Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
File:                     CBB8A038671DF77F8F9579424916B82CCF45F66A.mft (raw, json)
Hash identifier:          Dl9nRSma5nwmVIgK0Cv33nCZufJ7cXy7V0U/ObKYLEE=
Subject key identifier:   05:84:5B:2B:FF:E5:5B:8A:9F:AD:48:E8:0E:13:A8:34:C2:39:EE:D2
Authority key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
Certificate issuer:       /CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
Certificate serial:       0F3B5BC0823500EB226E5D3ED6892AF41B9062CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
Manifest number:          027C
Signing time:             Thu 18 Sep 2025 09:20:50 +0000
Manifest this update:     Thu 18 Sep 2025 09:15:50 +0000
Manifest next update:     Fri 19 Sep 2025 10:01:50 +0000
Files and hashes:         1: 323830343a323664633a3a2f33322d3438203d3e20323633383631.roa (hash: L76D7obGrGrGOSqjmP2LByNTd+coHbUwi6bz+t8bMZ8=)
                          2: CBB8A038671DF77F8F9579424916B82CCF45F66A.crl (hash: 4BVdU2YqVYS8f5oBm/826LTRwzQbC0/lnPxevu+2dD4=)
                          3: 3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa (hash: ylKLBA46nPd7SSwT5MJlkcpCfmZ5mt/KAcixPXGZuno=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl
                          rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3b:5b:c0:82:35:00:eb:22:6e:5d:3e:d6:89:2a:f4:1b:90:62:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
        Validity
            Not Before: Sep 18 09:15:50 2025 GMT
            Not After : Sep 19 10:01:50 2025 GMT
        Subject: CN=05845B2BFFE55B8A9FAD48E80E13A834C239EED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:d8:65:12:6a:e0:1e:c0:1f:3d:7b:03:48:
                    f2:43:4d:8c:d3:dd:c8:95:65:23:86:c0:fe:e3:0e:
                    1b:d9:9f:df:56:7a:84:cb:8b:cc:e7:63:bf:ef:ac:
                    24:d1:fd:e0:23:7a:1f:ae:a5:de:72:8c:4a:39:db:
                    95:b6:6b:72:2a:b8:ca:a3:e1:83:ad:37:82:44:cf:
                    b7:ef:c8:d5:2f:2a:90:1c:2b:e2:5c:46:dd:6b:43:
                    2e:34:c2:ff:64:aa:8a:06:71:18:c9:91:7c:3d:56:
                    89:54:0e:bf:47:bc:b8:2f:c9:c2:27:cf:99:2d:a0:
                    92:51:0d:3d:60:5a:c5:64:25:57:74:17:cc:d6:9f:
                    50:30:40:63:cb:df:36:e3:81:9b:d9:7b:1a:75:3c:
                    7f:49:07:86:f1:ae:37:aa:d4:e4:2c:59:28:35:54:
                    4a:f3:8f:2d:ee:0d:98:6e:e0:14:a3:c5:68:b3:ce:
                    55:c7:e3:be:32:e5:85:20:f7:b0:34:4d:f6:81:27:
                    f3:84:11:1e:01:9b:b6:af:00:34:ea:56:5d:d9:82:
                    4b:d2:24:8d:e6:60:fd:74:0d:20:02:ab:8d:c8:f8:
                    f6:95:3e:7c:2b:11:d3:2c:7c:2d:b1:45:2b:16:35:
                    0e:0d:6e:74:da:36:4f:85:b2:42:9c:12:ff:46:34:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:5B:2B:FF:E5:5B:8A:9F:AD:48:E8:0E:13:A8:34:C2:39:EE:D2
