Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
File:                     695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft (raw, json)
Hash identifier:          rcYY+wiWO0YgjRSRTkSc101B6QV4SJzeXCk70BWzACk=
Subject key identifier:   D4:D1:23:D4:E0:15:9F:A2:5D:70:ED:06:A0:E6:02:52:75:07:D0:58
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       588F9B33871947C4365ABB81997C09FC581511A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
Manifest number:          013B
Signing time:             Mon 03 Nov 2025 21:52:53 +0000
Manifest this update:     Mon 03 Nov 2025 21:47:53 +0000
Manifest next update:     Tue 04 Nov 2025 23:18:53 +0000
Files and hashes:         1: 323830343a313139343a3a2f33322d313238203d3e20323633343234.roa (hash: qRpe3HMunOlDvbnsvh59LbRtj4Tl6ZLH4gik3VMaTCc=)
                          2: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (hash: XqR77qLnVQPjvW+NdcPMVLhS20GCaBS3cER2/qIQpkE=)
                          3: 3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (hash: 5x0qHXKy052VE9+a2c/CKxVgKs0GgOqzJVo2yGxQ3ro=)
                          4: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (hash: QNYexqxi8ZgpvO1oIsW72rOjkHsbCORODUg23wwI2QE=)
                          5: 3137302e38322e3131362e302f32322d3332203d3e20323633343234.roa (hash: Bq7jYvlTzFbRiuY4gjDAmQq+hoFOYx9hFEexWG876XM=)
                          6: 3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (hash: 05bv3rwHFKdXP0ka5nwmC7aUxyM/kFqlL8VfT5VE/hg=)
                          7: AS263424.asa (hash: X2lwCnyIjJZQCVi9tOO9WwYnQKJe3byjUNKmKRdkgaw=)
                          8: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl (hash: qL09W4D+qVk2uqWl5w4ksjkVxd0EFtGxlsFuftWpf/U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8f:9b:33:87:19:47:c4:36:5a:bb:81:99:7c:09:fc:58:15:11:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Nov  3 21:47:53 2025 GMT
            Not After : Nov  4 23:18:53 2025 GMT
        Subject: CN=D4D123D4E0159FA25D70ED06A0E602527507D058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:bc:4c:21:5b:0f:6d:19:82:e5:1b:35:d4:
                    a7:b6:3a:be:26:e0:f1:6f:21:3c:db:02:ef:77:df:
                    28:67:67:e8:22:09:f3:0d:42:d9:e0:38:2f:aa:b6:
                    66:60:6e:36:62:f4:17:6c:44:b8:86:f1:47:b8:8c:
                    55:20:cc:9d:f1:5c:35:0e:a9:3f:ff:08:da:fa:3c:
                    bb:44:8f:52:1f:1e:c8:6c:6c:03:d5:9d:13:91:14:
                    a8:7c:0a:4d:77:ef:e5:3f:46:b7:47:a7:08:52:e5:
                    56:f9:f8:d8:36:d3:c5:ad:c3:c5:66:7f:02:7d:d4:
                    e9:52:0b:a1:b4:1d:2b:9b:0c:99:04:85:cb:13:9c:
                    0a:a3:83:53:44:9c:a3:30:bd:79:41:d7:b7:3e:10:
                    e0:bb:18:5c:4c:e9:65:83:ca:9b:23:6f:04:09:36:
                    cc:e9:05:9d:3a:f6:8f:1d:29:25:e7:ea:db:87:40:
                    3a:21:df:65:60:44:8e:d8:e3:ea:b9:45:30:47:05:
                    5c:b0:54:fa:b6:c1:fa:33:28:af:90:fe:49:f0:5a:
                    f6:65:db:75:aa:81:a4:14:43:d7:ec:e0:40:1e:35:
                    5d:ab:ff:f5:67:77:c0:9d:49:94:03:0d:27:3e:05:
                    fa:bb:8c:d6:d6:a6:06:02:95:3d:02:4c:d5:a8:47:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:23:D4:E0:15:9F:A2:5D:70:ED:06:A0:E6:02:52:75:07:D0:58
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:78:c2:24:dd:a4:00:c0:e7:52:80:e6:46:98:ed:be:33:
         2e:d2:14:f5:ce:00:7a:be:1f:a2:ca:42:71:00:ba:35:cd:26:
         fb:79:d8:ed:8c:60:7d:15:21:9c:f9:ab:85:0a:c8:af:dd:06:
         f4:86:36:0c:18:65:30:60:e2:60:f6:28:28:90:95:51:09:bd:
         a2:de:43:19:ec:bb:85:65:91:e2:ac:f8:42:47:b9:ed:3b:d9:
         ba:da:a8:96:8b:7c:d4:d7:ec:c5:0c:bd:84:bc:71:cb:94:88:
         c2:bd:78:a1:fd:30:37:79:87:77:95:0f:81:a7:2b:f2:37:68:
         b0:2e:3d:11:28:6c:e8:f9:58:7e:72:00:f6:18:28:70:d4:dc:
         d5:18:38:df:99:b3:a7:7b:5c:56:12:fb:d2:66:94:7b:97:4b:
         ad:1d:08:ef:d4:e8:8b:5e:2f:84:6e:66:22:55:32:fd:1a:c5:
         fb:e7:df:67:a7:ca:1c:a4:fc:be:c9:21:77:7a:20:47:52:ce:
         91:f8:41:1a:84:f5:14:2b:80:5c:f2:3f:3e:b8:d4:c1:48:50:
         b2:7a:fc:fc:7c:4f:e1:8c:d9:d7:9a:11:5a:70:31:6d:03:21:
         23:f1:e5:85:56:26:d9:d1:b0:35:85:81:48:8c:16:95:41:9c:
         2e:fa:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:26:58 2025 by rpki-client