Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft
File:                     00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft (raw, json)
Hash identifier:          s1Yi8G+GHxJH66CToNWyDRAYvaUOPqjnvQT4/4j5WtE=
Subject key identifier:   87:6B:1E:F9:86:DA:1D:2E:6C:BD:45:2E:9D:CC:88:FC:5B:02:4E:08
Authority key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18
Certificate issuer:       /CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
Certificate serial:       4731969F5E332E0B5A55005240DD51D550846222
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft
Manifest number:          0D
Signing time:             Thu 18 Sep 2025 09:36:30 +0000
Manifest this update:     Thu 18 Sep 2025 09:31:30 +0000
Manifest next update:     Fri 19 Sep 2025 10:27:30 +0000
Files and hashes:         1: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: Y6yxr1t2ucquhWthqdIZlHIrK+C1q9ZqzNpWy5p7+84=)
                          2: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl (hash: VnSEr+fiOJahZoOvd7IS0voKLpwtewUDD6PUiPHVpE8=)
                          3: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: EcLvYJ5xXNXY5gIzb1pkz+/2vmLJCwdKtVpNSXjcukQ=)
                          4: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: BMY+x9x6EPiDqvs4O5YjGOp4Ob0vxL21fEmA76rw7CE=)
                          5: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: qVFu16WURJiIjC5/CAUBfP8XkesupOfzx1EfYvhtmoU=)
                          6: 3137372e382e302e302f31392d3332203d3e203238333630.roa (hash: q2MM6gW+szcX2JkOtewWGLVXtIPye4Uedtw9vSocUTw=)
                          7: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: R1Zal9MMCa3HpUf3nNLECiokSOkKFmvMggF0dTHKrfU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:31:96:9f:5e:33:2e:0b:5a:55:00:52:40:dd:51:d5:50:84:62:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
        Validity
            Not Before: Sep 18 09:31:30 2025 GMT
            Not After : Sep 19 10:27:30 2025 GMT
        Subject: CN=876B1EF986DA1D2E6CBD452E9DCC88FC5B024E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:10:17:17:84:62:1f:b7:f5:58:31:00:77:
                    2a:c6:6d:4e:c7:88:15:bb:ab:bb:9f:34:e2:82:ef:
                    cb:e1:85:c0:65:fa:9e:43:4d:6e:4c:51:14:73:a7:
                    a7:e9:41:87:ac:1c:49:9e:b7:2a:fd:e6:35:6d:99:
                    d6:2d:be:80:12:d5:97:c3:3f:f5:90:bf:f7:c5:75:
                    9d:b1:50:b8:01:63:8b:29:23:85:b7:e7:ee:d8:8f:
                    c6:a7:e7:20:4d:93:cc:8c:72:18:8b:3f:f7:21:17:
                    ce:dd:08:06:ce:52:c6:9a:94:c7:7d:12:dc:47:09:
                    ff:de:21:95:a1:cf:5b:8e:79:7f:4e:7e:16:41:f9:
                    8d:a8:0f:b3:ae:cf:d9:63:0c:22:2c:58:2b:50:17:
                    d0:c8:02:a1:3a:31:8e:b2:8d:df:ab:98:46:30:e9:
                    9a:ad:6c:b4:00:37:38:da:38:07:f0:52:71:27:e3:
                    ef:8a:49:09:7f:57:ba:ca:45:13:a8:c7:fa:a5:a6:
