Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
File:                     581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft (raw, json)
Hash identifier:          gSbH20vsKxNvF06yoiSmyHFMeXiYHZUxUEHe+yM3oj0=
Subject key identifier:   D6:70:CD:EA:EC:19:16:6A:B9:EE:D9:C9:01:82:FA:6A:14:68:4A:0F
Authority key identifier: 58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4
Certificate issuer:       /CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
Certificate serial:       75BB39A312AFC976F6014D5FCFB63AF3A5587858
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
Manifest number:          015F
Signing time:             Sun 02 Nov 2025 22:56:53 +0000
Manifest this update:     Sun 02 Nov 2025 22:51:53 +0000
Manifest next update:     Tue 04 Nov 2025 00:20:53 +0000
Files and hashes:         1: 581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl (hash: ivYqD4zFtqhzeltTV2yh/xmxaaHqy2B8z3u8QfqJJSQ=)
                          2: 323830343a393038383a3a2f33322d313238203d3e20323733353538.roa (hash: 7SsgFVf4qilP6riElw0Dsp1S7JCn5aQdOBEBP0daWuw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl
                          rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 00:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:39:a3:12:af:c9:76:f6:01:4d:5f:cf:b6:3a:f3:a5:58:78:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
        Validity
            Not Before: Nov  2 22:51:53 2025 GMT
            Not After : Nov  4 00:20:53 2025 GMT
        Subject: CN=D670CDEAEC19166AB9EED9C90182FA6A14684A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:a2:c6:a7:28:44:7a:d5:a5:af:3f:a9:dd:
                    19:1d:90:f7:6d:82:7f:02:4c:df:9b:d7:06:be:89:
                    c9:f2:48:ee:78:f6:b9:c2:c4:dc:e6:36:c2:af:4c:
                    a9:cf:0d:b2:37:6f:63:d8:19:df:e9:8c:f3:a6:0d:
                    11:5b:2a:5c:a2:16:c1:c7:d5:d1:b6:c7:40:f4:38:
                    d7:b6:52:4f:47:45:af:cf:d1:9e:da:34:ca:2a:06:
                    38:b7:40:e5:aa:3c:2d:f7:49:10:f5:d2:28:48:c8:
                    9b:ad:49:68:07:16:bf:e8:49:b2:4d:de:22:2b:e1:
                    2a:4d:bd:07:54:a0:6e:ab:b4:c1:a4:a7:54:45:ec:
                    93:f5:06:4d:c7:fc:7e:94:94:0e:41:d5:d9:b1:bf:
                    b5:1f:b7:cd:0d:7e:07:cc:8a:5d:b3:ea:0d:a1:78:
                    ca:73:ee:e8:de:9a:98:ea:e4:12:23:2d:21:a6:a8:
                    6c:52:a1:78:c6:8a:05:bd:0e:86:a0:b9:a4:05:43:
                    bc:24:39:0a:d8:d7:b2:4a:ac:b8:79:c4:d2:d2:1c:
                    7f:cf:34:6f:59:85:a5:51:c3:16:72:bc:9f:bc:c6:
                    f3:61:1c:24:45:8a:c4:15:28:e2:ad:be:9b:d4:71:
                    2f:80:12:5b:7b:e2:11:d3:5a:3a:8f:bb:2a:0b:87:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:70:CD:EA:EC:19:16:6A:B9:EE:D9:C9:01:82:FA:6A:14:68:4A:0F
            X509v3 Authority Key Identifier:
                keyid:58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:f4:40:bb:a0:00:c9:c2:b8:69:9f:6f:44:40:8c:f0:cb:
         6b:29:ab:2d:aa:18:a8:88:ac:6f:81:73:20:03:3c:0c:32:dd:
         5d:01:ae:09:3c:d9:04:4c:d2:42:15:dd:a5:c9:01:04:bc:ed:
         d8:ce:ea:8e:df:46:cd:76:4e:05:2e:39:ec:c9:be:75:cf:e4:
         44:08:d6:74:e2:74:6c:ab:91:4f:a2:0a:c7:0f:9b:4e:61:4f:
         5e:5c:d5:e5:2b:f9:0d:1d:1b:26:c6:ee:9d:fb:48:c1:43:18:
         91:a1:ee:10:91:6d:c5:a1:b3:aa:f4:6f:ab:ed:7e:7d:05:10:
         be:54:e9:66:53:de:63:b7:42:eb:0c:fa:fd:75:a2:e0:6e:ff:
         1d:42:0b:2a:5c:bd:2a:2a:ef:e2:a2:5d:ea:f8:b0:05:5c:9f:
         66:8b:a1:ec:43:14:c3:2c:4a:70:3d:21:a9:3a:ba:c4:67:81:
         0a:54:d1:bc:89:90:10:3c:6b:28:84:86:30:56:df:53:d3:b5:
         7c:ee:cf:76:8f:d8:fc:00:64:22:2b:ef:17:6a:ad:d7:09:6d:
         7c:35:82:4b:cc:95:01:7a:50:ae:67:be:d2:60:f3:bc:74:20:
         35:94:5d:4c:7a:5d:0d:29:d5:bf:9b:23:63:07:bb:18:20:6b:
         3c:7b:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:13:21 2025 by rpki-client