Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
File:                     C5423CDD002348905AC2D36D7816B81D97846978.mft (raw, json)
Hash identifier:          wvNJOewAlYDy8BKV1GkE58IhVxfHS24mtLR2m9R7RTU=
Subject key identifier:   13:83:BC:BE:6F:6F:DA:24:B2:76:08:DE:77:07:4D:08:44:8D:74:07
Authority key identifier: C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78
Certificate issuer:       /CN=C5423CDD002348905AC2D36D7816B81D97846978
Certificate serial:       4FCB7DC115A8131DD2C9CE4A540E4702F7AC482A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
Manifest number:          2E
Signing time:             Mon 03 Nov 2025 16:44:38 +0000
Manifest this update:     Mon 03 Nov 2025 16:39:38 +0000
Manifest next update:     Tue 04 Nov 2025 17:17:38 +0000
Files and hashes:         1: 323830343a363234383a346330303a3a2f33382d3338203d3e20323639323838.roa (hash: LwUxlK8xEOi6aUOThzIkF746qcNllmDI5O1/KuVsrX8=)
                          2: 323830343a363234383a383030303a3a2f33332d3333203d3e20323639323838.roa (hash: r/ZXCGmumyKG+OR888CR2aMc3/dhLAjr4nXTUGZIBg8=)
                          3: 34352e3138332e3136352e302f32342d3234203d3e20323639323838.roa (hash: zyDsEY4ZAV0sl3Uszl3g1iMc0aWyKhZN7pMENpVB6bU=)
                          4: 34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa (hash: d8u5h26uasxQo7tRx+fU4yN6m3APz8uOf4bD0Ypd4dk=)
                          5: 34352e3138332e3136372e302f32342d3234203d3e20323639323838.roa (hash: XViF6KpgR8BimVjbtsk8BB56gelnkdHBfAT2I9fNMpU=)
                          6: 34352e3138332e3136342e302f32342d3234203d3e20323639323838.roa (hash: B0FwVmwclHCVJQzLdtp79AAs/NW1LCY9cw1fldgL6d0=)
                          7: C5423CDD002348905AC2D36D7816B81D97846978.crl (hash: EdLpgiDtlNOyX87zfhAhBzKZl+8zA1uh5JkFVW5ao8o=)
                          8: 34352e3138332e3136362e302f32342d3234203d3e20323639323838.roa (hash: cxDd+okJkjtg47HvDfFnuvmdDyRXUKijnUErHTNTcuc=)
                          9: 323830343a363234383a353030303a3a2f33382d3338203d3e20323639323838.roa (hash: +VdQ3er5Av62lFRjCIOwCrakBNaeL3MKZeRzpYfNzn8=)
                          10: 323830343a363234383a343030303a3a2f33352d3335203d3e20323639323838.roa (hash: NWIjtBSJw6Jrjc2FUNODpR+R5MJpOCh/b2DrK7s/GR0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cb:7d:c1:15:a8:13:1d:d2:c9:ce:4a:54:0e:47:02:f7:ac:48:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5423CDD002348905AC2D36D7816B81D97846978
        Validity
            Not Before: Nov  3 16:39:38 2025 GMT
            Not After : Nov  4 17:17:38 2025 GMT
        Subject: CN=1383BCBE6F6FDA24B27608DE77074D08448D7407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:ac:77:20:4a:4d:3d:b0:ae:e3:81:c1:80:
                    56:fd:63:18:7b:66:c9:6d:3d:b9:88:55:23:de:f4:
                    52:d0:41:22:a7:ba:59:d0:f6:22:4f:30:71:6d:87:
                    e9:e8:54:86:b6:d3:11:99:2c:68:d6:47:54:69:47:
                    5b:cf:86:01:f1:7d:18:15:f8:2e:6a:de:5c:44:78:
                    4f:7f:96:68:5c:e5:54:20:17:80:2c:21:7d:33:99:
                    09:07:7e:a8:55:32:11:f2:76:42:c7:6a:6f:24:05:
                    68:62:e0:88:20:2d:f6:ef:5f:ec:d0:aa:2e:c1:d8:
                    0e:e6:ff:f3:95:9d:08:3b:5c:c9:2b:f1:47:a2:5f:
                    31:37:17:a4:88:ec:b8:4b:f5:04:4a:a1:57:a5:aa:
