Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
File:                     870F31E28EB6835FE94CC62D908989A74790CB3E.mft (raw, json)
Hash identifier:          fDvQCHUIoPjIwIRVtCKXIzukZVJo0min2ot7+vZR/OU=
Subject key identifier:   F3:FB:EF:29:7E:06:47:60:CA:C8:81:2B:9D:59:AD:3C:EF:61:0C:42
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       4503A9C1D2B72F56A26E8E740D7425E091961E97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
Manifest number:          01BB
Signing time:             Wed 20 Aug 2025 04:45:23 +0000
Manifest this update:     Wed 20 Aug 2025 04:40:23 +0000
Manifest next update:     Thu 21 Aug 2025 04:45:23 +0000
Files and hashes:         1: 34352e3138312e39342e302f32342d3234203d3e20323639313735.roa (hash: CXIDOR7yXoIvJpJwI2DuU5HPQsWtPSKvCxc/9OxSzO8=)
                          2: 34352e3138312e39322e302f32342d3234203d3e20323639313735.roa (hash: ANsqWHqth14ZWKODZ5h13kA4N5vTPS+XeK2sHhiZcN4=)
                          3: 323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa (hash: AW2SfCc6zppvhHGz6SxG9DIIA2feooPiuJKyfHRkQok=)
                          4: 34352e3138312e39352e302f32342d3234203d3e20323639313735.roa (hash: SjygtQFX22/FzomoPm31DbIGuBaLegb3vlo+p8ol3kw=)
                          5: 323830343a316634633a3a2f33322d3332203d3e20323639313735.roa (hash: Zrl/t/CMRhMJlCJGEvYyyQxqG05mwxaiQ+WPmetvHt0=)
                          6: 323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa (hash: cZv95fqT4WVmVWL5fZBzG9QtTPZkgO1mHfqYD17bn2o=)
                          7: 323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (hash: du2RqbrUq8a6d9I0RbUhkw5MuzDLs85TgscUZ10vLUw=)
                          8: 34352e3138312e39322e302f32322d3232203d3e20323639313735.roa (hash: TUNJcvytMLym4XrCjOg+yV6aZ4/obpZkSFF3B+O1fDs=)
                          9: 34352e3138312e39332e302f32342d3234203d3e20323639313735.roa (hash: gFrYbJL+2Y5QMbfE6C6ev2LCgb6PQ39OBse13sF/VNw=)
                          10: 34352e3138312e39322e302f32332d3233203d3e20323639313735.roa (hash: eNTgdwM/7BO4VPgNc0uIrE158KBwvOzCR8H9yY8IDsA=)
                          11: 870F31E28EB6835FE94CC62D908989A74790CB3E.crl (hash: dnDN9oUkhJhK50TdDrfS4mP5ByqBAVLvzvuL54rn5h4=)
                          12: 323830343a316634633a3a2f33332d3333203d3e20323639313735.roa (hash: 92rAgKGyB82YXG+BbGsX61h0T+f7B1KJQ0Xx3x2ovrc=)
                          13: 34352e3138312e39342e302f32332d3233203d3e20323639313735.roa (hash: AQKmRMUbP7dpEjKQSp2/eA0XZS9vIsTmmcXu4ES+Ow4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:03:a9:c1:d2:b7:2f:56:a2:6e:8e:74:0d:74:25:e0:91:96:1e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Aug 20 04:40:23 2025 GMT
            Not After : Aug 21 04:45:23 2025 GMT
        Subject: CN=F3FBEF297E064760CAC8812B9D59AD3CEF610C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:72:64:9f:6f:00:41:03:e8:b6:11:54:6c:
                    d4:20:e8:33:89:3f:3b:71:1f:55:69:4f:69:6b:58:
                    c9:b2:15:01:a2:5e:22:ac:ed:22:c6:e6:ff:78:8b:
                    4c:bb:f8:1b:d2:09:c6:dd:68:e0:31:f2:94:28:1a:
                    41:b2:ab:32:51:f9:d8:71:60:c8:6d:0a:b9:2e:cb:
                    40:e9:a8:ef:ef:71:8b:d0:2e:5e:ac:f7:cc:fb:20:
                    75:c5:ac:0d:c4:04:66:31:2b:6a:d0:56:43:f6:ea:
                    c4:65:ef:8f:a1:9f:a8:a4:14:8e:11:1d:57:0a:85:
                    bc:a0:6c:b1:f2:43:74:c6:f9:af:58:fe:96:7a:25:
                    02:39:4c:9e:73:8f:6b:ae:46:f8:ce:73:f0:57:98:
                    f2:74:9d:7a:94:e7:e2:1d:88:b9:52:f2:21:61:89:
                    8e:68:8e:d2:87:82:03:62:04:89:94:9b:b4:a8:de:
                    3e:99:40:55:62:85:cf:c6:fc:6b:81:42:11:70:d9:
                    9e:eb:82:d7:a3:25:3d:23:cc:c1:59:67:9c:b1:9c:
                    03:44:8e:9b:65:be:c0:4b:c3:aa:c8:37:14:d8:ca:
                    ca:0a:57:9c:69:60:54:02:55:af:16:30:cf:d7:29:
                    f4:8c:4c:09:fb:0f:44:49:9a:aa:15:db:2e:5e:f9:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FB:EF:29:7E:06:47:60:CA:C8:81:2B:9D:59:AD:3C:EF:61:0C:42
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:5f:9d:37:e1:f9:91:e0:c4:19:fc:13:53:24:4a:6e:93:
         c5:51:52:31:b1:4e:e4:1d:a4:77:29:76:ab:a1:8a:5a:13:0f:
         c5:e9:e7:65:29:e4:82:2d:13:a6:56:c4:af:a7:37:51:20:52:
         14:f2:0e:e5:6c:b3:c8:38:23:0f:43:d7:b7:e7:e7:2f:78:3f:
         05:4b:f9:c2:bc:ab:4d:9d:84:c5:81:5e:c8:7b:6e:6d:47:32:
         d3:9a:36:6b:08:65:15:21:a5:a7:ab:bc:3d:41:f2:8f:68:b3:
         a0:0a:35:be:d5:bd:71:44:df:6f:91:9a:30:03:97:df:bb:e8:
         be:e6:c8:cc:df:92:b4:e1:d3:fd:20:c2:ad:fc:db:44:f7:3e:
         36:cb:45:88:4b:a3:12:44:02:68:80:e4:e9:da:73:99:f5:60:
         4e:00:f4:be:78:07:c1:d3:a6:37:78:b4:36:ec:53:38:be:60:
         25:2c:ac:f9:e9:3e:b3:5c:be:ce:5f:c2:8c:08:8f:50:c0:de:
         d1:70:c5:9c:74:4c:eb:f6:01:ab:50:dd:c0:31:f3:d1:17:9f:
         c8:43:91:91:bd:ba:69:87:2d:1c:5b:a8:81:8e:16:fa:95:94:
         29:93:a6:ce:4f:9c:a5:d9:97:4d:ff:d6:11:51:fa:97:db:5b:
         ab:8f:ff:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURQOpwdK3L1aibo50DXQl4JGWHpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwRjMxRTI4RUI2ODM1RkU5NENDNjJEOTA4OTg5QTc0
NzkwQ0IzRTAeFw0yNTA4MjAwNDQwMjNaFw0yNTA4MjEwNDQ1MjNaMDMxMTAvBgNV
BAMTKEYzRkJFRjI5N0UwNjQ3NjBDQUM4ODEyQjlENTlBRDNDRUY2MTBDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTH3Jkn28AQQPothFUbNQg6DOJ
PztxH1VpT2lrWMmyFQGiXiKs7SLG5v94i0y7+BvSCcbdaOAx8pQoGkGyqzJR+dhx
YMhtCrkuy0DpqO/vcYvQLl6s98z7IHXFrA3EBGYxK2rQVkP26sRl74+hn6ikFI4R
HVcKhbygbLHyQ3TG+a9Y/pZ6JQI5TJ5zj2uuRvjOc/BXmPJ0nXqU5+IdiLlS8iFh
iY5ojtKHggNiBImUm7So3j6ZQFVihc/G/GuBQhFw2Z7rgtejJT0jzMFZZ5yxnANE
jptlvsBLw6rINxTYysoKV5xpYFQCVa8WMM/XKfSMTAn7D0RJmqoV2y5e+ZEJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8/vvKX4GR2DKyIErnVmtPO9hDEIwHwYDVR0j
BBgwFoAUhw8x4o62g1/pTMYtkImJp0eQyz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMC84NzBGMzFFMjhFQjY4MzVGRTk0Q0M2MkQ5MDg5ODlBNzQ3OTBDQjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEYzMUUyOEVCNjgzNUZF
OTRDQzYyRDkwODk4OUE3NDc5MENCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3WkxqdEgvMC84
NzBGMzFFMjhFQjY4MzVGRTk0Q0M2MkQ5MDg5ODlBNzQ3OTBDQjNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT1RfnTfh+ZHgxBn8E1MkSm6TxVFSMbFO5B2kdyl2q6GKWhMPxennZSnkgi0T
plbEr6c3USBSFPIO5WyzyDgjD0PXt+fnL3g/BUv5wryrTZ2ExYFeyHtubUcy05o2
awhlFSGlp6u8PUHyj2izoAo1vtW9cUTfb5GaMAOX37vovubIzN+StOHT/SDCrfzb
RPc+NstFiEujEkQCaIDk6dpzmfVgTgD0vngHwdOmN3i0NuxTOL5gJSys+ek+s1y+
zl/CjAiPUMDe0XDFnHRM6/YBq1DdwDHz0RefyEORkb26aYctHFuogY4W+pWUKZOm
zk+cpdmXTf/WEVH6l9tbq4//MA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 16:26:47 2025 by rpki-client