Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File:                     A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier:          7Qteyl/tf6j2V5SU34EmvYlyAoKVbRSK6NCnUEXuMWY=
Subject key identifier:   22:F1:C8:E4:CC:1D:A2:4E:A6:F0:EA:E7:BA:AB:A8:37:FA:3F:6E:E0
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       0A7F4A86739DF6DB1D84891AABA869F689A84A7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number:          0301
Signing time:             Sun 02 Nov 2025 18:42:26 +0000
Manifest this update:     Sun 02 Nov 2025 18:37:26 +0000
Manifest next update:     Mon 03 Nov 2025 19:24:26 +0000
Files and hashes:         1: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: hPkw1ttlYJ42cUc0Dp0zOZqoQc0JKu0HxxZ15u/LszY=)
                          2: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: okTYDmAAhN7lSYQBEMm1zUcHODLP0+oebashm0WdGnE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 19:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7f:4a:86:73:9d:f6:db:1d:84:89:1a:ab:a8:69:f6:89:a8:4a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: Nov  2 18:37:26 2025 GMT
            Not After : Nov  3 19:24:26 2025 GMT
        Subject: CN=22F1C8E4CC1DA24EA6F0EAE7BAABA837FA3F6EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:d3:82:3b:35:18:d8:7f:a3:a7:22:37:03:
                    af:e5:0b:bd:0e:72:d2:5c:aa:e0:f3:06:65:dd:3e:
                    7a:ad:b1:10:96:ee:89:81:43:08:a5:72:7f:3b:f0:
                    2b:04:f6:a0:1e:6f:00:7f:ee:0f:a2:c6:66:34:d1:
                    9f:75:65:e7:6d:11:92:5f:21:b5:78:6b:97:83:2a:
                    f6:ad:a6:bb:25:0f:a9:ac:8b:c5:52:57:6a:dc:d1:
                    3c:4e:c2:97:2a:5f:68:76:ae:fd:10:71:a1:a9:3c:
                    9d:f8:f9:04:01:7c:28:ea:20:71:95:9c:c7:18:51:
                    ba:b6:8d:3f:ee:53:65:3a:ff:e2:28:9a:a4:df:86:
                    d5:99:7b:73:de:fb:a8:8f:e0:94:b4:1e:c5:75:14:
                    47:a8:4a:ee:5f:03:1b:20:03:9b:a8:98:27:e5:1b:
                    af:a8:4d:44:f3:c7:be:92:e7:0b:0d:c1:e6:a6:7c:
                    51:56:7b:8b:82:06:a2:45:37:88:6c:df:e1:4d:86:
                    56:4b:5c:31:66:9c:67:6e:a9:96:31:81:39:ee:c8:
                    ed:d6:11:6e:a5:16:3a:10:7d:16:1c:f0:5d:05:cb:
                    53:02:31:94:00:cc:1d:42:38:1e:4d:f7:61:4e:52:
                    3e:5f:41:a0:7f:7d:65:97:65:e9:3d:2d:ac:40:6b:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F1:C8:E4:CC:1D:A2:4E:A6:F0:EA:E7:BA:AB:A8:37:FA:3F:6E:E0
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:fc:6b:59:05:41:e8:d0:04:11:89:f9:94:7b:67:af:b6:
         1c:76:ff:30:87:2b:37:33:9e:70:70:cf:65:86:68:75:5f:9b:
         e8:9f:90:cd:fa:2e:60:bd:95:53:4a:7e:70:d5:35:7f:1b:76:
         f6:9d:35:bd:27:bd:cb:b5:d1:89:f5:bf:a5:4d:b4:65:af:cb:
         57:21:65:2c:b2:8d:92:5c:dd:72:52:59:4e:5c:f1:b9:7c:a4:
         f4:5b:bf:11:32:5a:39:40:c4:2e:56:32:b7:f8:da:4c:b5:f3:
         c4:31:83:8d:11:d0:5d:f6:25:76:76:29:64:f9:18:f7:15:e0:
         ab:db:98:0f:31:f1:08:f1:56:b6:eb:6e:33:36:b9:4f:3a:d5:
         d1:04:42:02:0d:a7:8b:cb:65:85:ee:f6:67:4e:4e:bf:54:53:
         2b:97:3c:35:26:80:7c:bc:ab:df:f8:7d:07:c6:a9:93:7f:e7:
         40:53:8e:5d:65:8f:f6:c0:82:a8:fd:56:78:28:50:8a:eb:5e:
         07:e8:a7:51:f5:33:21:17:cf:9a:74:3e:30:5a:95:7e:99:37:
         33:ed:7e:55:3e:9c:42:a5:ba:a5:83:4b:b2:c6:8b:4d:0e:71:
         06:e9:bc:32:35:03:df:21:c2:1a:e9:e0:8c:bb:b9:13:6e:c3:
         dd:c5:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:21:25 2025 by rpki-client