                    d8:fe:dd:bd:3e:84:45:33:b2:99:13:a9:23:ab:61:
                    fc:ce:e3:7e:1a:7a:f6:90:bf:a8:ae:f7:bd:78:5b:
                    62:46:9a:74:b0:79:12:a3:2e:71:43:aa:9a:d6:86:
                    0f:95:68:b5:e2:eb:81:0e:c3:f7:74:2b:f8:bf:3b:
                    56:96:f2:d1:a1:b7:33:a2:15:38:8e:c5:34:10:63:
                    93:76:2d:ad:b9:32:be:e8:ee:59:d3:24:c0:85:ce:
                    ba:cf:f2:98:b5:4b:06:f8:e8:ef:dc:b1:a9:d9:96:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:83:BC:BE:6F:6F:DA:24:B2:76:08:DE:77:07:4D:08:44:8D:74:07
            X509v3 Authority Key Identifier:
                keyid:C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ab:4c:e6:3f:17:16:4e:70:9a:f6:e0:f6:32:3a:d9:3b:0c:
         db:06:0b:42:e1:80:a0:48:76:f6:9b:72:aa:3b:34:40:4c:6e:
         be:c0:c7:9a:d3:18:e6:78:4b:95:10:43:43:f1:cf:82:b8:86:
         c0:bc:79:09:f2:22:58:7b:78:24:4a:98:63:b4:47:59:99:e4:
         e3:ff:f1:3e:b5:a3:20:2b:38:a2:93:f7:46:78:64:53:47:0e:
         68:93:e9:20:77:18:fd:1a:08:9d:fd:46:cc:03:93:09:1d:22:
         e0:1c:c3:6e:47:57:e7:b0:6a:52:1a:85:b2:76:73:5a:e8:c2:
         3b:08:e0:f3:16:78:ba:fd:70:3c:52:a5:5b:70:f5:1e:14:be:
         16:62:8d:c3:b5:8e:9b:45:e1:6a:81:4b:4b:1e:b3:30:2e:de:
         c7:66:8b:51:82:09:d4:f9:a0:c3:e5:d1:77:30:2b:25:c5:0c:
         5f:9b:d4:bf:83:fe:cf:ea:e4:74:cf:03:10:49:59:68:78:c1:
         b7:39:ee:8f:3d:a8:f5:a5:92:b0:4c:fa:b0:d0:01:c5:0a:5d:
         c6:c9:5a:91:2a:dc:b5:0b:ab:a3:70:15:4b:23:f3:b0:7a:0b:
         7f:12:4e:cd:0c:fa:ec:c9:36:71:99:f5:12:08:da:fa:40:10:
         67:b9:51:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT8t9wRWoEx3Syc5KVA5HAvesSCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU0MjNDREQwMDIzNDg5MDVBQzJEMzZENzgxNkI4MUQ5
Nzg0Njk3ODAeFw0yNTExMDMxNjM5MzhaFw0yNTExMDQxNzE3MzhaMDMxMTAvBgNV
BAMTKDEzODNCQ0JFNkY2RkRBMjRCMjc2MDhERTc3MDc0RDA4NDQ4RDc0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPKx3IEpNPbCu44HBgFb9Yxh7
ZsltPbmIVSPe9FLQQSKnulnQ9iJPMHFth+noVIa20xGZLGjWR1RpR1vPhgHxfRgV
+C5q3lxEeE9/lmhc5VQgF4AsIX0zmQkHfqhVMhHydkLHam8kBWhi4IggLfbvX+zQ
qi7B2A7m//OVnQg7XMkr8UeiXzE3F6SI7LhL9QRKoVelqtj+3b0+hEUzspkTqSOr
YfzO434aevaQv6iu9714W2JGmnSweRKjLnFDqprWhg+VaLXi64EOw/d0K/i/O1aW
8tGhtzOiFTiOxTQQY5N2La25Mr7o7lnTJMCFzrrP8pi1Swb46O/csanZlsj3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUE4O8vm9v2iSydgjedwdNCESNdAcwHwYDVR0j
BBgwFoAUxUI83QAjSJBawtNteBa4HZeEaXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGpDRzJWcVFGNjRlQXlxZXFhbTd5OVNwYmE3NURXZGFyMlprTEN1dEtN
TGEvMC9DNTQyM0NERDAwMjM0ODkwNUFDMkQzNkQ3ODE2QjgxRDk3ODQ2OTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1NDIzQ0REMDAyMzQ4OTA1
QUMyRDM2RDc4MTZCODFEOTc4NDY5NzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGpDRzJWcVFGNjRlQXlxZXFhbTd5OVNwYmE3NURXZGFyMlprTEN1dEtNTGEvMC9D
NTQyM0NERDAwMjM0ODkwNUFDMkQzNkQ3ODE2QjgxRDk3ODQ2OTc4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl6tM5j8XFk5wmvbg9jI62TsM2wYLQuGAoEh29ptyqjs0QExuvsDHmtMY5nhL
lRBDQ/HPgriGwLx5CfIiWHt4JEqYY7RHWZnk4//xPrWjICs4opP3RnhkU0cOaJPp
IHcY/RoInf1GzAOTCR0i4BzDbkdX57BqUhqFsnZzWujCOwjg8xZ4uv1wPFKlW3D1
HhS+FmKNw7WOm0XhaoFLSx6zMC7ex2aLUYIJ1Pmgw+XRdzArJcUMX5vUv4P+z+rk
dM8DEElZaHjBtznujz2o9aWSsEz6sNABxQpdxslakSrctQuro3AVSyPzsHoLfxJO
zQz67Mk2cZn1Egja+kAQZ7lRRg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:46:07 2025 by rpki-client