Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.mft
File:                     F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.mft (raw, json)
Hash identifier:          kqcoIfWSUjjGADM45BR8d2a6QxkPQnQ47yurYrNeab0=
Subject key identifier:   2D:C0:A7:9C:B4:AA:BD:0E:65:A7:3F:E4:31:76:1E:5E:89:88:45:8B
Authority key identifier: F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5
Certificate issuer:       /CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
Certificate serial:       071F3A38A85B495F08E093B208B4B959BC7E312D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.mft
Manifest number:          0304
Signing time:             Mon 03 Nov 2025 03:15:39 +0000
Manifest this update:     Mon 03 Nov 2025 03:10:39 +0000
Manifest next update:     Tue 04 Nov 2025 05:09:39 +0000
Files and hashes:         1: 3133312e3136312e3234392e302f32342d3234203d3e20323634343033.roa (hash: dfYiWHkz05t07hasXPQXldmrMRdzAf0vgeVHJYYZ+d8=)
                          2: 3133312e3136312e3235312e302f32342d3234203d3e20323634343033.roa (hash: Ovy57V5c7UV6ij91DyxCCT8EBXsUoyaOWf+t0if4saU=)
                          3: 3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa (hash: Wy4Ry1ZA9FPvRYH89gfnwxpCe6RaloAIsmjVnStQvQs=)
                          4: 3133312e3136312e3234382e302f32342d3234203d3e20323634343033.roa (hash: dZ8dUuVJBjaBRhoYGFn6CGvZj85zcvfwqbeWc+Xdsjg=)
                          5: F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl (hash: EboWndHAMZsCT06Pdc9sFgTTlEPDnfaQ07cVr+XFX3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl
                          rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1f:3a:38:a8:5b:49:5f:08:e0:93:b2:08:b4:b9:59:bc:7e:31:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
        Validity
            Not Before: Nov  3 03:10:39 2025 GMT
            Not After : Nov  4 05:09:39 2025 GMT
        Subject: CN=2DC0A79CB4AABD0E65A73FE431761E5E8988458B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:d7:7d:b7:8b:b2:59:80:90:1e:75:b0:46:
                    86:08:89:57:8d:6c:9f:d3:66:1f:34:7c:95:25:a8:
                    6e:05:d8:ca:c4:fd:05:b2:be:4a:05:77:f6:64:96:
                    29:28:8b:7f:1f:f0:66:ef:d4:9b:2b:55:61:4b:79:
                    a9:0a:18:d4:1b:e1:02:5f:04:4a:e7:30:67:42:19:
                    30:d3:e8:46:75:0d:e3:f4:35:52:2a:10:1f:4f:7c:
                    75:bf:1e:44:ad:98:c9:29:b3:c1:f9:3c:6d:8f:5e:
                    ac:f5:30:a6:89:e5:7e:68:f2:3c:b7:0d:ff:e8:72:
                    c9:29:61:e3:88:80:05:03:32:2f:a1:cd:48:48:1e:
                    30:93:39:a1:c2:a1:11:89:db:33:ce:51:bf:72:24:
                    3d:38:94:d6:d0:3e:0e:ea:df:fb:61:61:b4:4a:80:
                    33:00:e4:c0:39:e0:85:0a:9e:a7:6b:16:2b:61:af:
                    32:86:36:d1:85:a2:e2:52:6d:62:df:86:a7:81:82:
                    92:12:10:03:2c:81:a1:01:08:83:e1:03:35:2f:dd:
                    d9:e3:c9:d5:9b:3a:7a:0d:43:cd:3c:a0:12:f2:de:
                    bd:87:19:85:46:77:14:3d:14:1a:a9:58:ee:06:44:
                    33:18:c9:43:a7:15:ee:ef:ca:77:5a:43:9d:97:9b:
                    25:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C0:A7:9C:B4:AA:BD:0E:65:A7:3F:E4:31:76:1E:5E:89:88:45:8B
            X509v3 Authority Key Identifier:
                keyid:F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6b:aa:b9:a9:ad:b1:b1:2e:2f:a7:67:70:01:cd:af:21:0a:
         e5:56:c0:bc:f9:3f:34:71:04:e4:78:b8:0b:f0:44:f0:23:da:
         a2:f8:c8:73:05:1a:89:07:27:6d:34:0c:d6:8f:d0:1c:d7:05:
         99:e4:2c:d8:5d:ce:db:1b:d6:dc:a1:fd:2a:52:0c:2a:ea:d8:
         3c:1c:0c:64:cd:41:7a:90:9f:92:b9:52:5f:b0:4a:f3:bc:43:
         1a:3a:c2:15:3f:50:81:db:3d:56:b7:65:63:64:80:e2:7d:46:
         af:dc:7f:53:a1:90:18:40:c9:b9:c8:e2:01:65:3a:21:05:f8:
         2d:10:e3:c1:15:68:62:56:e7:3a:2f:41:7d:55:62:f5:4e:33:
         86:84:a6:8f:e9:21:d7:8c:7e:5f:a5:f0:f5:8a:36:a6:4b:2a:
         77:44:df:91:f8:bb:94:55:6e:a2:6a:df:a3:86:27:d3:d6:5c:
         ab:fc:08:d0:f8:fd:35:e5:2b:aa:e8:37:a0:7d:66:fe:18:9d:
         a2:e8:70:b8:c2:cd:74:46:1d:0b:8a:22:45:e3:ce:0a:e5:bf:
         b8:71:40:8b:c9:33:a6:c8:69:c6:37:d3:4f:dd:08:e7:5d:b8:
         f8:0f:87:7a:fb:3b:75:d4:50:77:30:5a:ab:7b:c5:5e:94:2b:
         ba:44:2d:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBx86OKhbSV8I4JOyCLS5Wbx+MS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg2RDBCRUM4MENDNjVDODc1RTlGNzYwQzg5QkJFODVC
NUREOENBNTAeFw0yNTExMDMwMzEwMzlaFw0yNTExMDQwNTA5MzlaMDMxMTAvBgNV
BAMTKDJEQzBBNzlDQjRBQUJEMEU2NUE3M0ZFNDMxNzYxRTVFODk4ODQ1OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgldd9t4uyWYCQHnWwRoYIiVeN
bJ/TZh80fJUlqG4F2MrE/QWyvkoFd/Zklikoi38f8Gbv1JsrVWFLeakKGNQb4QJf
BErnMGdCGTDT6EZ1DeP0NVIqEB9PfHW/HkStmMkps8H5PG2PXqz1MKaJ5X5o8jy3
Df/ocskpYeOIgAUDMi+hzUhIHjCTOaHCoRGJ2zPOUb9yJD04lNbQPg7q3/thYbRK
gDMA5MA54IUKnqdrFithrzKGNtGFouJSbWLfhqeBgpISEAMsgaEBCIPhAzUv3dnj
ydWbOnoNQ808oBLy3r2HGYVGdxQ9FBqpWO4GRDMYyUOnFe7vyndaQ52XmyXtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULcCnnLSqvQ5lpz/kMXYeXomIRYswHwYDVR0j
BBgwFoAU+G0L7IDMZch16fdgyJu+hbXdjKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVZb3dTaWRuQWp1S0x4eFVRZUpEc0NETU14YXBveGVGYWZjQXJnSnZL
amUvMS9GODZEMEJFQzgwQ0M2NUM4NzVFOUY3NjBDODlCQkU4NUI1REQ4Q0E1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NkQwQkVDODBDQzY1Qzg3
NUU5Rjc2MEM4OUJCRTg1QjVERDhDQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzVZb3dTaWRuQWp1S0x4eFVRZUpEc0NETU14YXBveGVGYWZjQXJnSnZLamUvMS9G
ODZEMEJFQzgwQ0M2NUM4NzVFOUY3NjBDODlCQkU4NUI1REQ4Q0E1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAimuquamtsbEuL6dncAHNryEK5VbAvPk/NHEE5Hi4C/BE8CPaovjIcwUaiQcn
bTQM1o/QHNcFmeQs2F3O2xvW3KH9KlIMKurYPBwMZM1BepCfkrlSX7BK87xDGjrC
FT9Qgds9VrdlY2SA4n1Gr9x/U6GQGEDJucjiAWU6IQX4LRDjwRVoYlbnOi9BfVVi
9U4zhoSmj+kh14x+X6Xw9Yo2pksqd0Tfkfi7lFVuomrfo4Yn09Zcq/wI0Pj9NeUr
qug3oH1m/hidouhwuMLNdEYdC4oiRePOCuW/uHFAi8kzpshpxjfTT90I5124+A+H
evs7ddRQdzBaq3vFXpQrukQtnQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:25:03 2025 by rpki-client