Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
File:                     D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json)
Hash identifier:          6vlVg8PEKv+7b1ToaNKF8AI9ZSxAqSuEjG79rgEqxqc=
Subject key identifier:   FA:91:D6:4F:21:3C:E8:23:2D:C0:AB:A6:D9:03:5F:59:5F:55:4B:73
Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5
Certificate issuer:       /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
Certificate serial:       5F405F4AFF24A35E7191B8DB78E35E1A1ED6E17B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
Manifest number:          010A
Signing time:             Mon 03 Nov 2025 02:40:15 +0000
Manifest this update:     Mon 03 Nov 2025 02:35:15 +0000
Manifest next update:     Tue 04 Nov 2025 02:40:15 +0000
Files and hashes:         1: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: GJRP5qIAliKFiVVixokSu9DhbVuFVO3qfLnxi81LAtU=)
                          2: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:40:5f:4a:ff:24:a3:5e:71:91:b8:db:78:e3:5e:1a:1e:d6:e1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
        Validity
            Not Before: Nov  3 02:35:15 2025 GMT
            Not After : Nov  4 02:40:15 2025 GMT
        Subject: CN=FA91D64F213CE8232DC0ABA6D9035F595F554B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:26:7d:d4:40:31:81:f7:a4:5b:d7:90:1d:
                    73:3e:9f:c1:bb:81:a9:8e:b6:a0:6f:31:dd:34:c9:
                    b8:56:20:d8:44:3b:8c:c7:96:d5:ff:06:c3:23:a5:
                    8d:1f:6f:3f:6f:24:03:b8:d5:fe:1a:a9:05:dd:75:
                    88:35:53:7d:4d:8e:33:99:8d:06:48:d7:e5:1c:28:
                    9c:47:e9:99:23:21:58:a9:ee:45:ed:38:40:9b:ac:
                    92:bb:4b:6a:fa:d4:70:94:bd:c1:50:c5:0d:73:b4:
                    45:c9:35:d6:eb:11:f3:d5:c6:36:7d:34:f2:43:01:
                    2c:a8:bb:6e:95:e9:44:97:75:43:54:79:6e:c0:85:
                    89:de:60:06:e3:11:a2:26:84:0c:d3:04:e8:24:19:
                    70:95:d7:1d:30:7e:3b:61:66:44:c0:d7:dd:98:88:
                    5c:db:b4:c3:34:56:5e:fd:69:a4:5f:10:af:e9:42:
                    36:b3:d0:c1:f1:ea:58:14:6b:a6:c1:a5:9e:10:08:
                    55:ae:38:ff:f3:25:73:db:8a:b9:10:6d:5e:8a:3f:
                    7c:5f:3d:1b:f7:ba:9c:07:4f:98:74:17:e6:a0:8c:
                    70:b0:44:40:dd:5d:50:fa:a7:cc:76:a3:fa:f0:81:
                    6d:4b:a0:71:08:42:85:bd:d8:b0:9a:80:ac:54:33:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:91:D6:4F:21:3C:E8:23:2D:C0:AB:A6:D9:03:5F:59:5F:55:4B:73
            X509v3 Authority Key Identifier:
                keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:ea:5f:83:8d:c2:07:93:cd:57:91:2d:aa:18:0f:a4:3a:
         53:b8:85:a7:f1:ce:9c:6e:93:f2:90:1c:ca:3b:cf:4d:9e:7c:
         2e:39:99:ff:ee:65:f0:00:01:1a:2b:99:44:31:ab:f4:42:29:
         7f:74:09:2b:8c:bf:32:ac:c0:7c:8f:60:5d:34:33:fa:d8:d9:
         98:34:34:29:2d:cb:fe:26:cf:c9:69:98:44:a6:f5:be:10:67:
         2f:fb:4c:c5:a4:f5:cf:d3:87:b0:36:d7:c5:4d:9f:1e:68:be:
         aa:5b:85:d8:a2:7c:7e:39:cd:1c:94:58:ab:22:41:5b:62:69:
         ad:59:ac:2b:9b:13:1c:10:5f:d1:74:26:a8:07:24:77:5f:99:
         4e:0b:8c:e8:85:01:3a:2e:2d:75:e3:42:9c:be:60:09:ad:78:
         5c:02:f7:38:bc:02:af:60:93:31:cd:19:d8:58:0f:4d:c9:10:
         e2:c2:e7:04:39:27:54:b6:e8:58:0d:d7:e3:e9:5a:32:08:fc:
         dd:6c:ae:4c:e7:b3:2b:9e:40:0f:af:88:34:f1:d5:3e:a9:53:
         00:bf:01:eb:00:e1:bd:0e:e4:31:b9:d4:a4:c5:e3:f5:3f:22:
         36:b2:73:2b:83:50:e8:de:0e:5d:15:8c:68:5d:26:c8:4e:42:
         bf:20:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:11 2025 by rpki-client