                    31:67:a1:1e:5e:3c:76:88:33:2d:d0:ba:e4:e9:c8:
                    89:ad:1c:43:03:b5:f1:0b:ef:2d:61:5f:e0:61:90:
                    06:0e:75:f5:59:96:38:ed:f9:5a:2c:60:28:6e:3c:
                    dc:40:c3:8a:e8:2d:41:44:87:e5:c7:56:9b:1d:05:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:1E:F9:86:DA:1D:2E:6C:BD:45:2E:9D:CC:88:FC:5B:02:4E:08
            X509v3 Authority Key Identifier:
                keyid:00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:03:f6:82:2b:37:0a:bf:81:5e:36:85:03:99:20:0a:fc:69:
         4d:7d:29:2d:7b:21:b3:05:26:5e:a7:03:6b:77:ab:1d:4f:34:
         30:f4:32:50:04:33:bf:22:6b:dd:b2:18:fd:eb:65:96:48:e4:
         c1:fd:fa:c5:a0:cb:fd:de:a4:b5:c9:e6:36:c4:76:00:e6:58:
         2a:1b:55:94:25:c3:79:21:95:65:af:f1:c4:ed:cc:3d:3e:f8:
         a3:c2:dc:bc:13:75:0c:a6:f7:06:a4:2c:4c:f0:41:d2:8c:30:
         b3:8f:35:88:b2:fb:45:5f:45:1e:bb:96:88:85:f2:11:94:a2:
         77:8a:77:32:37:c4:94:cc:49:0e:76:52:c4:27:ff:b5:fb:d0:
         13:cb:f2:f5:13:b8:e1:30:b3:d4:66:7c:57:47:82:48:92:dd:
         e6:7a:23:c7:0b:18:ad:b0:a1:99:7b:7d:c4:b2:cd:5d:a2:50:
         fb:d5:eb:84:09:36:74:fb:af:6e:36:27:11:22:75:f9:1d:28:
         9c:04:38:1b:a4:4d:e6:79:10:d8:3f:00:a9:7f:4b:a0:4c:0a:
         cf:f6:3f:b5:db:c3:0c:1a:c3:d0:6c:a0:c4:53:ee:9b:ee:fb:
         61:2e:7f:0e:7d:1e:73:22:3b:ea:06:40:ec:9f:ae:3a:00:cc:
         4a:6b:5a:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURzGWn14zLgtaVQBSQN1R1VCEYiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBBQTVCODU3N0MwNjk3Qzg0NDM3NUQ0RUY0NDAwQTM3
RkE3RkExODAeFw0yNTA5MTgwOTMxMzBaFw0yNTA5MTkxMDI3MzBaMDMxMTAvBgNV
BAMTKDg3NkIxRUY5ODZEQTFEMkU2Q0JENDUyRTlEQ0M4OEZDNUIwMjRFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKBAXF4RiH7f1WDEAdyrGbU7H
iBW7q7ufNOKC78vhhcBl+p5DTW5MURRzp6fpQYesHEmetyr95jVtmdYtvoAS1ZfD
P/WQv/fFdZ2xULgBY4spI4W35+7Yj8an5yBNk8yMchiLP/chF87dCAbOUsaalMd9
EtxHCf/eIZWhz1uOeX9OfhZB+Y2oD7Ouz9ljDCIsWCtQF9DIAqE6MY6yjd+rmEYw
6ZqtbLQANzjaOAfwUnEn4++KSQl/V7rKRROox/qlpjFnoR5ePHaIMy3QuuTpyImt
HEMDtfEL7y1hX+BhkAYOdfVZljjt+VosYChuPNxAw4roLUFEh+XHVpsdBXU9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUh2se+YbaHS5svUUuncyI/FsCTggwHwYDVR0j
BBgwFoAUAKpbhXfAaXyEQ3XU70QAo3+n+hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wMEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQUE1Qjg1NzdDMDY5N0M4
NDQzNzVENEVGNDQwMEEzN0ZBN0ZBMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkozUDIvMC8w
MEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUgP2gis3Cr+BXjaFA5kgCvxpTX0pLXshswUmXqcDa3erHU80MPQyUAQzvyJr
3bIY/etllkjkwf36xaDL/d6ktcnmNsR2AOZYKhtVlCXDeSGVZa/xxO3MPT74o8Lc
vBN1DKb3BqQsTPBB0owws481iLL7RV9FHruWiIXyEZSid4p3MjfElMxJDnZSxCf/
tfvQE8vy9RO44TCz1GZ8V0eCSJLd5nojxwsYrbChmXt9xLLNXaJQ+9XrhAk2dPuv
bjYnESJ1+R0onAQ4G6RN5nkQ2D8AqX9LoEwKz/Y/tdvDDBrD0GygxFPum+77YS5/
Dn0ecyI76gZA7J+uOgDMSmtavw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 13:50:02 2025 by rpki-client