            X509v3 Authority Key Identifier:
                keyid:CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:3f:dd:18:4c:42:b6:62:6a:27:7f:c8:f3:12:08:f7:d1:
         e7:8e:97:74:ff:13:61:0b:bf:f9:16:eb:50:5e:6d:05:ee:dc:
         a1:dd:5d:ad:ea:47:f8:da:c5:34:e1:d5:3f:7c:ed:62:2a:1e:
         6f:b1:b0:8a:19:e4:af:1f:ba:32:83:15:a9:70:b7:d8:5b:45:
         41:78:61:e5:c6:bd:40:e0:9e:f9:41:c6:25:6f:23:06:50:8e:
         a6:6d:0f:26:e0:f6:1a:05:bc:66:33:a5:26:96:f5:1c:d1:4c:
         e3:39:f8:85:59:de:28:91:62:58:cb:e2:f2:1c:cc:4b:50:f8:
         96:85:18:6f:1a:fa:34:31:46:08:ce:df:10:28:06:02:83:89:
         18:bb:a0:ee:3d:98:9e:83:8f:24:10:4e:5d:c6:9c:e1:79:c1:
         74:41:f4:c8:27:ea:e1:17:de:33:f6:94:f7:54:89:4f:c5:b1:
         d3:61:0e:8c:a4:31:8a:ed:1f:aa:c5:cd:6c:7f:86:11:30:53:
         90:c1:7c:57:6f:10:8b:37:c1:5f:7b:c3:88:3f:48:36:ca:96:
         da:06:a5:f2:ba:af:a6:ac:ee:6c:7e:c7:1e:76:92:64:d2:08:
         ff:2c:f4:01:14:70:24:fe:89:95:47:de:c7:44:34:19:0b:61:
         6c:03:8b:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDztbwII1AOsibl0+1okq9BuQYs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JCOEEwMzg2NzFERjc3RjhGOTU3OTQyNDkxNkI4MkND
RjQ1RjY2QTAeFw0yNTA5MTgwOTE1NTBaFw0yNTA5MTkxMDAxNTBaMDMxMTAvBgNV
BAMTKDA1ODQ1QjJCRkZFNTVCOEE5RkFENDhFODBFMTNBODM0QzIzOUVFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrndhlEmrgHsAfPXsDSPJDTYzT
3ciVZSOGwP7jDhvZn99WeoTLi8znY7/vrCTR/eAjeh+upd5yjEo525W2a3IquMqj
4YOtN4JEz7fvyNUvKpAcK+JcRt1rQy40wv9kqooGcRjJkXw9VolUDr9HvLgvycIn
z5ktoJJRDT1gWsVkJVd0F8zWn1AwQGPL3zbjgZvZexp1PH9JB4bxrjeq1OQsWSg1
VErzjy3uDZhu4BSjxWizzlXH474y5YUg97A0TfaBJ/OEER4Bm7avADTqVl3ZgkvS
JI3mYP10DSACq43I+PaVPnwrEdMsfC2xRSsWNQ4NbnTaNk+FskKcEv9GNJZzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBYRbK//lW4qfrUjoDhOoNMI57tIwHwYDVR0j
BBgwFoAUy7igOGcd93+PlXlCSRa4LM9F9mowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFJwSDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1
RG8vMC9DQkI4QTAzODY3MURGNzdGOEY5NTc5NDI0OTE2QjgyQ0NGNDVGNjZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQjhBMDM4NjcxREY3N0Y4
Rjk1Nzk0MjQ5MTZCODJDQ0Y0NUY2NkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFJwSDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1RG8vMC9D
QkI4QTAzODY3MURGNzdGOEY5NTc5NDI0OTE2QjgyQ0NGNDVGNjZBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPuE/3RhMQrZiaid/yPMSCPfR546XdP8TYQu/+RbrUF5tBe7cod1drepH+NrF
NOHVP3ztYioeb7Gwihnkrx+6MoMVqXC32FtFQXhh5ca9QOCe+UHGJW8jBlCOpm0P
JuD2GgW8ZjOlJpb1HNFM4zn4hVneKJFiWMvi8hzMS1D4loUYbxr6NDFGCM7fECgG
AoOJGLug7j2YnoOPJBBOXcac4XnBdEH0yCfq4RfeM/aU91SJT8Wx02EOjKQxiu0f
qsXNbH+GETBTkMF8V28QizfBX3vDiD9INsqW2gal8rqvpqzubH7HHnaSZNII/yz0
ARRwJP6JlUfex0Q0GQthbAOL6g==
-----END CERTIFICATE-----
Generated at Thu Sep 18 10:22:14 2025 by rpki-client