest this update:     Sun 02 Nov 2025 22:23:29 +0000
Manifest next update:     Tue 04 Nov 2025 01:42:29 +0000
Files and hashes:         1: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (hash: Kmsr+UXvwv+S9FvagZVWzDR/evsnsCJePVvlO07EQgE=)
                          2: 34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (hash: dZH8ZxBMw0oZDUrL/jw2vuUaVyuoflPFTd7ol71clGw=)
                          3: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl (hash: m7pwRP81tsfwgwaQ7k/ro9rGi/0EwvqlcCaB6yV/R8Y=)
                          4: 34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (hash: vUJF9gs5xQMqDUw81LvKpvr9X6AUaWZsW9NYWQWl1Go=)
                          5: 34352e3233342e35302e302f32332d3233203d3e20323637333533.roa (hash: /vSap4te8guh+qAqqLmYZImHb8QA8jgej13kbYH5e3Y=)
                          6: 34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (hash: N+XUMWcII3BAqNP4TTCzSCeQwh2jC9OmWVd+xl4z8DY=)
                          7: 34352e3233342e34382e302f32342d3234203d3e20323637333533.roa (hash: LyeM55h+f+yfzNTGWUrTsVrUxrvRTN+/Fl74HTUvAlM=)
                          8: 34352e3233342e34382e302f32322d3232203d3e20323637333533.roa (hash: efCaDnSNHaCNsUZJZ2BRsQIelnrquDotvL3pslOlzNQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 01:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:20:1d:9d:67:d1:e6:96:cb:14:23:90:d0:df:5a:ce:80:71:48:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Nov  2 22:23:29 2025 GMT
            Not After : Nov  4 01:42:29 2025 GMT
        Subject: CN=3BA8695B105A7DA5050994DA33A0BC563AB93471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:98:03:9a:bf:9e:1f:f4:10:54:ff:d8:ff:
                    bf:38:23:76:b9:74:be:d5:5a:44:f1:a1:98:0b:a9:
                    8b:46:89:93:db:22:cf:85:af:ed:36:1b:32:1d:55:
                    77:b4:5a:fa:44:9a:ad:72:09:7a:2a:6f:20:2c:68:
                    cc:e8:94:03:a8:54:6f:4c:53:40:fb:cc:7f:c9:7d:
                    57:30:47:de:46:d6:5b:a3:4b:fc:4a:8f:41:f3:3c:
                    ef:6e:44:3d:a2:37:3a:16:eb:f4:ee:bf:ef:39:68:
                    86:ce:7b:04:fc:44:d2:e7:6e:cc:71:1a:56:55:45:
                    35:d7:32:b7:91:4c:25:af:86:1b:ea:ee:ec:3b:b5:
                    35:7c:c0:ac:66:ee:bb:0e:c6:36:0e:ad:50:57:5e:
                    63:92:cf:60:d8:1a:c7:38:47:b6:bf:b5:c9:8a:10:
                    24:ad:29:69:66:23:77:e0:5d:f2:2e:d9:79:f4:14:
                    cb:67:cb:3c:a4:c3:2e:08:83:5e:9a:07:98:34:95:
                    c9:56:b0:de:a2:14:0e:2d:32:bc:31:1b:72:ba:4e:
                    86:15:94:b6:45:d2:74:3a:c2:91:6d:ac:82:c7:d7:
                    ba:f5:af:ef:87:11:cc:d3:93:11:bd:1b:54:1b:3b:
                    ff:7f:51:7c:f0:ce:64:66:13:19:87:50:b7:7d:c3:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A8:69:5B:10:5A:7D:A5:05:09:94:DA:33:A0:BC:56:3A:B9:34:71
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:33:a7:fe:60:59:4c:16:3d:09:f4:d9:a5:32:db:2b:47:0c:
         db:8f:1c:50:4e:ba:b5:24:11:8f:c8:b8:fc:47:d6:09:a7:26:
         fd:1b:92:04:63:aa:1f:c4:78:d1:6c:b0:5c:97:04:9f:ff:f4:
         7c:8d:14:8e:51:b7:b2:7e:65:fa:bd:ae:f7:91:35:15:2f:9b:
         3c:3c:12:12:5a:53:2d:51:ba:5f:22:af:d6:bb:c0:49:ec:7a:
         82:57:7c:82:04:6f:1d:44:75:bd:ec:2d:8a:7b:76:d5:27:3c:
         f0:24:07:5c:06:b1:45:19:d0:06:f0:81:5a:5e:76:b2:af:dc:
         27:7a:d0:23:06:f1:3f:48:81:ad:e9:65:7a:a1:08:2f:c6:1b:
         76:10:ee:dd:f6:0c:fc:4d:6a:b2:da:9f:b5:79:55:51:d6:15:
         eb:fb:ea:a5:26:44:26:8c:05:5b:dd:a6:48:5b:10:b7:38:a9:
         15:f6:96:44:75:65:ae:ca:8b:01:5e:ac:9a:02:fc:25:f1:10:
         2c:e9:88:8c:51:fc:fc:9f:8b:60:35:67:b7:a9:cd:75:19:63:
         8d:6a:c9:b8:22:03:2a:17:ea:21:d1:55:0d:da:be:84:60:de:
         bd:04:18:af:92:48:8e:45:be:80:32:f6:e2:3b:53:8f:b3:18:
         ab:7b:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:39 2025 by rpki-client