Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
File:                     D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json)
Hash identifier:          3wk1M/Z89bHQAs/vZaiC76yc0b3jUtMAshKj3gVy9Oo=
Subject key identifier:   42:D8:9E:A1:24:8F:FD:32:29:14:85:95:52:E2:15:BE:24:4B:DA:37
Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5
Certificate issuer:       /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
Certificate serial:       3C0925A73D8289257C82E778A952E4CCE36C0C5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
Manifest number:          CE
Signing time:             Wed 17 Sep 2025 17:47:02 +0000
Manifest this update:     Wed 17 Sep 2025 17:42:01 +0000
Manifest next update:     Thu 18 Sep 2025 19:55:01 +0000
Files and hashes:         1: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=)
                          2: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: MhqwufabHq6zibrc1ICtHn09UxS4bNjV3JxXVspvFws=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:09:25:a7:3d:82:89:25:7c:82:e7:78:a9:52:e4:cc:e3:6c:0c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
        Validity
            Not Before: Sep 17 17:42:01 2025 GMT
            Not After : Sep 18 19:55:01 2025 GMT
        Subject: CN=42D89EA1248FFD322914859552E215BE244BDA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:d0:13:1e:74:9a:a3:74:4b:a2:24:a7:50:
                    42:2e:6a:f5:ef:20:ba:d0:39:bd:8c:f5:9c:d6:0d:
                    88:19:03:2f:76:69:f8:17:fb:98:4f:a4:cf:a8:07:
                    06:f8:4c:aa:54:3b:97:8f:01:e0:53:0c:0b:b0:ba:
                    06:fb:a7:d3:1f:bc:ec:35:58:81:d5:c8:ea:00:47:
                    f9:7d:a1:6c:1a:2c:b3:b4:69:82:b7:56:ad:2e:11:
                    cc:3c:74:3e:8e:57:9b:7c:fb:02:cd:36:1e:76:7a:
                    6f:ea:66:8e:be:b1:59:21:3e:8f:d4:18:da:0e:be:
                    d8:aa:a3:5e:aa:d3:05:19:1d:e0:02:8e:23:7f:98:
                    e0:8c:f3:f8:2e:16:95:42:8e:b7:72:81:d1:d7:5b:
                    44:52:7b:ea:95:3d:ab:fa:ac:af:e4:3f:0b:c0:ed:
                    e1:55:79:3b:0b:09:e3:30:ad:4b:c6:78:1d:7f:5c:
                    e7:1b:bb:94:b1:30:28:95:ce:1d:bc:e0:ab:1f:c2:
                    96:f5:0d:57:dd:84:e4:fd:25:1f:62:6b:7b:a2:8b:
                    89:5e:cf:09:44:57:d0:98:57:de:af:bb:92:9d:91:
                    89:b1:2e:fc:92:ee:db:da:5a:75:a2:48:25:9f:3d:
                    28:82:3b:b6:d7:2e:df:4c:59:6e:e5:15:9b:d9:d6:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:9E:A1:24:8F:FD:32:29:14:85:95:52:E2:15:BE:24:4B:DA:37
            X509v3 Authority Key Identifier:
                keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:89:fd:b5:c5:94:66:5f:18:ec:14:a5:96:8d:49:76:4c:16:
         f2:5f:a0:58:2d:32:e4:51:10:a4:39:83:82:15:8d:d2:4a:dd:
         db:00:f3:2b:b1:ba:b1:de:71:e7:38:b4:c7:01:22:e5:b3:e5:
         e4:a7:f9:1c:31:da:03:c1:6e:03:19:2e:2e:50:9a:9c:1f:ba:
         ba:bb:2d:44:0f:e0:b1:53:07:c8:6a:b3:3e:d4:48:37:4b:d6:
         80:90:44:99:74:72:6b:91:a5:d7:0c:ca:b6:28:f7:de:32:38:
         97:5c:c2:3d:ce:3b:12:46:9b:cd:c5:9d:ad:ff:87:e8:de:4d:
         0e:07:bc:11:e7:67:30:ad:6e:ca:d5:19:86:a8:e7:87:a0:dc:
         2e:fd:6b:a1:ab:a9:76:c0:4e:8e:f8:4b:2d:86:d7:17:27:51:
         45:fe:af:c3:0d:d6:a1:da:fa:32:f5:6b:9d:d8:4f:8a:f1:60:
         a1:74:6d:df:c4:3c:17:d0:3a:eb:47:e5:f6:b1:21:27:d7:33:
         fa:4b:c4:85:f2:9e:79:8b:e3:c9:29:9c:7b:62:ec:d0:ea:4b:
         75:1a:39:e0:86:c7:f9:3e:3f:fd:a0:60:15:9a:84:24:a5:92:
         50:57:49:8d:75:69:77:0e:fe:ff:05:3c:6c:d4:a9:a6:4a:e2:
         4d:d9:be:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPAklpz2CiSV8gud4qVLkzONsDFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc4QkQ0OUYxNjk4REU5NDhGNDcxMzZCNkI4RDI0ODRG
NTNDNTZENTAeFw0yNTA5MTcxNzQyMDFaFw0yNTA5MTgxOTU1MDFaMDMxMTAvBgNV
BAMTKDQyRDg5RUExMjQ4RkZEMzIyOTE0ODU5NTUyRTIxNUJFMjQ0QkRBMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGn9ATHnSao3RLoiSnUEIuavXv
ILrQOb2M9ZzWDYgZAy92afgX+5hPpM+oBwb4TKpUO5ePAeBTDAuwugb7p9MfvOw1
WIHVyOoAR/l9oWwaLLO0aYK3Vq0uEcw8dD6OV5t8+wLNNh52em/qZo6+sVkhPo/U
GNoOvtiqo16q0wUZHeACjiN/mOCM8/guFpVCjrdygdHXW0RSe+qVPav6rK/kPwvA
7eFVeTsLCeMwrUvGeB1/XOcbu5SxMCiVzh284Ksfwpb1DVfdhOT9JR9ia3uii4le
zwlEV9CYV96vu5KdkYmxLvyS7tvaWnWiSCWfPSiCO7bXLt9MWW7lFZvZ1vDpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQtieoSSP/TIpFIWVUuIVviRL2jcwHwYDVR0j
BBgwFoAU14vUnxaY3pSPRxNra40khPU8VtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5E
MzMvMC9ENzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OEJENDlGMTY5OERFOTQ4
RjQ3MTM2QjZCOEQyNDg0RjUzQzU2RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5EMzMvMC9E
NzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZIn9tcWUZl8Y7BSllo1JdkwW8l+gWC0y5FEQpDmDghWN0krd2wDzK7G6sd5x
5zi0xwEi5bPl5Kf5HDHaA8FuAxkuLlCanB+6urstRA/gsVMHyGqzPtRIN0vWgJBE
mXRya5Gl1wzKtij33jI4l1zCPc47EkabzcWdrf+H6N5NDge8EednMK1uytUZhqjn
h6DcLv1roaupdsBOjvhLLYbXFydRRf6vww3Wodr6MvVrndhPivFgoXRt38Q8F9A6
60fl9rEhJ9cz+kvEhfKeeYvjySmce2Ls0OpLdRo54IbH+T4//aBgFZqEJKWSUFdJ
jXVpdw7+/wU8bNSppkriTdm+0w==
-----END CERTIFICATE-----
Generated at Thu Sep 18 06:23:49 2025 by rpki-client